
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft
File: iavBOYslsdbOj_e_sysS6fCWc_k.mft (raw, json)
Hash identifier: gESkNGr8xqEV7IswGeA209iJeuZnLFhX3JB0SZq0VEc=
Subject key identifier: 33:AE:A6:46:24:24:E0:AE:9A:C2:3E:CB:E1:DA:D6:78:73:E4:6E:4A
Authority key identifier: 89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9
Certificate issuer: /CN=A9143035/serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9
Certificate serial: 04FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft
Manifest number: 04F4
Signing time: Tue 24 Mar 2026 23:24:25 +0000
Manifest this update: Tue 24 Mar 2026 23:24:24 +0000
Manifest next update: Tue 31 Mar 2026 23:24:24 +0000
Files and hashes: 1: iavBOYslsdbOj_e_sysS6fCWc_k.crl (hash: MXFowojq1F4eVg82hkI53s68OdX9x2XMsHS3i2JxGmM=)
2: 6B47EC68529E11EC9C7C2081C4F9AE02.roa (hash: r8OdCls35VkGR5BYn+Xw2ps0AhkdTQVuJUU7goTrFY4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl
rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:24:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1276 (0x4fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143035, serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9
Validity
Not Before: Mar 24 23:24:24 2026 GMT
Not After : Mar 31 23:24:24 2026 GMT
Subject: CN=69c31d29-bf2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:3d:77:18:fa:2d:df:95:e1:be:3a:3d:f7:
b2:54:68:c9:9a:0c:0a:86:9a:1d:57:28:21:bc:f3:
e4:e6:99:d6:83:7f:3b:77:fb:ba:39:c3:1d:a6:69:
a9:39:ec:aa:d4:4e:97:a6:ca:0b:f3:5b:24:f2:62:
ec:70:b2:be:93:87:c6:c3:67:ec:72:cd:dd:5f:16:
9e:5e:af:f1:be:59:db:30:af:b6:ec:81:f5:9f:5f:
da:6f:c7:0f:c5:0e:3a:9c:77:4b:74:9a:71:f4:7a:
4f:05:d3:c3:35:e5:84:27:00:9d:3a:88:0e:0b:ab:
2b:56:cc:c9:17:63:83:05:57:13:01:8b:26:bb:0e:
21:aa:9a:41:11:25:ec:08:6b:6e:dc:12:e5:78:70:
5e:3e:6b:59:0a:33:c0:8b:ba:61:67:18:8e:60:cd:
09:29:69:b0:9f:fd:cb:89:7d:70:81:f5:5f:4e:e8:
00:50:2c:b9:f9:f3:91:5a:17:1a:1b:c5:03:2c:89:
42:73:30:5a:1b:51:53:28:a8:09:1c:79:88:73:d8:
4c:13:ec:54:c8:af:7e:36:e4:97:29:6d:5b:b6:11:
39:c0:57:aa:ff:3d:f4:f1:b9:b6:32:95:1a:48:08:
a8:7b:30:98:4e:db:e7:6c:3b:39:d1:db:7b:47:17:
e2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AE:A6:46:24:24:E0:AE:9A:C2:3E:CB:E1:DA:D6:78:73:E4:6E:4A
X509v3 Authority Key Identifier:
keyid:89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:b9:4b:2b:dc:d8:49:a9:45:87:4c:89:75:8e:b6:75:d9:9f:
9e:25:21:08:c6:33:8d:3f:13:31:6f:ed:a0:66:3e:06:84:95:
3f:ca:55:5d:bf:bf:fe:b2:80:08:6d:77:89:e3:55:07:98:55:
7e:d2:00:5d:5d:cb:3e:5a:bc:20:64:2d:36:85:21:99:5d:6a:
43:99:8d:0f:26:04:04:da:e0:ec:2a:9d:ab:b0:98:2a:7b:23:
ee:2b:94:2b:09:bd:68:77:49:1a:7f:47:d1:11:a4:a9:ba:11:
2e:b0:5b:62:c4:ce:c5:4d:7d:b6:da:44:88:bc:ac:70:b1:70:
29:7d:fe:8a:30:69:8d:7f:71:5d:e3:d7:92:2b:0b:42:61:1c:
3f:7c:de:cd:64:60:c6:d0:05:56:6b:76:65:6b:8b:ae:fc:8b:
11:2c:eb:65:e9:f6:f0:3e:a3:d9:b5:c1:76:e6:af:a2:2d:b7:
03:50:4f:75:8f:e5:56:36:e6:6d:8d:7b:af:fd:4d:af:ff:9e:
9c:6e:a4:76:79:cc:cb:b2:90:88:ea:ea:a6:24:76:d7:68:0a:
c5:92:e0:e2:b4:d4:46:a3:d9:39:af:47:a9:6b:3c:1e:5c:ef:
84:87:01:8d:69:ef:13:ed:9c:6d:ba:1a:26:df:1e:6c:5d:92:
8f:a1:16:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:32 2026 by rpki-client