
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft
File: JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft (raw, json)
Hash identifier: H/ufXHnrlxYZrGPwYjxei6NNk45hcjMFSphNFw7UyPw=
Subject key identifier: C8:AB:78:68:57:B2:38:5F:C9:26:79:C5:B0:A7:24:FE:BC:FD:C4:1B
Authority key identifier: 24:8A:2E:CC:C7:0F:9E:3E:98:4B:B4:6F:B1:9D:CD:3A:A9:AD:91:5F
Certificate issuer: /CN=A9198F67/serialNumber=248A2ECCC70F9E3E984BB46FB19DCD3AA9AD915F
Certificate serial: 98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft
Manifest number: 98
Signing time: Sun 01 Mar 2026 08:42:07 +0000
Manifest this update: Sun 01 Mar 2026 08:42:06 +0000
Manifest next update: Sun 08 Mar 2026 08:42:06 +0000
Files and hashes: 1: JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl (hash: Vn0GeXqL/XSGHbTuxmozWQ242lANZKueM7YVugiUEW4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl
rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198F67, serialNumber=248A2ECCC70F9E3E984BB46FB19DCD3AA9AD915F
Validity
Not Before: Mar 1 08:42:06 2026 GMT
Not After : Mar 8 08:42:06 2026 GMT
Subject: CN=69a3fbdf-495c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:85:bf:3d:73:56:c2:13:d4:d1:80:97:da:88:
5c:4d:cf:8f:4f:1a:1a:bc:ef:eb:e2:40:4a:f5:80:
86:ad:51:fd:4e:38:37:7e:86:25:bf:75:f2:d0:3a:
d7:83:5e:1e:b2:8c:8b:60:96:9c:79:ea:7a:34:00:
d0:f8:9f:dc:3a:b8:f9:02:d5:44:26:8d:4f:7b:79:
b0:94:6b:10:70:25:dd:8e:ed:5f:fe:dd:d2:3b:7a:
ad:cf:bc:a9:45:7a:e5:16:21:92:4b:56:0a:d5:3a:
b2:23:c3:ad:02:ed:fc:cb:12:cd:7b:81:d3:52:ea:
d5:88:59:89:2c:35:4a:05:0d:96:82:25:1d:96:0f:
c6:f2:74:dd:63:b5:ae:cd:2c:13:a3:bc:e9:8a:d0:
a8:07:60:b6:19:ec:61:c4:40:f0:df:3e:0d:43:a9:
d5:bc:4f:a8:d2:0d:9d:1b:65:64:20:11:bc:34:09:
a1:ee:1d:83:1d:a9:a6:37:91:d7:2c:f6:87:61:2d:
15:00:55:44:97:2d:1b:8d:75:3a:6b:28:fa:05:e1:
79:4f:c4:39:92:0f:4b:51:44:c7:1f:1b:d3:18:75:
8e:f1:c1:8f:ab:db:e4:bb:96:fa:15:a6:f1:8d:21:
08:04:c4:15:85:db:d6:85:b5:30:7d:3b:ff:09:84:
ac:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AB:78:68:57:B2:38:5F:C9:26:79:C5:B0:A7:24:FE:BC:FD:C4:1B
X509v3 Authority Key Identifier:
keyid:24:8A:2E:CC:C7:0F:9E:3E:98:4B:B4:6F:B1:9D:CD:3A:A9:AD:91:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:45:c8:ae:02:cc:e2:e5:68:6a:2d:18:5b:c1:48:e1:e5:49:
5b:18:f9:60:e2:cb:b5:b8:87:1f:fd:56:53:a7:d5:57:4b:ee:
ec:45:b3:a5:88:ff:43:35:b6:66:68:5b:57:9b:43:24:8c:ef:
ec:3e:c6:aa:8e:fd:f3:40:e9:a0:ce:78:c7:1e:90:b8:15:de:
8d:7e:a8:6b:55:d6:56:e6:4e:5d:4c:df:bc:1c:4c:95:fb:11:
94:3f:fe:ab:e0:b1:dd:dc:d6:22:1f:44:07:d7:66:b0:d0:7b:
89:56:54:11:fd:0e:1b:28:df:ec:36:4c:67:7a:d9:6c:41:7a:
74:8a:28:ff:9e:35:6a:7f:a1:2f:06:b4:84:39:03:02:d9:ab:
37:9d:37:19:50:1c:22:d0:16:30:c5:7a:2b:44:b0:96:8c:6b:
5d:2f:aa:9b:89:56:23:eb:5d:92:de:25:2a:de:dc:c6:ce:13:
4e:04:17:2e:03:3e:c6:db:aa:b6:db:bc:b3:cc:4c:53:99:07:
d4:b2:49:c2:9f:c9:58:da:e9:3b:29:da:d9:60:56:ce:29:91:
18:75:4e:7a:3e:51:bf:39:72:c8:31:9f:32:0d:2c:37:2a:19:
c3:0d:31:31:54:45:81:9e:a3:76:40:30:60:56:e2:65:93:1b:
fe:0a:86:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:21 2026 by rpki-client