
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
File: Ixupmdjogk9iIrhWhdB91HpwRts.mft (raw, json)
Hash identifier: tA3MDeW/43Om+gc4O9XQxsSTmfaAUGAHcMB/AlANaY0=
Subject key identifier: D7:3E:58:B4:CC:C6:29:81:E4:E8:26:DE:5F:47:50:F9:DD:EF:37:B6
Authority key identifier: 23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB
Certificate issuer: /CN=A916B95A/serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
Manifest number: 0151
Signing time: Sun 19 Apr 2026 04:43:00 +0000
Manifest this update: Sun 19 Apr 2026 04:42:59 +0000
Manifest next update: Sun 26 Apr 2026 04:42:59 +0000
Files and hashes: 1: Ixupmdjogk9iIrhWhdB91HpwRts.crl (hash: VSolAbN67BotzqcQXP3safgNQYz48y7T5KBzP8gp/48=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl
rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B95A, serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB
Validity
Not Before: Apr 19 04:42:59 2026 GMT
Not After : Apr 26 04:42:59 2026 GMT
Subject: CN=69e45d53-d887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:06:1d:93:f2:49:a6:c2:b1:b0:fb:65:c4:66:
d8:53:bf:5e:64:e9:41:2c:b8:3c:ae:c6:b2:46:12:
4d:5c:dd:4b:a0:d0:54:b9:e4:09:13:73:c3:55:24:
72:d1:3a:22:c0:2b:f8:43:5b:7c:9c:69:61:63:de:
78:4f:a8:3d:49:a2:a5:4c:77:a2:57:fe:70:58:f4:
3c:c6:15:d3:61:4d:7b:e9:a5:28:1f:14:ee:8f:7f:
ae:d1:cd:b9:de:25:b4:d0:d5:3c:08:09:ce:09:64:
0f:19:af:f9:67:8f:71:fb:4c:cc:c2:72:65:81:d4:
ce:ff:bb:a2:4f:a5:23:41:66:5b:e5:c0:11:e1:b6:
2c:93:7a:8c:c8:b7:e9:e8:b9:16:2b:69:8c:aa:da:
53:83:47:74:ec:20:7e:7e:d9:60:60:69:37:b0:3e:
28:cb:a7:f6:45:75:1e:2d:a1:71:64:87:97:62:39:
58:83:7f:f8:9e:56:41:79:f5:07:87:16:f3:fb:15:
c5:0b:72:73:3c:4e:52:8a:3a:76:b0:6d:4b:de:35:
1a:6e:ec:36:cd:df:c7:47:db:a7:cd:e9:ed:30:01:
ee:86:3e:cf:6b:04:db:3b:fa:97:b3:0c:15:63:22:
16:63:51:96:b2:6e:19:6f:f6:3f:25:bc:0a:96:b5:
24:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3E:58:B4:CC:C6:29:81:E4:E8:26:DE:5F:47:50:F9:DD:EF:37:B6
X509v3 Authority Key Identifier:
keyid:23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e2:2e:08:5b:ae:b1:b1:60:4c:fa:f6:c4:df:ff:a5:ab:69:
83:d6:ed:8e:ae:ba:06:44:f4:11:1a:5c:78:20:70:3b:d0:2b:
6e:ba:bb:34:4c:51:f2:25:6f:87:c0:be:9f:d7:18:66:d9:98:
47:8a:54:41:da:e4:81:99:5e:81:ca:0b:49:dd:c4:a2:1a:f6:
2e:1b:66:90:0f:2a:40:3b:6e:83:20:9b:64:03:dd:6d:93:a3:
0d:f9:26:43:bd:4a:a8:be:ff:18:35:df:4d:1f:b0:49:ff:61:
0e:b3:91:d3:e9:88:e6:7e:e4:55:84:64:98:d5:87:99:e9:69:
07:24:28:b5:1b:42:a6:72:d0:f8:2e:4e:22:eb:a3:17:bb:22:
8d:5f:9b:d4:ea:7b:d9:3f:af:c1:fa:e1:51:5b:ea:63:f3:d1:
aa:76:e8:64:38:6a:40:ef:46:81:f6:9a:c2:48:e6:fb:59:26:
32:18:f7:7a:07:f0:d2:d6:93:55:55:ff:f6:2b:d3:52:71:bf:
03:da:48:b2:59:21:d5:bf:ed:3c:33:06:f5:d4:c9:2a:1f:99:
02:32:de:08:d7:48:c1:17:18:63:3b:4f:9c:19:dd:67:bf:1e:
15:40:23:a0:29:63:90:a8:8c:c0:ce:9d:ad:40:5e:4f:cd:f8:
9f:15:b2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:24:34 2026 by rpki-client