
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
File: i2WlKUN31oY3jEaz6drXzbW2Z5E.mft (raw, json)
Hash identifier: EYgXkveJ4ym+9A+IF9mCFiD/iquqGERSGXOl2w1pqQs=
Subject key identifier: 4D:D5:F7:72:43:0F:21:50:61:DE:59:5D:08:31:03:0C:61:DC:C4:30
Authority key identifier: 8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91
Certificate issuer: /CN=A9127C2D/serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791
Certificate serial: 01C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
Manifest number: 01BB
Signing time: Wed 25 Mar 2026 03:14:00 +0000
Manifest this update: Wed 25 Mar 2026 03:14:00 +0000
Manifest next update: Wed 01 Apr 2026 03:14:00 +0000
Files and hashes: 1: i2WlKUN31oY3jEaz6drXzbW2Z5E.crl (hash: F4yeOhdV2dHzJLVRe3IfhcvoolFkBQjVCayjVwmRLc0=)
2: 83298B188CDD11EE9C0A8258C4F9AE02.roa (hash: /wrVNUp5njYp8bBfMjYQTOD/jBHOQFuLEFwcPRZnAKo=)
3: A2F568A08CDC11EEA05B6E55C4F9AE02.roa (hash: hou+c7BsoKfVisvEwRZh9uWs6LCWRU5zcufZlx3RZD4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl
rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:13:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127C2D, serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791
Validity
Not Before: Mar 25 03:14:00 2026 GMT
Not After : Apr 1 03:14:00 2026 GMT
Subject: CN=69c352f8-086a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0b:ef:86:e1:04:22:4d:29:78:34:ca:3a:9a:
d0:a1:9b:87:01:5d:6c:aa:94:a2:e6:6d:1d:2e:4b:
b0:fb:e2:5e:51:c6:f7:ff:29:06:8c:75:99:f2:74:
6c:c4:d4:bf:42:67:03:55:30:ac:52:96:a6:95:f7:
c6:b8:2b:15:c5:76:50:12:eb:e6:d5:c6:a0:b8:9b:
af:da:3b:bf:2d:65:63:c2:d6:18:fc:89:d8:d1:45:
11:86:07:18:16:17:74:c6:be:b8:b1:1d:d2:32:5d:
e8:bc:98:26:8f:0e:64:77:7a:fa:0b:2d:78:a3:ed:
23:48:0e:32:2f:43:87:3a:ae:f3:6e:08:27:c4:d2:
29:35:88:cb:29:5b:2e:d6:27:80:de:64:06:e5:b3:
3f:f2:a5:a5:eb:ed:01:ff:48:19:63:a7:22:a3:ad:
c6:3b:d8:6d:10:32:51:65:8c:eb:c2:e2:04:d6:ff:
64:f3:e2:0f:c5:49:19:55:90:c5:58:3c:a4:9b:ab:
66:12:be:d3:01:0b:a0:65:4b:61:b7:25:9e:bc:2f:
68:ee:79:e5:71:e4:da:97:2b:7c:b8:fe:2a:91:ae:
71:85:61:3d:ae:14:83:6a:9b:c9:06:17:33:89:f1:
f3:92:ac:5b:70:f5:9d:c9:77:aa:2c:fe:d0:27:63:
a0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D5:F7:72:43:0F:21:50:61:DE:59:5D:08:31:03:0C:61:DC:C4:30
X509v3 Authority Key Identifier:
keyid:8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:5c:94:fe:2a:4e:28:57:07:7b:2d:35:f6:d7:fc:bc:5a:13:
5d:91:3e:27:99:82:7c:4b:26:20:35:28:be:c0:c4:26:84:af:
95:d9:fb:9a:c5:9a:39:0d:b8:fa:51:db:17:4b:59:e1:e1:9f:
35:91:5f:e8:49:b6:b2:a6:a7:54:5a:ef:68:e3:4e:7b:f5:23:
c1:57:d1:2e:04:3d:e7:35:81:83:d1:2b:7c:d2:0b:f7:16:5e:
a3:a7:32:9b:d0:41:d6:1d:dc:7b:82:e5:8c:30:9f:57:dd:82:
3e:e7:41:5a:2b:b8:0a:c6:8d:f3:7b:0f:ef:46:6f:6a:dc:17:
40:45:20:f8:be:6f:f7:82:32:60:ca:29:71:b1:48:06:12:87:
6c:4c:ca:53:a0:75:44:6f:4b:a1:ea:76:58:5e:c7:bd:7e:c0:
f4:cf:6d:12:d5:3d:11:61:7c:ef:4d:f3:75:a1:a1:b5:12:58:
21:47:80:db:d5:f8:28:20:b6:af:7a:0c:d9:e8:66:9e:59:0e:
0d:b4:e5:e0:50:a3:84:a6:d0:20:95:0b:3b:39:31:b8:04:e1:
62:37:b3:99:ed:73:cc:a1:ce:f3:37:ec:f4:84:71:25:31:ee:
43:ee:c4:b4:82:42:2a:16:0a:83:15:3b:a5:66:70:af:2e:93:
eb:9b:78:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:41:39 2026 by rpki-client