
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft
File: IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft (raw, json)
Hash identifier: rrmCZ5QoKM276dpMKhw2jxlY/YL+zl+a4IodEXxsJnA=
Subject key identifier: 43:03:2A:45:C6:D9:37:12:10:45:BF:31:EA:08:44:75:1A:12:5C:D8
Authority key identifier: 22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4
Certificate issuer: /CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4
Certificate serial: 0195
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft
Manifest number: 0A06
Signing time: Sat 18 Apr 2026 20:34:14 +0000
Manifest this update: Sat 18 Apr 2026 20:34:14 +0000
Manifest next update: Sat 25 Apr 2026 20:34:14 +0000
Files and hashes: 1: IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl (hash: /mE5GZZaCM1UCJJ7qPm/iPP3AmqvP8yXLaX8CR6cOpY=)
2: 79057E1CEB1011EEB9CE4F19C4F9AE02.roa (hash: QIU3lIyA+5VKaavxpFKOY/kby8goMr79mIMT44fjsag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl
rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 20:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E9F4, serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4
Validity
Not Before: Apr 18 20:34:14 2026 GMT
Not After : Apr 25 20:34:14 2026 GMT
Subject: CN=69e3eac6-53f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:93:f2:af:21:d0:e6:78:fe:d9:13:1b:82:46:
2b:3e:fc:76:ef:40:68:20:3f:68:0c:87:36:34:ef:
65:53:b1:cb:ad:2f:aa:74:f4:a3:d2:7b:fa:6b:71:
f6:a7:c6:c7:85:88:98:65:92:b4:7d:fa:36:4b:b4:
88:88:a6:54:26:a3:42:3a:00:70:bd:6f:4c:2f:7e:
77:d6:3c:2d:b8:09:fb:99:57:95:c9:6a:64:f7:50:
0d:2e:52:13:f8:7d:2c:e6:b8:70:91:2c:35:f7:57:
74:31:ab:9e:08:11:60:9e:2d:f6:f2:25:02:0d:a3:
a6:2d:b2:8a:c8:e4:56:ca:6b:b3:82:50:da:ad:ed:
82:19:0f:74:d9:47:b5:e3:f0:c5:6a:04:b4:b3:ad:
ce:d8:d4:8a:3f:40:57:4b:b8:73:e6:9e:47:da:06:
99:06:65:66:1b:d6:24:05:9c:da:d1:bb:02:a3:3a:
cb:ae:c1:ff:08:d6:27:23:2f:c2:03:f2:b3:09:8b:
ee:31:23:56:a7:24:06:f6:34:95:55:6e:67:5a:99:
27:d0:27:87:98:c7:12:f0:3e:9e:03:8a:f9:02:a5:
6e:8e:60:1c:41:10:9b:09:a4:ac:05:d5:37:94:bc:
a1:d3:a6:2d:44:62:47:a1:cd:43:30:16:df:42:88:
f5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:03:2A:45:C6:D9:37:12:10:45:BF:31:EA:08:44:75:1A:12:5C:D8
X509v3 Authority Key Identifier:
keyid:22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:a9:cd:aa:b0:ad:da:30:9e:80:8f:f3:75:59:b6:c7:b3:4f:
2b:43:26:85:fc:68:c4:02:d0:93:1e:8a:79:fd:82:a6:3d:21:
7f:9e:0c:6c:c3:c3:02:2f:20:47:0c:d6:20:42:b9:74:bc:00:
30:ba:d5:b8:74:09:28:07:e0:d8:e4:a3:f6:67:90:1e:fe:9e:
95:8c:44:9f:20:fe:91:30:6b:b5:af:94:c3:7e:94:51:a4:6e:
89:44:ab:35:5a:88:f9:a3:52:c4:81:d5:81:df:76:81:8d:ba:
4b:8d:0c:aa:1f:7d:a9:70:60:a4:ab:47:82:9d:b0:ca:c4:3a:
94:7b:c3:f9:69:88:b1:dd:79:ed:3d:ab:b6:7b:15:3c:8c:7f:
0d:de:b8:92:80:91:a1:c4:a5:50:3c:58:9b:91:5b:09:8a:10:
96:1e:7a:9b:0e:45:0a:32:63:31:db:bc:e6:8e:43:96:7f:17:
87:ac:3a:40:9c:63:c0:1e:3a:f0:52:5e:fb:94:1e:58:a0:81:
df:41:f9:29:8b:88:d4:fb:43:81:cf:a6:1a:e9:7e:87:6b:c5:
24:f2:05:91:54:9f:3f:2d:a3:18:a2:0d:aa:05:07:37:f9:9b:
b2:c7:61:1f:f8:b0:3b:31:18:d8:1f:4f:68:bd:f7:da:04:26:
1f:69:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:58 2026 by rpki-client