
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft
File: IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft (raw, json)
Hash identifier: rHHbYFUOCxkV7WMoxdSjr0O1+j6Mg8OuFQNc1y4+7bY=
Subject key identifier: CD:35:DA:47:AB:D2:91:08:D0:5B:F9:E0:42:9A:3C:48:0C:E0:03:CC
Authority key identifier: 22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4
Certificate issuer: /CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4
Certificate serial: 017C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft
Manifest number: 09D4
Signing time: Mon 02 Mar 2026 00:04:42 +0000
Manifest this update: Mon 02 Mar 2026 00:04:40 +0000
Manifest next update: Mon 09 Mar 2026 00:04:40 +0000
Files and hashes: 1: IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl (hash: hZpXzeyv92jwYntkT7LD3VPM1lXjZ92hN4yoCTnn8eA=)
2: 79057E1CEB1011EEB9CE4F19C4F9AE02.roa (hash: QIU3lIyA+5VKaavxpFKOY/kby8goMr79mIMT44fjsag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl
rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E9F4, serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4
Validity
Not Before: Mar 2 00:04:40 2026 GMT
Not After : Mar 9 00:04:40 2026 GMT
Subject: CN=69a4d419-21bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f4:d3:7a:a7:44:13:21:66:63:0d:1c:9a:e8:
df:fe:85:d6:23:92:c2:ff:96:2f:ad:52:c4:63:bc:
be:27:33:11:48:d3:3b:89:93:7d:ad:ff:ca:59:05:
7f:ad:ea:a4:1a:53:f5:0b:c1:5e:31:c4:6b:7c:03:
ea:d5:23:00:81:3d:18:b5:04:1a:f1:0b:a4:80:ec:
1a:4b:cf:fd:b4:06:61:c1:85:b8:d0:13:6a:9e:60:
ba:96:f7:62:a1:ea:ae:d8:00:38:27:4c:d7:96:43:
32:b1:c7:0f:17:78:b4:b4:73:fb:0f:0c:d1:93:14:
dc:e9:32:5f:a6:ea:bb:65:49:0b:80:8b:1a:62:8d:
03:aa:fc:dd:82:19:38:60:c8:23:27:e6:22:10:94:
0f:48:a8:b4:6f:de:52:43:13:33:c2:5c:ce:fa:70:
a2:8c:83:1f:77:de:c0:a9:ce:ca:13:9b:77:22:82:
22:f9:98:bd:51:d5:04:57:ab:b6:49:a8:41:3b:3b:
01:b0:bf:e2:1c:36:31:43:a9:fb:f6:d6:2e:b4:8a:
49:2b:aa:7d:7c:12:d4:76:90:39:3e:e8:0f:d0:ef:
b3:a3:03:db:e1:70:9c:00:4b:74:73:29:9a:b5:5a:
5e:01:dd:e0:19:3d:e5:f4:35:e4:49:19:cd:84:ae:
51:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:35:DA:47:AB:D2:91:08:D0:5B:F9:E0:42:9A:3C:48:0C:E0:03:CC
X509v3 Authority Key Identifier:
keyid:22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9b:84:2f:db:83:ed:94:52:92:cb:c0:04:ff:96:45:73:c9:
c8:56:ac:ff:02:5b:9e:65:7c:d6:38:cc:9b:52:9d:03:b2:1e:
e9:b7:ab:4f:b1:1b:c0:48:98:6f:0f:f2:38:c4:b2:6c:40:74:
44:4c:ba:8e:93:08:4b:7d:62:02:e8:4b:0c:37:d9:0c:36:33:
fd:e5:12:09:75:46:13:1e:4e:2c:91:77:cf:52:ab:b1:33:a9:
84:dc:76:5d:ce:c1:ea:54:62:ca:5c:5f:14:3a:59:de:e9:c0:
fb:07:99:28:59:d1:74:42:f0:47:7f:c7:c0:f7:98:b3:95:39:
43:45:11:62:88:25:d6:3b:ab:9d:07:50:60:5a:4b:5f:cc:39:
be:5c:ab:18:2a:38:f9:15:c5:32:4b:87:ee:49:e6:66:7d:6a:
4c:0f:14:57:b9:e5:3a:47:5c:d6:62:6d:cd:f0:09:37:9e:98:
d6:2b:21:17:c9:ec:d2:2d:49:4b:92:62:9a:55:df:71:2c:0c:
6e:76:8d:dd:d9:5a:e5:2f:54:84:37:b9:44:35:e6:97:ed:d9:
bf:24:2e:97:92:68:d9:22:90:04:92:f1:ae:91:71:95:c7:b5:
94:ff:44:0a:0d:c5:bf:1f:5f:da:8c:94:2a:70:01:54:29:8f:
87:b6:d8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:08 2026 by rpki-client