
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
File: I9szI90s15w3OFgdQvSrD0mINMI.mft (raw, json)
Hash identifier: QhTa6EzGq/t6y6ulR9tBNBU4NupfVbGPiP3pQcA20K0=
Subject key identifier: 30:76:AF:06:E5:BF:90:DC:A4:A9:CB:B2:75:8B:E6:79:38:0F:26:1A
Authority key identifier: 23:DB:33:23:DD:2C:D7:9C:37:38:58:1D:42:F4:AB:0F:49:88:34:C2
Certificate issuer: /CN=A911C28A/serialNumber=23DB3323DD2CD79C3738581D42F4AB0F498834C2
Certificate serial: 0664
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
Manifest number: 065D
Signing time: Tue 24 Mar 2026 22:20:47 +0000
Manifest this update: Tue 24 Mar 2026 22:20:47 +0000
Manifest next update: Tue 31 Mar 2026 22:20:47 +0000
Files and hashes: 1: I9szI90s15w3OFgdQvSrD0mINMI.crl (hash: 8Z0srInsKqddXQMSOipPJcAZ6fOSPOb47GuqqbHg4KI=)
2: 2D5E84AAC2A911EBB2025B36C4F9AE02.roa (hash: Bvqn6u0monQlxskOsh000hdL0vmdx7aoT/EaSsI8xgc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.crl
rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:20:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1636 (0x664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28A, serialNumber=23DB3323DD2CD79C3738581D42F4AB0F498834C2
Validity
Not Before: Mar 24 22:20:47 2026 GMT
Not After : Mar 31 22:20:47 2026 GMT
Subject: CN=69c30e3f-c3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:9a:08:76:8e:88:f7:71:d1:7f:97:68:f2:
b3:a0:53:da:b5:9b:da:c2:3f:54:de:86:84:ab:0c:
2a:2c:6f:90:62:7d:07:50:0e:85:ab:db:cc:79:42:
55:eb:63:a4:f9:8f:2a:d9:c2:fb:37:b7:8f:5b:d0:
32:37:45:08:79:7b:91:6f:d3:8f:b3:93:3b:61:ea:
ad:64:1f:e3:ab:28:68:9a:80:c7:6b:8b:ee:db:2a:
bc:4e:72:23:97:e0:75:54:d4:f5:ae:10:5d:31:ba:
ac:fd:6b:3b:13:3e:c5:9e:75:12:b2:6c:67:7e:f9:
02:ab:be:c5:3c:2f:c9:be:37:9d:f2:b7:a0:89:82:
b3:00:84:07:4b:e6:20:8d:25:7b:7b:86:77:f2:e5:
11:9e:b7:e3:33:bf:ce:4e:29:a6:39:a4:28:8a:81:
98:02:42:f7:77:e3:e6:ab:c1:33:e2:e4:83:e8:89:
bf:e5:af:f5:34:1c:81:5e:31:3a:44:0e:57:5f:9e:
85:1a:ca:a9:76:c1:0b:7e:95:f9:a9:fa:ed:c3:5c:
96:6e:0d:1f:21:10:83:f5:c3:8c:3c:48:73:03:92:
c4:f2:3b:79:dc:7d:0a:ed:2c:b0:59:27:7a:e2:6c:
b3:75:3b:d1:8c:69:98:5b:02:4c:c3:90:c9:73:e5:
d4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:76:AF:06:E5:BF:90:DC:A4:A9:CB:B2:75:8B:E6:79:38:0F:26:1A
X509v3 Authority Key Identifier:
keyid:23:DB:33:23:DD:2C:D7:9C:37:38:58:1D:42:F4:AB:0F:49:88:34:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:df:89:57:3a:56:a3:8b:05:f7:68:be:68:26:e3:24:cd:3a:
3b:44:58:5a:c5:87:60:5d:78:61:b0:0f:f0:d6:a6:ae:25:8e:
69:7f:83:3d:bb:6c:ad:af:5d:12:ee:60:b0:32:ca:66:72:c9:
4e:68:a8:15:6e:ba:50:57:85:d4:0f:fe:ce:11:dc:b3:eb:6d:
b7:36:a7:04:8c:d8:7e:dc:d6:12:f9:a9:b6:69:2a:23:de:94:
55:60:ae:55:23:39:42:15:d1:f3:ba:7f:c3:a5:39:89:55:db:
a6:b9:b7:ed:56:06:f6:3c:67:a0:7f:1f:a9:f6:23:b9:8a:a0:
cc:5a:a5:1f:88:c5:8d:cf:d9:d2:ff:60:1e:23:9d:22:7a:bc:
34:ff:93:b1:a0:3f:0a:84:d0:97:35:06:89:3d:25:53:fc:92:
bd:7e:53:57:b3:a5:ec:d9:6e:1d:3c:ea:e8:98:25:d8:d2:77:
30:2a:33:b3:46:ea:32:76:53:68:93:cb:d9:74:f9:c5:89:eb:
10:87:1f:ff:b7:3e:40:48:7e:93:56:8a:48:d0:75:20:8f:53:
85:ae:86:d5:e6:1d:93:a6:d3:bc:e1:7c:91:d9:cf:11:75:8c:
ea:46:35:02:26:a7:f1:e4:b5:e7:4c:bb:8a:12:36:f6:0a:33:
e4:75:c8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:20:42 2026 by rpki-client