
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
File: IrN0ThSJpKURK82Mvxepj_HbZnU.mft (raw, json)
Hash identifier: zxBQZOxyW1LNM8dTJl+pxjZ5Gm1LrJkX40BNAxPCYRw=
Subject key identifier: F7:B1:8B:7C:90:EF:55:83:68:4A:79:D6:A4:DE:35:64:30:74:D8:4D
Authority key identifier: 22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75
Certificate issuer: /CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675
Certificate serial: 03A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
Manifest number: 0399
Signing time: Sun 01 Mar 2026 01:37:02 +0000
Manifest this update: Sun 01 Mar 2026 01:37:02 +0000
Manifest next update: Sun 08 Mar 2026 01:37:02 +0000
Files and hashes: 1: IrN0ThSJpKURK82Mvxepj_HbZnU.crl (hash: o6L28jPgCB8LtnijOdXLbU/yGUDbGDdnx3CzjnfLt+c=)
2: F2C91F5678BE11EFBB3FC76DC4F9AE02.roa (hash: PFX9ngxGMRis9Vcn57kZ6QiID7onGEj0xFx0QKLjFhs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl
rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 929 (0x3a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2B54, serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675
Validity
Not Before: Mar 1 01:37:02 2026 GMT
Not After : Mar 8 01:37:02 2026 GMT
Subject: CN=69a3983e-f319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:05:6c:ff:12:7a:c2:24:c6:9b:0f:bf:cf:a1:
3c:25:0e:fd:a4:6f:ee:6a:67:af:ab:56:c6:9a:b9:
be:d0:f6:36:e4:4b:00:e9:fd:0f:ae:c2:04:b4:f6:
1b:b1:e7:d7:04:dc:db:6e:d6:e3:61:9b:fd:3e:b7:
42:07:fa:a9:6b:91:8d:d9:dc:22:1f:84:d5:0b:5f:
a5:42:9f:a4:d9:f1:ce:aa:2f:26:bf:01:65:95:c1:
64:65:c0:97:99:2d:fd:68:f6:eb:08:e6:65:61:51:
b3:ad:d5:86:fb:8c:d6:24:7a:ae:11:ad:54:69:fd:
b9:e6:ba:0e:6d:ab:ff:95:4e:50:db:02:a7:36:8b:
d3:82:88:32:a4:78:43:1e:9d:f7:db:2f:21:68:3b:
3d:41:5b:07:a9:ac:97:54:83:7d:e4:8c:1c:7a:8c:
b6:f2:68:05:b3:bb:e3:82:6a:c7:42:de:19:a9:c1:
22:68:f6:b4:02:67:46:94:68:a2:3e:f9:c8:9a:a6:
fc:1b:3c:49:9c:bb:46:92:2b:4c:38:8f:d3:88:7e:
9f:a6:8c:f3:27:f5:75:1b:12:33:9d:c6:87:ca:6a:
24:e5:f2:29:40:a8:0d:22:77:2c:e1:10:fd:79:11:
02:8a:e8:97:4c:03:bc:a7:f2:45:95:4f:33:45:6d:
f8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B1:8B:7C:90:EF:55:83:68:4A:79:D6:A4:DE:35:64:30:74:D8:4D
X509v3 Authority Key Identifier:
keyid:22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:99:bb:ac:33:01:86:c7:07:c5:51:c2:8a:4f:ca:d2:30:8b:
80:d9:18:82:e6:52:17:52:0d:8c:10:a2:30:59:0d:f8:0d:ba:
cd:10:38:19:19:58:ee:6c:fc:8c:5c:52:9f:19:ee:c3:38:ce:
33:25:db:5c:70:9c:41:16:39:83:c3:bb:22:37:d5:5f:6a:a3:
c0:c7:49:bd:81:f2:5f:8b:bd:e3:6e:d3:ae:79:ca:7d:78:be:
4f:57:0d:6b:fa:20:d1:f1:84:83:f5:0f:4b:b9:2c:0e:b6:9d:
9b:cb:9f:bb:db:e3:cd:0c:34:47:02:2e:4c:83:9f:51:b6:ba:
29:b1:be:89:67:cb:6b:25:a5:5f:05:b9:4e:c7:76:27:b2:c9:
82:a8:2e:28:17:8a:5c:38:78:32:c1:ba:30:1e:ca:44:6e:ea:
2e:9e:31:d2:9a:c4:11:d5:0d:c3:63:d9:08:e7:22:2a:3f:c0:
2a:8c:66:02:82:0a:60:b2:ce:72:7c:3b:bd:98:df:6f:45:6a:
5b:1f:b7:11:e9:ce:00:66:4c:dd:36:b2:b8:94:36:73:34:41:
c1:8a:d7:ef:85:44:a5:30:b5:61:dc:e5:19:39:6c:60:60:1e:
1f:96:66:df:85:18:e1:ab:64:d5:31:66:b3:7b:bf:04:50:4f:
f9:e7:b9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:24:23 2026 by rpki-client