
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
File: IiQPt4cqphjT4NSTRdv0JHOtBMc.mft (raw, json)
Hash identifier: mUn33tAV6HMd5uuDz8IEZOSMDZjp1aemc8Bby+UcWnk=
Subject key identifier: 88:CF:28:B7:E1:4B:1D:69:E1:E3:BD:A5:75:94:D9:18:59:97:BD:6C
Authority key identifier: 22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7
Certificate issuer: /CN=A916C38F/serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7
Certificate serial: 0BD9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
Manifest number: 0BC3
Signing time: Mon 02 Mar 2026 00:55:53 +0000
Manifest this update: Mon 02 Mar 2026 00:55:51 +0000
Manifest next update: Mon 09 Mar 2026 00:55:51 +0000
Files and hashes: 1: IiQPt4cqphjT4NSTRdv0JHOtBMc.crl (hash: JeeWlQhWtb75Gc2n5h/MC37Wf+TZ+y4MWoA11I+WscY=)
2: 0F072D383AAE11EAB5D8270EC4F9AE02.roa (hash: MAX4UT1Ii+RIuTizqENWwkr2nZWdLuAGJyPoJoubzUc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl
rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3033 (0xbd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C38F, serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7
Validity
Not Before: Mar 2 00:55:51 2026 GMT
Not After : Mar 9 00:55:51 2026 GMT
Subject: CN=69a4e019-fa1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:d4:28:73:6c:3b:8b:1b:35:f8:95:21:58:
2f:0e:21:7a:db:7b:0a:5f:c7:33:c6:95:51:b2:c8:
d1:fa:43:61:f4:22:b4:a1:60:ab:6f:dc:1f:92:ae:
3e:56:f1:4a:e9:08:af:2a:a1:d7:6c:26:ed:19:7d:
3e:0d:f7:71:41:91:7a:5f:b1:be:b2:3c:34:54:ad:
22:79:b8:ac:9b:23:c8:bd:c0:6f:18:9d:e6:b8:f5:
03:cb:e2:e9:0a:c5:94:dd:15:92:40:56:69:8a:f4:
2b:24:36:8a:c0:77:4e:22:f5:0f:2d:19:cf:61:e7:
43:00:b6:2e:bb:09:78:16:a1:1d:8f:1a:b4:08:c6:
f4:0c:64:f0:bd:09:97:20:fc:a2:5d:53:66:09:fe:
ea:bd:fc:1c:09:eb:9d:58:50:52:fe:a8:77:49:f5:
1a:b1:bd:da:0d:ea:9c:a3:78:a9:d9:a2:9b:85:41:
43:fa:25:20:95:19:f5:d6:5e:19:8b:29:55:ce:35:
69:ef:8f:2a:44:99:16:47:b2:06:9b:8d:4a:1b:40:
1e:1e:62:d6:27:59:a9:4f:b7:a1:14:40:b8:2c:9c:
a8:0f:73:30:42:67:fe:b2:ff:4e:5f:56:a2:af:a6:
4d:84:4f:0a:a3:45:3c:8a:9b:26:52:1b:ba:cf:95:
22:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CF:28:B7:E1:4B:1D:69:E1:E3:BD:A5:75:94:D9:18:59:97:BD:6C
X509v3 Authority Key Identifier:
keyid:22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
eb:39:56:41:77:42:00:39:f4:c4:2b:d9:e7:b8:fe:61:1d:50:
db:c6:4f:b5:28:28:f6:24:81:56:f2:21:20:22:4a:13:67:66:
6a:32:ff:bc:ce:ee:f3:42:79:23:7e:1a:0a:76:b3:00:6d:7f:
e1:cf:24:31:5e:1e:27:a3:ff:ad:df:f2:19:d8:8d:f7:69:79:
13:e2:3d:6a:74:0c:6c:c8:10:fb:81:04:f3:b8:33:e7:07:2e:
17:83:4e:49:6a:89:82:c3:43:2e:1e:69:26:f0:c1:80:f5:ef:
6f:89:b5:a7:6e:1f:84:f1:9f:a6:8f:28:81:f7:35:63:d1:05:
76:39:80:9a:d9:55:a4:40:f9:35:7e:aa:3a:9a:6d:09:97:aa:
a7:35:c4:d8:ec:0b:63:ab:64:83:71:f8:c3:37:91:6a:c0:83:
da:54:1e:6a:e3:7d:ab:18:20:a4:de:a3:55:56:80:6f:d4:89:
f8:9c:87:36:82:b7:44:a3:a5:b8:52:cb:32:ce:34:86:fe:4d:
c0:fd:20:8a:52:6c:8f:e6:38:fe:2d:61:70:b5:3e:ed:4f:0a:
6e:8b:a0:4e:3b:08:da:aa:ee:a8:26:39:96:9a:57:8b:69:c0:
c1:6d:45:eb:55:ed:e3:3a:3f:8a:1a:ec:e9:93:6b:4e:33:ff:
3e:96:f7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:14:24 2026 by rpki-client