
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft
File: iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft (raw, json)
Hash identifier: 5knh42BUZUhXuWHHDeTrNFPk4hKoEgqHmTO3rpj+GPc=
Subject key identifier: D9:92:BD:EE:90:4C:15:29:FB:ED:A8:EF:DB:C9:CE:03:3A:7B:68:13
Authority key identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D
Certificate issuer: /CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D
Certificate serial: 01CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft
Manifest number: 01B3
Signing time: Fri 17 Apr 2026 03:53:18 +0000
Manifest this update: Fri 17 Apr 2026 03:53:17 +0000
Manifest next update: Fri 24 Apr 2026 03:53:17 +0000
Files and hashes: 1: iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl (hash: 0ljDRrnK09C9OCbDjdlkMRIpgSG3VjCmsVsmQK2BAU8=)
2: 87662556555511EF88D9F680C4F9AE02.roa (hash: gXURQ3TI01OPFheyWVk20K8W06Uu/H87clLm9KAplj4=)
3: D7FEF354562111EFA7B3F00AC4F9AE02.roa (hash: zRLwbdLjJcZ9xIvEJX9pjeEu223B0K+u9rS591OrK1I=)
4: F406C3F26AE311EF82D7860FC4F9AE02.roa (hash: e+A9R6047fz/CtRSSMnfQGJqOvNAoPOsGN6eczRG5bA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl
rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:53:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459 (0x1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195F7B, serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D
Validity
Not Before: Apr 17 03:53:17 2026 GMT
Not After : Apr 24 03:53:17 2026 GMT
Subject: CN=69e1aeae-3553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:45:01:ba:07:b7:14:de:60:3e:58:e7:84:
e8:2a:9d:f0:ef:6c:0a:f6:48:3b:23:8d:d4:8e:95:
af:89:f6:23:d0:f4:48:65:cd:07:ca:25:93:68:9e:
83:8e:ce:9d:6a:f4:84:29:01:7b:0e:78:bb:64:a6:
8f:c5:a2:2f:20:c5:17:9f:73:64:82:f8:56:e2:86:
be:30:6e:d5:3d:6f:35:3e:ce:fe:e8:e1:02:df:ea:
97:5c:24:f6:f5:60:b9:89:e5:37:3b:ca:ca:e3:87:
58:b9:68:90:c8:3c:68:05:75:c0:1c:62:4e:c7:c9:
68:51:d6:c9:06:ae:1f:b9:05:ff:d0:e0:b3:05:0f:
a6:b3:03:0b:1e:2e:3e:30:af:6e:62:11:77:d0:78:
9f:f2:b5:b8:78:7b:2f:86:70:94:db:77:82:62:f5:
d1:55:a1:b4:35:62:02:49:be:a5:dc:c7:d2:76:56:
31:1e:95:05:12:65:af:08:12:24:10:d4:3a:9d:e6:
40:65:f6:f5:86:33:ad:14:e1:a3:f0:ec:67:99:55:
ff:7c:77:88:7a:7d:1d:b5:e4:a1:84:8d:7c:5d:c0:
3f:79:c6:96:42:ff:3b:79:a9:d2:85:18:79:ea:ea:
3a:a5:35:b8:d8:ce:3b:6a:0b:cc:47:4b:32:c9:12:
0e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:92:BD:EE:90:4C:15:29:FB:ED:A8:EF:DB:C9:CE:03:3A:7B:68:13
X509v3 Authority Key Identifier:
keyid:89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:c2:ff:38:05:65:65:ec:cf:3d:e6:2c:58:ea:f5:46:e3:21:
80:df:77:f8:71:1c:2f:b1:42:4a:fe:ed:ef:83:ff:2a:62:7b:
46:b9:d5:bb:7b:33:38:06:db:f4:ca:00:07:34:bd:7b:e2:e5:
ee:4e:4e:68:c6:e8:72:cc:5d:f3:db:b2:60:00:f9:fe:25:02:
1c:0f:75:43:e3:fd:6b:8f:5a:6e:e6:48:d9:d5:0f:b8:d5:a8:
c7:23:4c:74:91:9f:c2:4f:b5:a5:0f:73:66:bc:18:39:8e:98:
55:6d:ff:56:f4:69:5d:f1:64:f3:de:51:dd:01:0a:e0:37:94:
73:dc:6f:2b:1f:f3:5a:9b:ae:df:b3:fc:ee:7f:31:b6:63:1e:
8e:af:7a:58:18:33:03:e0:ea:0a:98:60:a2:53:9a:d4:27:a0:
fd:f0:2a:6a:4e:b4:4e:4f:4b:1b:d4:10:9e:c7:76:d8:a0:e6:
08:89:28:7d:c4:5b:b6:19:60:45:0b:7e:13:f1:a4:aa:de:c3:
f8:36:3b:50:86:c0:42:2b:57:ce:64:4e:ee:e3:78:08:fa:ee:
07:43:0f:de:a0:98:35:d8:9e:4b:45:4e:60:e9:fa:d4:6d:d8:
6a:7a:fa:92:e1:60:90:71:f3:5e:3e:d4:5c:05:3b:2d:eb:49:
3f:7e:85:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:14:06 2026 by rpki-client