
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
File: iunN4Qvgt38JGw0468GWfIvAkZ4.mft (raw, json)
Hash identifier: 8Is2k8G4/i4qBw5P0FGJ/UBRtiVvfBQpmnUT93LbCqY=
Subject key identifier: 93:11:AD:FD:E7:0D:2F:B5:DD:E2:83:D7:67:70:3A:68:7E:11:7D:7F
Authority key identifier: 8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E
Certificate issuer: /CN=A9116BB8/serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E
Certificate serial: 07D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
Manifest number: 07BE
Signing time: Wed 25 Mar 2026 11:01:17 +0000
Manifest this update: Wed 25 Mar 2026 11:01:16 +0000
Manifest next update: Wed 01 Apr 2026 11:01:16 +0000
Files and hashes: 1: iunN4Qvgt38JGw0468GWfIvAkZ4.crl (hash: ojSrxJfTVwGeUIdbBcyi7DPrZBitG6NdHLuN4ARU/I8=)
2: 490CDADA42F211EBB34A1A60C4F9AE02.roa (hash: TOFHXUN9aXdZJc1sMfYrjjU0UsBkt0mn0EED+VHmuTo=)
3: 9DFB3106BBB811F0B79DF618C4F9AE02.roa (hash: iNKOUL5bcAsjPyk0gyi4YQnAuK66K1Xutaj3LTMH5gE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl
rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2006 (0x7d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116BB8, serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E
Validity
Not Before: Mar 25 11:01:16 2026 GMT
Not After : Apr 1 11:01:16 2026 GMT
Subject: CN=69c3c07d-b8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:83:ef:b0:35:b6:f4:25:90:3f:05:c6:8b:52:
9d:20:46:ad:da:34:56:99:6e:ad:98:5a:68:d4:7d:
5a:b7:dc:1d:2f:53:41:8d:f7:f6:28:83:8c:f8:e9:
b1:18:ee:0e:d0:cf:68:60:63:80:09:00:4e:66:6c:
42:7e:bb:22:9e:ef:95:1e:89:1e:3c:84:00:6d:4b:
95:69:90:ee:5d:99:66:1b:8e:e9:2e:6c:9f:e1:5c:
4f:76:9c:a1:71:a8:a3:9d:e4:1a:76:e5:65:16:b6:
1e:4a:04:cd:28:19:f0:b2:ad:0e:73:14:96:32:08:
34:5e:b7:34:f5:5b:98:32:b1:e0:3a:07:d3:b5:da:
e6:6d:38:df:44:19:ff:8c:35:1c:a8:d8:41:04:82:
1b:10:b5:9f:ba:ba:2e:37:59:70:6c:1e:59:5b:07:
28:d4:92:7b:a6:c8:9d:d4:45:bc:39:d4:0f:69:94:
a7:6b:2e:e3:8a:82:ce:a1:53:d6:d7:e0:27:fa:7a:
08:92:fd:d3:73:d3:5a:e8:11:9e:bf:ea:22:6b:b3:
af:fd:78:b0:b2:0b:9c:09:ba:bb:92:02:d8:51:06:
87:2a:2d:f4:d0:f6:c4:af:ea:6f:68:1a:ba:48:2a:
6a:f2:b8:1d:51:6e:cf:a0:71:ac:a1:32:f7:b3:00:
5e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:11:AD:FD:E7:0D:2F:B5:DD:E2:83:D7:67:70:3A:68:7E:11:7D:7F
X509v3 Authority Key Identifier:
keyid:8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:4e:63:72:96:75:d2:be:34:6f:79:17:c6:8b:31:73:98:72:
ce:8e:8c:ba:45:be:d1:d9:dc:ee:72:e5:3a:4f:3a:23:49:cd:
15:cb:89:61:f2:7d:3c:25:d4:83:45:0a:de:4d:e8:6f:10:3b:
cd:ab:d0:09:f8:04:55:bd:93:29:ad:c7:c8:f8:d8:f7:c9:fb:
40:52:7a:4e:d1:7d:2d:8c:0e:2f:4e:0a:9d:65:44:17:63:89:
85:19:61:5d:3c:e3:92:75:e1:2c:1e:90:4b:90:03:a9:c3:22:
fd:8f:1f:a2:d4:53:52:b0:eb:97:9b:b0:0e:38:dd:6c:4b:06:
75:2a:84:65:ee:c8:aa:8a:2a:0d:2e:29:48:ed:04:ec:ea:f3:
0d:a0:00:52:f5:01:4e:04:ee:94:38:e7:6b:53:da:31:7e:81:
eb:af:ae:c2:ab:f3:a2:a8:4d:40:d8:bc:13:f9:ab:bf:46:d9:
2e:89:92:4e:4e:60:ae:03:ec:46:b9:51:b3:a1:fa:ac:a6:ee:
79:58:9b:a7:ee:51:0b:84:ce:f5:a9:8e:81:25:48:d1:82:ac:
cc:4b:fa:32:51:19:ae:06:6c:cb:54:85:1b:95:3f:f8:c9:e3:
43:d6:af:8c:80:b7:92:5d:5f:98:de:64:3a:72:3d:73:87:e9:
26:ec:b3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:24:22 2026 by rpki-client