
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
File: iTrFeQFBVhhq6vUDS6C0km-S43Q.mft (raw, json)
Hash identifier: cthPnQGMo3dC6KaUTsJnqyIu1LEKRpmcf0XZYVj4tss=
Subject key identifier: 55:A6:3C:38:DB:30:31:45:7D:05:74:1F:9E:4B:B0:50:0D:B1:EE:3E
Authority key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74
Certificate issuer: /CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
Manifest number: F9
Signing time: Wed 25 Mar 2026 05:30:07 +0000
Manifest this update: Wed 25 Mar 2026 05:30:07 +0000
Manifest next update: Wed 01 Apr 2026 05:30:07 +0000
Files and hashes: 1: iTrFeQFBVhhq6vUDS6C0km-S43Q.crl (hash: n41dT3Ql9kbrWY72fXph8geLl0dNGVXEYOktm+ehsFU=)
2: FB729544B57F11EF8BDF3346C4F9AE02.roa (hash: lra+qhDRGNXUaND0a9KhE0KK0EaPsUI652BkcyFm2ic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl
rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E3C7, serialNumber=893AC579014156186AEAF5034BA0B4926F92E374
Validity
Not Before: Mar 25 05:30:07 2026 GMT
Not After : Apr 1 05:30:07 2026 GMT
Subject: CN=69c372df-8f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:0e:3e:b6:7f:d1:83:6f:45:c8:cf:e9:7c:
06:33:c2:f3:e2:7b:19:09:3c:f9:47:e7:71:43:de:
4c:f9:c0:62:35:81:ac:ba:ca:0b:bc:fe:c9:aa:ac:
30:ed:bc:d6:25:69:d9:9a:ca:69:1e:0c:08:71:8e:
ca:1b:42:59:00:cb:b6:3c:10:c5:9d:ff:77:0e:60:
f1:0b:e8:a3:8f:d9:bf:8c:a5:47:0c:36:be:dd:9c:
84:8d:91:c1:eb:f6:15:e8:ae:ec:f5:16:b9:2b:f4:
b4:bf:92:86:52:1d:c5:52:4b:de:f9:5c:03:c1:62:
f3:fb:6c:fe:d5:ae:a5:0f:fd:5d:38:88:8b:5e:72:
4a:0d:d8:a5:a3:2c:84:1d:e5:50:2c:b5:09:d9:a5:
2a:3c:b2:3b:46:6c:97:43:44:f4:08:5e:f6:e9:23:
fa:66:bb:47:6c:e0:10:d0:2a:01:b4:bd:58:a4:e5:
f9:a9:f3:f5:13:f8:9e:e9:fb:f6:93:5d:27:67:e9:
95:4d:48:40:6a:75:72:37:da:b7:d9:bb:b8:95:21:
87:d1:5f:66:b6:7b:e8:22:54:d0:0e:23:c6:06:52:
dc:8d:fd:e2:c5:94:df:11:f7:9f:c4:3d:bc:ad:38:
62:8e:90:c5:84:de:83:c3:09:e3:3e:9f:b6:24:4c:
ef:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A6:3C:38:DB:30:31:45:7D:05:74:1F:9E:4B:B0:50:0D:B1:EE:3E
X509v3 Authority Key Identifier:
keyid:89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:2a:58:6d:52:5b:89:4e:20:19:2e:72:e7:ea:b5:7f:57:87:
5b:1f:1b:1e:6e:f5:f4:1c:39:cc:05:e1:f0:c1:0f:68:a5:d5:
ba:15:63:52:1b:7d:78:e6:54:cd:bb:90:c6:c8:b8:c1:9a:7d:
cf:f4:b9:04:73:83:ae:61:3b:47:71:14:3c:84:ad:24:e2:1f:
6c:5a:d8:80:52:ca:ae:1e:3a:11:9a:ac:8b:1e:ca:61:ea:30:
c1:26:68:ce:21:85:f9:44:81:b1:c3:1f:02:e1:c2:07:e7:f5:
a6:4b:28:5b:75:ba:75:f0:40:d6:ab:83:a9:73:a2:a7:77:24:
f8:5f:79:62:ec:13:3f:9f:3c:ab:6b:8f:30:77:7b:67:3c:92:
48:2e:e8:ef:04:0f:a9:31:1b:d1:74:f7:e4:c3:60:19:fa:bc:
40:91:76:2e:0b:fa:97:31:8e:78:0d:2e:55:d8:f7:c4:38:ab:
9b:69:75:f2:20:8b:b9:9c:9b:b6:d2:90:0f:51:ec:1b:75:ab:
1a:e2:c4:da:ef:f8:84:73:d9:30:e9:a7:19:23:e9:b3:26:00:
5d:d0:a1:a2:d7:c3:fb:51:ae:45:88:9c:7d:c3:6a:96:76:48:
da:9d:02:27:cf:9c:a7:e6:c9:99:32:86:b8:11:4a:b3:b3:62:
c9:37:01:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:32:06 2026 by rpki-client