
$ rpki-client -vvf rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft
File: irlFgrAuqoOihfHJH8hZoOLBE1M.mft (raw, json)
Hash identifier: YSOcmWiwh4Is94m0THZU/cG5+AIAsDSuOT6Pi+SG21w=
Subject key identifier: 69:20:15:07:98:98:7B:1A:DD:A1:4D:2A:6A:77:B6:D2:83:6A:7B:A0
Authority key identifier: 8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53
Certificate issuer: /CN=A911049F/serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft
Manifest number: D0
Signing time: Wed 25 Mar 2026 06:03:08 +0000
Manifest this update: Wed 25 Mar 2026 06:03:07 +0000
Manifest next update: Wed 01 Apr 2026 06:03:07 +0000
Files and hashes: 1: irlFgrAuqoOihfHJH8hZoOLBE1M.crl (hash: VyXGsVO3U7X/t+Q3eyxSG8n77B8IAaHVVxfsSF2QMKQ=)
2: 347B37060B7011F0BED04B49C4F9AE02.roa (hash: CHZU+zszPQ+tFMfNIVE/wkHsje39UMtfAADrnw52zrI=)
3: FB2F2DB0FA6911F08D76E8D1496F56BC.roa (hash: JXpAeO1HN16P7h0E41Pc0Jv9E00vC5Y19xNXeo1P76g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl
rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911049F, serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353
Validity
Not Before: Mar 25 06:03:07 2026 GMT
Not After : Apr 1 06:03:07 2026 GMT
Subject: CN=69c37a9c-046d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:60:cc:68:7f:90:f3:7e:28:0b:84:7e:b8:
f2:83:3f:84:d0:13:1d:5d:37:01:61:d6:10:5a:3f:
75:e8:c7:df:e3:ae:d4:98:85:da:e7:cd:0e:f5:94:
be:8e:ba:a5:77:d9:d6:af:03:32:ee:be:6f:87:cc:
a2:f6:e1:e7:51:ee:e6:71:f0:24:6d:2d:09:6d:a4:
d9:39:2e:a3:4a:7e:3a:3d:22:43:79:f3:11:7e:80:
2d:ec:66:b1:83:ac:a6:19:6a:96:ae:e1:03:0e:4a:
a5:54:71:5b:7f:d0:05:87:a7:91:75:32:cc:00:c4:
00:1b:9e:b5:ca:05:24:52:26:e4:bc:46:fd:e9:6b:
ca:26:20:fb:1a:3c:54:48:b5:6a:9f:68:48:87:fd:
6f:17:52:70:b3:08:4c:a0:78:9c:e9:4e:68:e2:27:
63:27:60:ff:1c:a2:7b:86:d2:96:3f:b5:67:60:1e:
fa:6e:41:38:72:f6:6e:ef:9b:6c:af:92:1c:1a:e7:
a6:a1:31:a6:95:f4:88:03:82:dd:b4:7b:0e:b5:83:
a6:a6:20:01:c4:fe:4d:3c:8c:cc:1d:f3:6d:be:11:
cf:83:ad:99:8d:08:20:e6:83:54:f6:af:6f:1e:5b:
88:e2:36:bd:aa:e5:a9:95:cf:fd:1e:30:e1:e6:af:
84:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:20:15:07:98:98:7B:1A:DD:A1:4D:2A:6A:77:B6:D2:83:6A:7B:A0
X509v3 Authority Key Identifier:
keyid:8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:45:60:59:3b:fe:e2:32:67:60:ee:e5:99:b0:61:73:ce:b2:
94:06:1f:1d:4c:74:5d:39:25:37:08:a1:8b:3c:8c:cc:88:7b:
9d:d4:5c:b9:9d:1f:37:d6:52:30:23:32:a3:29:74:0a:10:2d:
31:1c:8a:61:07:a5:77:b0:5f:19:f0:25:ae:0f:59:bb:d6:f4:
d8:42:da:a5:c7:6c:4b:c2:a4:9e:34:d2:16:07:fc:0d:60:40:
e7:f7:d7:e5:ab:26:8a:26:18:65:61:d1:7f:83:12:f5:3d:25:
4a:c4:a7:25:ca:42:80:73:15:66:68:86:89:78:fb:fc:c0:12:
42:bd:66:9c:5b:7f:6c:9a:c0:3c:71:41:c9:32:89:71:17:c6:
6a:d3:2f:f4:c1:b6:fc:07:43:af:bc:a9:c1:29:89:db:8b:f9:
de:7f:56:84:74:e6:cb:aa:1d:35:51:70:9c:46:1e:3b:cb:ae:
e5:f3:fa:5d:59:cd:3e:2c:3b:76:91:3d:f8:f1:bb:b3:a7:49:
37:0d:32:84:5e:58:be:72:d3:03:71:48:b5:83:09:80:ec:c3:
4f:7b:4c:3e:16:1d:4f:7a:4b:c1:dc:ea:b1:35:87:55:72:aa:
92:87:7e:6b:9c:83:48:69:1b:ac:c1:7e:30:9f:d9:ac:fc:3c:
73:8d:c3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:08:25 2026 by rpki-client