
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft
File: iQoeXMwexsfOHqcfSRKRH1mShrI.mft (raw, json)
Hash identifier: ltN5hDg9J4IlOmiRgz+ZxtBmfAwPa67plb7VZ9zjRNs=
Subject key identifier: 13:1F:D2:C0:1C:14:54:6A:16:BD:BE:D4:AB:9D:D5:50:09:08:77:9E
Authority key identifier: 89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2
Certificate issuer: /CN=A91E2234/serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2
Certificate serial: 3510
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft
Manifest number: 3510
Signing time: Sat 28 Feb 2026 14:51:06 +0000
Manifest this update: Sat 28 Feb 2026 14:51:05 +0000
Manifest next update: Sat 07 Mar 2026 14:51:05 +0000
Files and hashes: 1: iQoeXMwexsfOHqcfSRKRH1mShrI.crl (hash: sjaf1j6xqctvJ02lnZLOJGhRwAsED1tjm2EbK2cVOkE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.crl
rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13584 (0x3510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2234, serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2
Validity
Not Before: Feb 28 14:51:05 2026 GMT
Not After : Mar 7 14:51:05 2026 GMT
Subject: CN=69a300d9-869c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:27:1e:6f:61:a6:d0:a5:50:43:6e:51:49:06:
68:96:d9:b3:29:3a:84:bc:bc:ed:d7:36:a4:09:22:
75:e8:0e:99:49:8d:b6:ef:0a:87:f5:af:0d:89:54:
d2:23:8e:be:bd:74:f7:6e:c5:cc:e6:97:f2:b1:4e:
b4:7a:d4:97:87:62:6f:77:a8:ed:00:1a:8a:18:8c:
18:44:f6:a1:d0:5c:c3:8c:67:a3:13:f5:ec:4b:e4:
6c:29:33:34:99:9e:f1:4c:b6:8c:46:18:78:6c:41:
ea:fe:80:f3:d7:19:f4:e8:77:17:9f:ed:dd:5d:91:
1f:cb:5d:f9:bb:2e:72:0e:76:4b:ca:39:88:96:5a:
1d:a3:49:ba:8f:0e:47:52:89:32:81:02:84:1b:d4:
96:4f:fc:60:77:53:2f:d5:9e:36:83:3e:73:45:bf:
e0:e4:a4:e2:0e:40:a6:68:75:49:d0:2b:04:fe:21:
e1:7e:07:74:64:39:0a:22:90:c4:5b:aa:17:cd:1b:
26:45:91:61:b3:4e:0e:97:cb:3b:37:0e:37:c7:10:
56:52:67:dd:d7:33:4c:e0:5d:0a:fb:c5:96:84:a6:
3e:fc:0c:b5:b1:08:db:f5:44:82:b6:2b:63:dc:6f:
19:cd:78:f9:50:e7:0f:5b:d1:93:66:d6:89:8b:88:
0d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1F:D2:C0:1C:14:54:6A:16:BD:BE:D4:AB:9D:D5:50:09:08:77:9E
X509v3 Authority Key Identifier:
keyid:89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:05:d1:64:f9:33:67:0c:c6:7c:70:83:61:dc:b8:d0:8d:e2:
cc:ea:e9:0a:2f:16:5b:0a:94:28:31:b4:ef:54:50:18:47:52:
d7:11:cd:ca:bf:1f:4e:0e:6e:ff:c5:98:d5:08:99:75:ff:1f:
f6:30:93:b7:56:85:7f:f4:d1:dd:81:3b:5e:67:60:32:37:ac:
89:ff:3b:b3:e3:af:48:06:d0:bc:17:b5:87:8d:ec:82:ce:66:
e1:c1:ea:93:af:a2:e6:7b:ad:79:e9:72:c5:05:81:4a:d2:56:
6b:a6:b6:0d:82:ba:40:21:fe:1b:2e:6a:c2:87:a6:c6:0e:ea:
9e:af:b9:ac:7f:7f:fe:fc:93:1c:40:fc:99:5e:ae:68:96:24:
04:2d:52:98:1c:47:50:2c:96:3c:29:15:ca:dc:29:88:a7:af:
69:40:9b:a1:f5:4a:76:e6:20:95:cc:47:1e:af:c4:4d:46:a4:
85:e8:52:59:0b:f0:1c:fc:bb:d9:8f:89:00:c4:fe:28:db:29:
99:50:33:84:99:fe:e8:d1:5b:01:2e:d4:1d:6d:44:02:28:4b:
a9:35:b0:de:26:bf:d0:50:2e:c3:ce:e6:0b:f5:82:19:8e:16:
94:05:17:f2:bb:c4:4f:1b:02:44:08:47:df:75:e3:dd:ef:7b:
cb:e5:58:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:06:20 2026 by rpki-client