
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft
File: IwN4FncHnC-7R0lkDwZXociO20Q.mft (raw, json)
Hash identifier: ynLwaEjZ8TzyyYJF8AIfw7mFhuyZDOMNXvXYbRyZyQY=
Subject key identifier: CD:E6:C1:94:E9:3B:E3:3D:DC:2A:95:F6:DD:8C:A1:69:E7:1D:5B:7B
Authority key identifier: 23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44
Certificate issuer: /CN=A911E0B4/serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44
Certificate serial: F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft
Manifest number: F8
Signing time: Wed 25 Mar 2026 05:28:24 +0000
Manifest this update: Wed 25 Mar 2026 05:28:24 +0000
Manifest next update: Wed 01 Apr 2026 05:28:24 +0000
Files and hashes: 1: IwN4FncHnC-7R0lkDwZXociO20Q.crl (hash: A+vPy3+azn7OoYN0NICHVNlyQTX8R9VnFTjdVLqfryw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl
rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E0B4, serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44
Validity
Not Before: Mar 25 05:28:24 2026 GMT
Not After : Apr 1 05:28:24 2026 GMT
Subject: CN=69c37278-dd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:4a:94:34:c8:2c:b3:e2:3e:bf:6e:03:51:
d5:7c:62:96:e7:c4:ee:93:49:78:51:2c:94:79:6b:
ca:4e:96:89:95:e2:15:90:69:42:d9:07:64:72:41:
0e:33:65:17:a3:5d:fc:e9:81:9d:7d:06:e5:e3:6c:
b5:1f:10:57:ff:de:44:46:93:8e:fb:6f:19:8a:09:
2f:e4:65:02:fe:0f:5e:c1:2e:ac:98:96:9c:dc:dd:
91:5f:7d:f0:6a:9f:47:7c:16:c4:ae:4c:9c:49:5d:
2c:0a:8e:40:3b:4e:f7:3e:42:8f:e7:c7:12:85:f2:
f7:b3:53:a3:1c:c5:0a:c7:f1:bf:59:d9:97:9f:f8:
67:95:cc:fa:fa:fe:2e:55:e5:f7:2b:05:5f:3e:d6:
ba:3d:a8:0d:a7:fa:b9:7d:82:25:45:88:74:1f:d1:
66:1d:38:c5:79:ee:70:0d:8d:63:86:29:64:76:8b:
db:03:2d:7e:08:89:e1:87:f4:83:ec:6c:83:84:34:
9f:70:dd:dc:03:ac:4f:24:c3:c6:a4:10:22:f7:30:
76:1c:c9:95:55:54:de:c2:3f:b3:05:61:02:78:c6:
70:a4:a9:a9:e0:37:98:3c:c3:7f:95:f8:48:dd:fe:
a3:a5:ee:e6:84:09:7a:f5:cf:ed:c3:12:b9:dd:9b:
6b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E6:C1:94:E9:3B:E3:3D:DC:2A:95:F6:DD:8C:A1:69:E7:1D:5B:7B
X509v3 Authority Key Identifier:
keyid:23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:1d:44:b1:5c:d3:46:a7:a1:95:ad:0b:da:2e:6f:69:03:6d:
b0:98:61:ad:33:e1:b5:5c:96:5e:f4:db:0f:10:d1:c8:b2:c0:
7d:41:fc:85:c0:a9:0d:7f:e3:d4:df:8c:56:38:76:7a:f3:6d:
ba:bc:42:79:cc:41:73:1b:ba:53:42:9c:5f:f3:9b:44:f0:50:
28:91:f5:03:fd:2d:78:ab:72:bf:89:56:51:03:33:6c:d4:a8:
83:7c:e5:b4:6e:43:92:90:c1:da:ac:7d:98:61:c6:13:9a:bd:
57:9c:34:88:b6:ff:6e:d8:cc:81:8c:a6:91:c4:ef:17:a2:67:
2d:b3:92:f8:7f:e7:3b:f2:8a:11:de:27:83:01:df:b5:42:62:
f0:3c:f7:37:ce:c1:76:fa:08:00:07:be:01:e7:e1:a5:69:66:
b6:0f:e2:5b:83:4e:d5:17:5e:0f:19:19:a9:ed:5d:b2:b5:26:
bc:b7:a8:a4:b8:91:99:9d:f6:fd:dd:e6:40:3f:48:0a:2e:fc:
f3:47:7a:1c:20:63:35:af:ad:6b:78:1e:69:86:f2:17:da:eb:
f5:5b:44:6d:70:3c:ea:44:34:51:c3:a6:a4:c1:4b:0f:82:ad:
01:d5:d7:f9:79:fa:f4:ec:e1:3d:cb:12:69:29:60:07:dc:79:
68:75:c2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:09:47 2026 by rpki-client