
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft
File: IIUPxwwl_bFV037LDsOWLGtH_K0.mft (raw, json)
Hash identifier: NcNUNTWov95FFJyebmWNq+TojGFgEsnEPDV8AGGs4k4=
Subject key identifier: 85:45:65:0B:FF:53:AB:3D:F8:CD:9E:30:25:D8:54:D3:10:CC:06:FA
Authority key identifier: 20:85:0F:C7:0C:25:FD:B1:55:D3:7E:CB:0E:C3:96:2C:6B:47:FC:AD
Certificate issuer: /CN=A919D545/serialNumber=20850FC70C25FDB155D37ECB0EC3962C6B47FCAD
Certificate serial: 07CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IIUPxwwl_bFV037LDsOWLGtH_K0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft
Manifest number: 07C5
Signing time: Sun 01 Mar 2026 23:46:25 +0000
Manifest this update: Sun 01 Mar 2026 23:46:23 +0000
Manifest next update: Sun 08 Mar 2026 23:46:23 +0000
Files and hashes: 1: IIUPxwwl_bFV037LDsOWLGtH_K0.crl (hash: 7mC46EHh64URFIIU0f6a6aPrSRr5Q2LCu9CFJtXrp5Q=)
2: 934C22582E1C11EBB3ADE232C4F9AE02.roa (hash: phUiTcxIFw3ao8Y9mK8qUaOGHSb/DuAX5SQDoA4RRmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.crl
rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IIUPxwwl_bFV037LDsOWLGtH_K0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1997 (0x7cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D545, serialNumber=20850FC70C25FDB155D37ECB0EC3962C6B47FCAD
Validity
Not Before: Mar 1 23:46:23 2026 GMT
Not After : Mar 8 23:46:23 2026 GMT
Subject: CN=69a4cfd1-9b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:fa:5b:31:71:14:08:17:06:d2:0a:7f:61:
c0:df:c6:ed:43:cd:7a:f0:46:a3:2d:d2:87:c8:f8:
83:ba:41:02:51:db:79:3c:23:26:56:a3:99:b6:62:
64:87:96:d9:8f:c8:f2:de:70:6c:19:05:d2:0f:41:
db:06:7e:cf:9e:33:89:07:74:0a:41:bb:70:ba:b0:
2c:5a:a4:d8:c1:b5:a7:a3:8e:aa:36:67:59:79:50:
12:b3:74:84:f9:1e:3b:3e:a2:da:88:e9:4a:60:65:
80:7b:df:21:53:e4:36:78:26:56:77:b6:ad:83:c0:
32:e6:f6:25:4e:70:d7:9d:dc:c2:29:5d:f6:ec:94:
ca:e4:a1:a5:3f:eb:4b:15:50:b5:ee:84:c0:eb:9a:
78:e5:3d:f3:92:15:e8:15:bb:3b:93:38:95:ad:10:
d5:b6:73:77:1f:c8:36:57:3c:07:77:c1:1e:f0:5e:
81:ce:90:3d:20:97:83:a6:a6:f2:f2:aa:9a:f6:9c:
8e:1d:01:c8:53:8c:6e:41:6c:ee:c2:72:e8:12:a8:
3a:fc:e5:e2:26:34:9e:cb:37:ac:41:48:40:5b:3a:
05:7a:d1:db:9c:01:b0:c3:97:fc:00:f5:d3:a7:2e:
06:1b:66:87:be:bb:a7:00:59:db:22:74:0c:f5:19:
be:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:45:65:0B:FF:53:AB:3D:F8:CD:9E:30:25:D8:54:D3:10:CC:06:FA
X509v3 Authority Key Identifier:
keyid:20:85:0F:C7:0C:25:FD:B1:55:D3:7E:CB:0E:C3:96:2C:6B:47:FC:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IIUPxwwl_bFV037LDsOWLGtH_K0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:13:da:2a:0c:5c:17:cc:53:02:7f:a9:6c:5d:27:fd:66:14:
97:86:4d:55:f3:5b:65:2a:87:94:6d:aa:07:3a:7b:83:eb:fd:
ab:ca:4f:e3:50:d5:3a:58:43:7e:55:2a:12:16:06:8b:42:7c:
0e:27:22:4b:c9:58:c4:72:14:80:1e:fd:71:43:db:e8:4b:d3:
41:5c:43:a0:63:cc:a9:21:4c:0b:dc:a2:d4:05:1a:64:cd:0c:
82:24:9b:c4:74:c9:f4:41:c6:6b:da:5f:e7:cd:74:c7:f0:5c:
0a:78:04:09:a9:f5:34:ee:0d:47:62:3c:f6:92:25:44:29:c3:
0d:f7:2a:16:1f:87:4c:b8:6a:c8:ff:54:a0:06:62:c0:3a:83:
27:47:d4:e9:c9:aa:13:73:da:76:a9:88:25:f5:d7:0e:55:bf:
89:08:2a:9c:01:de:fc:f1:72:48:c0:8c:fd:75:94:81:b8:0c:
f7:73:1c:a8:07:12:67:86:37:85:30:ac:00:08:20:50:3f:5e:
f3:a6:f5:81:d6:85:a6:db:47:f7:5b:99:6c:af:a6:3f:43:3a:
5c:16:5d:ef:9f:c7:c9:cf:23:01:18:0a:94:2a:51:1e:2e:9c:
ea:f7:3d:7f:82:a2:02:ec:71:51:6b:6c:00:8e:dc:4f:81:79:
c4:9d:b8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:03:12 2026 by rpki-client