
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
File: iV5rynpcNtnzBEctDScTpILJ2yU.mft (raw, json)
Hash identifier: CdGnU/ljMzrS4elnty+wWZgdtWTbIhxnlgdABHs6qmQ=
Subject key identifier: EB:CE:85:C2:17:D1:B3:1B:77:38:9B:71:4A:A5:D0:BA:9B:D5:90:DD
Authority key identifier: 89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25
Certificate issuer: /CN=A91B829A/serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25
Certificate serial: 0CDF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
Manifest number: 0CD4
Signing time: Mon 02 Mar 2026 02:24:16 +0000
Manifest this update: Mon 02 Mar 2026 02:24:14 +0000
Manifest next update: Mon 09 Mar 2026 02:24:14 +0000
Files and hashes: 1: iV5rynpcNtnzBEctDScTpILJ2yU.crl (hash: ZyEIynCZmNrdi94VIUH9CSKY4QEIVKmckMaokw9XZfw=)
2: 37759456617811ECBB095A62C4F9AE02.roa (hash: GoPelaWzfjsTFtPr3I95eodushRHuWInvxaTpmekvow=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl
rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:24:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3295 (0xcdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B829A, serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25
Validity
Not Before: Mar 2 02:24:14 2026 GMT
Not After : Mar 9 02:24:14 2026 GMT
Subject: CN=69a4f4d0-df61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:48:a9:43:05:4e:d0:c6:88:2c:97:40:d9:
e3:51:31:d6:2e:37:c4:ad:5c:f0:56:cf:a0:01:39:
bd:cc:bd:c5:36:4f:ee:58:0f:0d:75:80:ad:0d:0e:
83:a3:f6:1c:c2:32:10:52:3c:84:19:ae:6c:bf:81:
08:ea:b3:ad:5a:05:03:b7:0a:45:e5:3f:5c:58:56:
e9:47:d1:ce:75:51:7e:9a:c4:0b:9c:96:df:47:aa:
f1:72:31:20:3d:a6:f0:ac:c0:c7:42:73:c4:77:19:
aa:95:cb:d0:bb:ad:47:ba:8e:27:e7:62:e5:26:13:
a4:ec:4a:e7:1e:89:ed:fd:17:45:e5:08:0c:ef:ab:
1f:e9:dc:35:c7:3d:97:c9:ee:f2:ca:01:61:13:39:
95:c3:27:de:31:26:b0:ca:ef:32:86:cf:85:7a:c5:
b9:d7:56:5d:9b:1f:50:d4:f1:e1:4e:d1:e8:00:66:
a2:e8:0b:55:f8:98:94:6d:9e:81:56:9f:ac:dd:90:
03:8f:0f:c4:55:07:03:7f:09:b6:28:74:f2:cd:28:
8c:3a:d0:37:a0:87:d1:79:ca:04:3c:c7:df:96:5c:
96:da:0f:e1:3a:e9:ab:a9:26:59:f7:48:76:f9:46:
0b:a3:60:50:b1:91:f0:23:6a:4e:6b:9b:c8:7c:5e:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CE:85:C2:17:D1:B3:1B:77:38:9B:71:4A:A5:D0:BA:9B:D5:90:DD
X509v3 Authority Key Identifier:
keyid:89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:80:11:68:ab:d1:1b:85:10:f7:e3:dc:78:45:a6:be:a1:31:
80:ce:1f:1b:80:98:77:73:47:2e:7a:56:df:48:4b:fc:82:c5:
0f:de:e1:c8:31:91:90:a3:d3:b0:9e:b9:25:e2:2b:16:4d:d6:
11:43:2f:1d:92:4d:82:d5:11:18:29:b0:82:3a:f0:79:8f:34:
7a:0d:4a:41:01:0f:53:9c:38:01:69:34:5a:81:37:1b:03:2a:
a7:f7:9b:80:20:9d:83:d3:c5:01:e1:b3:30:c9:de:a0:bf:37:
9f:90:a0:70:e4:d2:92:e4:1c:52:a1:3f:78:17:0d:08:1c:55:
76:d2:1f:01:1a:49:05:c3:96:a1:a8:15:b9:1f:41:1d:81:97:
66:ef:74:2e:9a:77:be:24:8e:4d:d0:1d:45:5b:56:8a:27:6f:
e4:3f:e1:dd:77:1e:63:64:f1:64:83:3c:23:7a:bf:fe:d4:6f:
77:0a:f1:72:c3:b7:05:ff:d9:63:26:76:8e:ad:e1:56:8e:a7:
27:89:1c:b6:81:ba:2f:23:b4:19:e6:e3:fc:7b:37:ee:c3:95:
42:2a:af:bf:53:10:d9:06:8a:75:e8:c6:c1:95:30:fa:1a:60:
17:ae:df:83:c6:8a:71:ee:8c:18:2b:3b:5e:25:91:cb:fd:30:
7d:fb:1c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:34:04 2026 by rpki-client