
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
File: i2WlKUN31oY3jEaz6drXzbW2Z5E.mft (raw, json)
Hash identifier: kxsIutrFFvVA7VzkIj+jsRxHkcapSRFkaUAphbqi6Ss=
Subject key identifier: 23:AA:2E:0C:C6:CD:7D:B9:64:7E:BA:84:37:BF:72:89:82:15:E3:27
Authority key identifier: 8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91
Certificate issuer: /CN=A9127C2D/serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791
Certificate serial: 01E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
Manifest number: 01D4
Signing time: Wed 13 May 2026 03:43:55 +0000
Manifest this update: Wed 13 May 2026 03:43:54 +0000
Manifest next update: Wed 20 May 2026 03:43:54 +0000
Files and hashes: 1: i2WlKUN31oY3jEaz6drXzbW2Z5E.crl (hash: j8PJo3qg90TK3sQiclxjai+Urd5kseZsisdpOZ0XLLI=)
2: A2F568A08CDC11EEA05B6E55C4F9AE02.roa (hash: hou+c7BsoKfVisvEwRZh9uWs6LCWRU5zcufZlx3RZD4=)
3: 83298B188CDD11EE9C0A8258C4F9AE02.roa (hash: /wrVNUp5njYp8bBfMjYQTOD/jBHOQFuLEFwcPRZnAKo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl
rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:43:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480 (0x1e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127C2D, serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791
Validity
Not Before: May 13 03:43:54 2026 GMT
Not After : May 20 03:43:54 2026 GMT
Subject: CN=6a03f37b-ef76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fc:32:4c:74:b2:7f:4e:35:a2:56:87:35:5a:
16:0c:85:59:8d:0d:83:da:20:d5:fb:5e:0d:8e:12:
79:77:00:5e:b9:25:76:24:1b:3c:26:09:a8:fc:d3:
7e:be:6c:d1:86:1e:c8:0a:92:31:1d:22:c2:be:ff:
11:bd:2a:16:9f:83:a0:d4:57:1f:5b:6e:3e:5e:92:
8c:03:68:f8:38:cf:ba:81:37:fd:3a:16:c9:29:2b:
a2:ee:ff:28:59:54:50:33:9c:28:91:d8:54:d0:39:
1f:05:60:0d:95:dc:86:ce:5b:2a:7a:15:98:78:36:
29:d1:27:c2:08:fa:fd:2c:a5:0d:d3:b6:e2:8f:2d:
82:23:2a:bb:cd:a2:ae:16:dd:27:9e:93:4b:59:e9:
ce:0d:70:b1:9f:c1:86:5e:d2:61:27:c0:77:61:42:
c7:9d:5f:34:51:08:6c:0b:a9:9b:4c:4b:13:a1:bc:
1d:5c:d2:3b:04:01:9d:de:e1:0c:13:3c:f4:56:97:
ee:66:5a:ba:31:01:32:88:4d:cb:d4:8c:6f:ba:f0:
09:c9:93:be:e7:5d:d2:43:5b:62:ff:92:b7:22:60:
d9:76:1c:2e:fd:fd:94:62:c3:69:20:38:ef:cc:2f:
f2:2d:b0:ff:ce:92:e9:1b:d6:b7:04:b1:a0:20:d2:
38:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AA:2E:0C:C6:CD:7D:B9:64:7E:BA:84:37:BF:72:89:82:15:E3:27
X509v3 Authority Key Identifier:
keyid:8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:db:ce:57:b7:26:a9:74:91:ac:31:9b:43:82:a5:15:df:ff:
36:03:91:61:98:ed:aa:05:08:9b:05:fa:05:ab:ed:01:8a:cb:
d3:aa:31:df:00:eb:ea:3e:e2:c2:0f:b6:31:2f:68:e8:9f:c0:
3b:28:02:53:98:56:15:75:ad:3a:2e:57:c7:52:45:5d:1e:d7:
00:ab:b1:bf:00:f6:7a:21:98:c0:7f:39:4a:c0:7f:92:3c:06:
b6:14:1f:cf:85:c2:12:eb:5a:41:03:29:50:a8:ae:d5:f3:09:
c8:df:77:c5:b8:37:d6:33:b3:ac:c2:12:ba:8b:fc:bb:d9:e9:
22:a8:4f:b2:8f:cd:e8:ad:cd:1e:d0:45:a8:72:fc:88:d4:37:
e5:d6:70:48:bb:ee:6e:55:99:07:ad:53:89:a9:11:63:68:94:
3a:9e:39:ee:8e:9d:2c:61:11:2f:86:4d:87:4c:48:06:ef:ac:
44:4b:3a:70:03:cb:0c:61:67:17:61:77:8d:3e:e3:14:62:bd:
0d:84:64:93:05:1f:f4:03:6b:07:f2:37:74:46:67:7d:39:31:
44:d3:66:f4:ae:9d:66:f7:12:82:2f:63:91:25:b4:c5:86:bb:
dc:85:a7:86:be:f7:f2:28:59:13:c2:83:f9:b8:0e:02:46:d8:
52:7e:95:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:22:44 2026 by rpki-client