
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
File: ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft (raw, json)
Hash identifier: dR3l7UJQ6DPbYm/pYcRKkTQF70NMPKPX6VpyGlyBzt0=
Subject key identifier: F3:9B:2E:9B:FA:32:DC:88:F4:FF:74:1E:21:D4:17:75:A9:53:87:37
Authority key identifier: 21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18
Certificate issuer: /CN=A913F2E2/serialNumber=21261B89749893C3B31841B96FE3FB6323032F18
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
Manifest number: 0142
Signing time: Wed 25 Mar 2026 04:34:01 +0000
Manifest this update: Wed 25 Mar 2026 04:34:00 +0000
Manifest next update: Wed 01 Apr 2026 04:34:00 +0000
Files and hashes: 1: ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl (hash: oNtMNVp85vAVxFdGdOn5HrmXvAlkVCHsYeuG05f/z00=)
2: A8051CC4508011EF81053074C4F9AE02.roa (hash: gEOQ4Shko9Ffhb3sUw/V54wk1wOVzUKZiGrhJDBT6Fs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl
rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F2E2, serialNumber=21261B89749893C3B31841B96FE3FB6323032F18
Validity
Not Before: Mar 25 04:34:00 2026 GMT
Not After : Apr 1 04:34:00 2026 GMT
Subject: CN=69c365b9-f5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:ed:91:24:b7:e3:42:e6:1b:29:5d:1b:97:
8e:1f:af:d4:bb:02:20:bc:81:46:95:96:4d:99:5e:
b4:8a:9b:b1:83:78:3c:9e:7d:88:86:1f:46:d9:21:
d2:31:8a:06:52:05:22:9b:4c:73:0d:13:e6:d5:5f:
51:7f:fe:73:cb:b4:38:51:ef:ad:44:c4:df:2f:fa:
85:62:09:5c:1f:4e:aa:e8:27:3e:ca:f3:16:0f:f0:
5b:d2:3f:82:78:30:c5:3c:83:c7:78:e1:02:93:aa:
9c:fa:65:15:e5:cb:63:a1:ad:d9:52:91:94:ee:44:
a2:06:a8:fb:fa:80:52:68:c4:ec:b3:73:0f:b2:90:
5d:68:a9:08:2b:4f:86:88:b5:9a:c8:07:c6:7b:4d:
f8:fe:47:b9:da:60:c9:43:ee:d7:92:11:b8:1d:34:
e7:08:a3:3f:a7:6b:5f:92:fb:06:88:3f:16:e9:a5:
d8:d8:e5:3d:aa:db:a8:e5:87:81:70:6c:27:ca:54:
54:25:29:b7:fc:11:20:64:99:c7:93:61:02:0a:b2:
d4:6e:c1:de:d2:23:e0:32:c1:2d:0b:61:e3:2d:67:
5b:8e:06:61:93:9c:79:df:3c:41:0b:6d:87:77:04:
33:85:56:db:12:f1:07:de:fa:1f:52:4c:4c:f9:c6:
1d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9B:2E:9B:FA:32:DC:88:F4:FF:74:1E:21:D4:17:75:A9:53:87:37
X509v3 Authority Key Identifier:
keyid:21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:91:2a:da:38:61:bb:4e:d4:f9:97:26:28:34:5f:01:a0:88:
c9:d8:bc:9c:35:37:08:ff:fc:dd:a0:db:b1:a0:68:07:96:4f:
6f:6d:2e:ff:e4:5c:26:b2:b1:05:24:f0:c6:e3:0d:4e:28:59:
28:a7:0c:d5:e0:5f:1f:d9:3c:8b:84:81:cd:fc:05:ae:34:84:
0d:d4:a1:b6:79:0c:59:d9:43:0d:10:37:c8:c2:5a:7e:96:a0:
91:14:79:4f:ff:db:f0:db:ac:56:5b:61:d3:6c:01:fe:03:6e:
c9:21:c9:15:50:75:df:1b:af:f5:66:8e:4d:06:21:b3:b3:11:
ff:58:03:8e:06:33:65:27:08:2e:a6:62:b5:b6:08:96:51:4d:
af:e9:7c:91:23:b6:08:ae:7f:36:b8:b7:af:fa:81:58:08:41:
59:4d:02:f8:f4:a3:9d:f7:e1:ee:b3:ea:fe:c5:6d:af:e5:08:
05:8f:0b:bb:12:4f:83:c2:bb:31:38:94:53:44:ef:48:d1:be:
c7:d4:3d:5d:74:16:8d:09:75:c0:b6:5d:cd:49:06:35:45:b9:
e7:28:7e:19:49:cc:02:89:f9:19:c1:ac:1e:2f:e9:2b:ba:05:
f0:c1:ad:af:cd:da:80:4f:f9:c7:ef:ee:9c:c0:a1:57:64:43:
f7:dc:97:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:35 2026 by rpki-client