
$ rpki-client -vvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
File: I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft (raw, json)
Hash identifier: +DlWD+YeYPfORXgp/2QI6DE310Pi6m1KIYCPA8lU07A=
Subject key identifier: E5:CD:F2:38:4B:C1:3F:72:54:B9:87:B0:39:F8:DC:75:19:01:5A:C9
Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17
Certificate issuer: /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
Certificate serial: 0134
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
Manifest number: 0130
Signing time: Wed 25 Mar 2026 04:45:33 +0000
Manifest this update: Wed 25 Mar 2026 04:45:32 +0000
Manifest next update: Wed 01 Apr 2026 04:45:32 +0000
Files and hashes: 1: I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl (hash: Z6/i3byEVBbIGLZgAxr9kk+a5XmqUxcEixd77ds2V/o=)
2: 43A05F96ABF111F0AF8F880CC4F9AE02.roa (hash: wPYuTSmobZhaRnTY/GjZDyWoVCU3cKsQlUPlALVpkaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl
rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:45:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91122B3, serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
Validity
Not Before: Mar 25 04:45:32 2026 GMT
Not After : Apr 1 04:45:32 2026 GMT
Subject: CN=69c3686d-3612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3f:f1:b7:7c:c0:3d:8b:e5:4b:d2:7f:cd:09:
be:f8:24:0d:cb:25:b6:b4:d7:03:e1:4c:d9:d4:d6:
ff:b8:6d:7f:5c:f0:65:e4:80:61:bb:95:38:62:7c:
e8:5e:e0:71:8d:e9:86:a7:63:8b:0d:e9:2a:58:09:
d0:69:8e:21:cc:1c:e7:9a:b0:66:a1:d5:15:8e:08:
ed:e2:43:23:77:55:02:ec:92:1d:cf:77:15:b4:04:
a6:43:37:bb:70:72:11:c9:14:88:23:3b:40:24:21:
90:48:3c:c3:08:8b:49:65:65:c0:ba:c0:03:85:1a:
8b:8e:20:59:47:23:9a:3f:25:74:4c:c4:11:9b:e1:
fe:61:a9:d7:77:66:12:19:8f:00:92:2c:b0:57:c3:
e4:34:97:24:85:d0:4c:22:70:15:2d:25:50:68:33:
d0:77:93:6c:fe:d1:cd:bc:ff:2b:1c:39:97:e0:0c:
04:81:6e:2b:2e:7d:15:22:42:76:ed:9d:15:b0:23:
f7:07:4d:da:93:60:e3:ce:28:f5:c1:1e:f2:4a:3d:
49:f1:33:11:78:b0:d2:dc:46:56:d5:11:ba:5e:12:
d2:37:37:dc:9b:71:35:1e:82:bb:98:33:44:95:a5:
1d:dd:3f:f0:9b:14:c4:83:bd:70:5e:01:36:0d:72:
f2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CD:F2:38:4B:C1:3F:72:54:B9:87:B0:39:F8:DC:75:19:01:5A:C9
X509v3 Authority Key Identifier:
keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:c0:ae:fe:06:fc:18:87:9c:0e:86:76:4d:10:e2:7c:fc:7e:
2e:98:0d:69:f0:59:6e:6f:5c:c6:01:90:8e:f7:13:75:54:76:
42:ab:94:bd:8d:96:16:84:99:3b:4e:eb:c3:b2:16:74:53:32:
4a:fb:69:89:b0:04:26:61:1e:76:97:49:cf:6a:30:2c:b0:20:
75:29:a8:02:94:62:e9:9d:ac:0a:3d:5a:cc:f3:5f:7f:61:58:
b6:e8:b9:67:0e:8d:94:8c:e1:76:a2:35:0a:fa:36:e2:b9:af:
da:a5:f5:02:8e:90:4e:99:a9:9a:3a:9e:6c:6a:b0:0c:24:9e:
08:a2:65:43:06:b3:43:f2:7e:61:e5:bb:9e:44:da:8b:cd:7a:
6a:88:35:44:13:97:44:9e:7a:7b:2d:3c:3e:e4:0d:ef:0a:d8:
ad:ce:13:1d:d2:2e:e7:9e:a9:c7:60:71:78:04:a6:c7:41:79:
f8:85:62:02:a5:57:25:e7:88:01:20:18:e5:0d:0b:c5:86:39:
c4:a4:35:07:05:05:a8:d4:17:b9:cd:3d:4e:69:eb:61:6c:6b:
1a:a0:bd:95:ee:f9:87:2a:79:e7:6f:61:8a:06:cc:ce:5d:0a:
8a:39:e1:d8:d4:aa:3e:f7:1f:c4:50:44:3a:29:e8:ca:fd:dc:
2a:40:0e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:26:23 2026 by rpki-client