
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
File: It6TcViumN6iIR-bvJp10O0NRDY.mft (raw, json)
Hash identifier: obB6Z2Aa8nL2XlPILBGoImR4DpYpIJTW6H1H5jHwOsg=
Subject key identifier: 6A:00:A2:CB:B6:59:E3:7E:71:C0:BD:BC:EC:76:D3:DB:00:4B:F3:5E
Authority key identifier: 22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36
Certificate issuer: /CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436
Certificate serial: 011D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
Manifest number: 011D
Signing time: Sun 01 Mar 2026 06:47:46 +0000
Manifest this update: Sun 01 Mar 2026 06:47:46 +0000
Manifest next update: Sun 08 Mar 2026 06:47:46 +0000
Files and hashes: 1: It6TcViumN6iIR-bvJp10O0NRDY.crl (hash: 8eN/fIB84NAGQBmO67/iPMLdrpCCXDOkQaBaaI4o7TQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl
rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189B41, serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436
Validity
Not Before: Mar 1 06:47:46 2026 GMT
Not After : Mar 8 06:47:46 2026 GMT
Subject: CN=69a3e112-1fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:11:1c:44:b4:e4:66:47:65:8f:85:b2:d9:90:
79:eb:59:f4:71:06:85:7f:d1:97:f9:3b:5f:d1:31:
e9:a1:2a:32:6d:d0:99:11:7a:19:40:57:6d:dc:be:
fc:4f:ee:76:cb:0e:08:9a:54:c1:99:2e:85:f0:61:
c8:1e:77:33:19:d5:dc:30:f5:cb:35:b8:93:84:ce:
19:4a:ae:34:4c:92:46:4a:02:25:43:ee:c5:94:f9:
c3:2d:65:8a:1a:83:22:cf:a4:91:a1:b6:cf:25:b1:
f7:47:ae:9e:08:4a:13:78:07:09:e4:17:3f:3c:a2:
7a:f2:86:30:af:10:22:9e:21:36:6a:7e:59:fe:86:
5f:85:c6:56:04:69:1b:c2:57:0b:4f:34:22:7f:f4:
81:cd:0d:3a:73:d8:8b:fd:00:70:3d:69:cf:8e:eb:
d4:7e:fa:e8:c6:7c:d2:b3:af:b7:f6:6e:9c:97:e8:
01:d7:9a:c2:da:41:3c:8c:b5:fb:ec:76:6c:c1:cb:
ee:dd:55:42:ab:be:a4:2d:94:62:aa:44:29:d4:44:
8c:f9:37:73:41:e0:36:24:21:f0:b4:cd:a5:2f:e9:
e5:e9:25:4d:62:c3:aa:54:a6:03:8b:35:ed:ff:ed:
e9:1b:61:02:3f:64:26:31:4a:07:a6:9d:34:cf:e0:
10:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:00:A2:CB:B6:59:E3:7E:71:C0:BD:BC:EC:76:D3:DB:00:4B:F3:5E
X509v3 Authority Key Identifier:
keyid:22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:b4:be:c0:d5:db:22:89:fa:c5:f7:65:38:39:b1:8f:75:15:
5d:0e:0d:37:aa:f5:b8:88:73:1f:bf:e1:6d:b7:06:1d:e7:e1:
34:80:22:22:d5:7b:94:c7:ad:4e:d8:c7:0e:3b:80:55:0b:b7:
e8:4d:11:15:e5:5e:32:3b:d4:15:83:7d:17:43:a1:5d:99:5b:
0d:3a:f0:0d:a1:0c:f0:4d:84:6b:cd:ef:d2:e7:d6:ca:4b:5a:
f3:ec:57:9b:ca:e1:c4:d9:46:0f:aa:28:2d:97:69:c9:4f:ca:
12:83:08:0a:91:40:ea:a4:44:da:70:35:d5:bf:a0:01:6b:71:
e5:3e:35:ff:32:0d:66:a6:a1:7c:c2:d4:5c:59:58:7c:dd:51:
3b:32:22:49:c1:90:93:6b:c0:b2:53:5c:8a:c8:d2:21:66:9d:
d6:a3:3b:25:00:41:52:f8:39:7a:e2:f3:fb:93:44:8a:94:42:
8f:db:d5:55:1c:dd:ee:ef:70:a8:0a:ed:c3:41:74:f8:ce:bc:
eb:cd:ca:ab:cc:64:be:d2:01:0a:91:97:e8:42:03:6d:3c:33:
3e:39:2b:e0:ea:d3:7f:e4:a6:d2:2f:26:0f:25:51:d3:0a:6f:
01:3a:88:f4:f4:a5:4d:80:21:ae:5f:a6:0d:a0:84:5b:42:b7:
74:7f:80:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:25:54 2026 by rpki-client