
$ rpki-client -vvf rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
File: I9INognIlcMA7mtlm2sYKZJfvU8.mft (raw, json)
Hash identifier: OB+X0LzJA3lzleeu3/2qW71F8tIH65vwbN+96he017g=
Subject key identifier: 36:3E:20:C6:25:E5:12:77:4A:C0:26:43:AC:8A:AC:63:D0:1B:A0:53
Authority key identifier: 23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F
Certificate issuer: /CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
Certificate serial: 0CD0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
Manifest number: 0CB7
Signing time: Sat 18 Apr 2026 18:25:33 +0000
Manifest this update: Sat 18 Apr 2026 18:25:33 +0000
Manifest next update: Sat 25 Apr 2026 18:25:33 +0000
Files and hashes: 1: I9INognIlcMA7mtlm2sYKZJfvU8.crl (hash: HZW5YihG7ejksBuF6zeluQu9S9E8dc9Lz3hSpu30gyQ=)
2: 7B96F1340C6011F088E6FD2FC4F9AE02.roa (hash: mKkuVSeTZtVuG7BfqaqUZzcHeF9XMKmK1adCEnjlrRM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl
rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 18:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3280 (0xcd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91829E3, serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
Validity
Not Before: Apr 18 18:25:33 2026 GMT
Not After : Apr 25 18:25:33 2026 GMT
Subject: CN=69e3cc9d-a527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:48:10:ea:c4:3f:7b:bb:5e:ef:30:68:d0:
e2:6e:13:62:6e:10:ed:88:00:ca:00:37:e0:58:ba:
ca:31:f6:a9:02:2a:66:8c:2d:50:e3:8c:24:1d:6b:
49:c7:de:fa:96:b5:8d:e2:ac:3f:2f:37:0b:77:29:
c2:28:d5:f6:09:0c:b3:6c:d6:11:6f:bf:35:06:f9:
bd:cc:47:35:83:0d:c2:97:8f:21:e8:fa:09:2b:77:
be:4a:92:94:c7:95:94:72:38:6c:15:21:05:d1:d0:
eb:57:f6:9c:ac:b6:5a:af:45:e6:7e:ac:3c:14:9f:
54:e1:50:3d:b4:61:94:87:05:06:cf:b1:9d:5a:3e:
6f:3e:b5:91:dc:b3:42:83:26:00:30:74:f2:b4:3a:
b9:6b:4a:8e:6d:49:34:20:ab:6c:04:aa:af:b5:0c:
a5:e4:96:79:7e:b0:61:a4:63:7b:cc:ca:93:b8:f3:
96:ea:a7:fd:26:cd:f1:37:27:68:d5:2c:47:69:26:
c3:36:3b:a5:ec:29:93:7b:2c:5b:b5:47:c2:9c:1c:
65:fd:61:86:71:ae:ef:8a:59:da:af:a7:61:09:4c:
4e:1a:c3:32:55:14:d3:cf:8b:b0:33:de:83:bc:16:
96:b0:48:0b:31:36:a5:10:0c:f2:c1:32:10:50:0f:
46:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3E:20:C6:25:E5:12:77:4A:C0:26:43:AC:8A:AC:63:D0:1B:A0:53
X509v3 Authority Key Identifier:
keyid:23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:06:9c:1c:a5:ce:70:de:2f:18:f9:38:8a:01:c7:a8:ba:8e:
bf:4f:0f:a9:fc:e4:1d:a9:84:4e:38:d5:e1:c1:f0:39:a7:f0:
68:22:0c:80:a5:6e:84:e7:ce:ca:bd:bb:ab:60:a5:be:75:67:
aa:ea:a2:7a:40:28:da:7f:99:39:57:de:69:01:61:8a:04:59:
e0:e0:d6:c5:4f:d4:94:fc:f3:4c:29:c7:75:22:f5:7e:05:3c:
c6:28:f0:ee:9d:90:23:d7:f9:e1:72:dd:19:8d:f1:8e:f8:6e:
05:c3:36:89:f0:50:01:96:5a:76:3d:9e:a2:76:db:87:c4:a7:
3e:0f:f3:ce:88:69:90:e0:25:76:ec:50:a9:af:8c:44:8a:20:
97:0b:60:24:fc:8d:f9:d3:67:dc:8e:21:3f:f0:92:df:a7:b8:
8f:94:da:f9:bb:98:56:dd:2d:05:54:a4:6e:c5:82:4f:41:e5:
a7:2d:1c:6d:45:2b:de:97:65:a4:48:8c:4a:e1:22:0f:1c:da:
21:ed:b6:ab:37:eb:38:a6:ce:9f:04:0c:03:07:df:60:72:7c:
96:7b:e8:8a:ab:c5:a4:b7:4b:4b:19:04:a9:dd:e0:01:b6:da:
a9:0a:1f:a4:4d:3b:39:bb:e9:ba:46:c6:03:f7:ab:15:a2:cf:
24:82:57:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:11 2026 by rpki-client