
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft
File: 89pR_oC82pcIdSXiBGIeqfVXQZk.mft (raw, json)
Hash identifier: flOLNBvdIPOxdk4aQtn1OT6s45jd6Y7LQuzzdDqwb0w=
Subject key identifier: 89:49:95:08:C1:A2:60:AC:9D:C3:2A:C2:29:81:DC:1C:F4:54:89:09
Authority key identifier: F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99
Certificate issuer: /CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199
Certificate serial: 0270
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft
Manifest number: 0254
Signing time: Mon 11 May 2026 02:44:12 +0000
Manifest this update: Mon 11 May 2026 02:44:12 +0000
Manifest next update: Mon 18 May 2026 02:44:12 +0000
Files and hashes: 1: 89pR_oC82pcIdSXiBGIeqfVXQZk.crl (hash: chE8Gr0FQjUrBOGvSIi19xoFQj1qZ4lFz9cN2w/tmpk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl
rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147CDA, serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199
Validity
Not Before: May 11 02:44:12 2026 GMT
Not After : May 18 02:44:12 2026 GMT
Subject: CN=6a01427c-65c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:83:cb:1e:82:aa:cd:60:74:8f:72:bd:a8:
8d:43:8b:8b:7a:7e:fc:f4:8c:4f:24:24:b3:c8:a0:
e0:7b:78:3b:da:53:c8:80:e9:0e:81:d8:3d:00:5a:
5d:d8:56:77:9a:9f:11:a7:af:3e:63:f6:b9:49:fe:
c7:a8:1d:e4:64:81:70:2e:4c:07:27:74:4a:e5:cd:
b2:7a:74:16:a8:6e:57:d3:d9:8d:e1:bc:7b:ea:23:
12:e7:9f:47:13:7a:a7:10:98:53:e8:5b:01:61:05:
a7:12:b6:17:4d:f9:86:57:6c:a5:27:95:00:37:69:
7e:17:1b:bd:5c:71:d7:09:66:be:7a:af:d7:13:62:
55:a7:97:dd:5f:eb:07:ff:2d:c6:43:c1:7d:93:b1:
a5:67:2c:09:05:3c:c6:fa:32:7d:c0:39:5c:e2:09:
e5:36:a8:9b:10:33:9e:3a:d2:62:e2:69:af:6f:44:
44:74:52:ea:28:65:ec:88:46:f9:0a:b4:85:2f:f5:
d1:c3:68:ca:eb:74:e1:73:ed:86:b5:a4:f2:70:5b:
98:6e:a7:6c:34:c2:be:72:c3:62:20:ea:5d:8d:d8:
c4:a3:9d:a1:d7:49:bd:5a:61:f6:88:25:3e:af:f4:
68:d9:38:17:67:c3:00:a8:0b:61:28:e4:63:e7:a8:
d1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:49:95:08:C1:A2:60:AC:9D:C3:2A:C2:29:81:DC:1C:F4:54:89:09
X509v3 Authority Key Identifier:
keyid:F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:54:01:a9:1f:71:9c:de:7c:7a:4e:17:fa:43:aa:96:93:aa:
64:a0:81:42:e9:0e:99:de:1b:cb:b3:67:8f:b1:cf:79:a3:e7:
e2:ec:12:27:a1:2b:7b:c1:c4:38:fc:b1:e4:ca:02:84:16:46:
0e:2b:df:cc:41:6f:aa:05:f2:52:64:cd:7d:57:fc:7b:96:5b:
24:1c:35:db:88:a5:9d:88:2a:b3:02:be:aa:19:83:fc:48:8a:
93:05:be:9a:2a:e8:34:84:4c:c2:37:7f:88:8f:1f:15:8f:17:
a0:1a:23:59:cb:47:24:79:cf:d1:24:ae:0f:b1:14:fa:d9:12:
57:62:5f:c4:85:ce:9c:01:fd:02:fb:6d:84:bd:33:7b:1f:10:
1c:e8:50:3e:8a:f5:f7:0c:87:09:d6:6d:f3:1a:c0:79:6a:6e:
a6:28:1e:05:1f:29:52:78:07:6e:72:2f:0f:f2:25:d2:b5:32:
f9:7a:46:87:99:a1:b8:b8:6c:13:85:98:d3:88:b4:6b:fc:39:
07:e9:76:cc:6d:12:2a:a4:0a:c9:d2:95:7f:c6:12:61:bd:dc:
03:05:fe:bb:14:f1:1d:23:65:1c:14:fb:e0:fa:1e:ee:3e:13:
e7:c4:95:24:f4:a9:24:2c:c3:59:47:0a:ad:b0:d8:1d:80:14:
8a:18:7b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:31 2026 by rpki-client