
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
File: iAd3htZlI61ZmNY_aXr0LwOcKqk.mft (raw, json)
Hash identifier: JgIhM4ugyjj5hgsLj94VX+kSk1VCKpRTnfJW1W6hItg=
Subject key identifier: 8B:88:20:C5:CA:99:10:55:6F:DF:B1:86:C8:88:04:1F:2A:B8:01:AA
Authority key identifier: 88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9
Certificate issuer: /CN=A914A4E2/serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9
Certificate serial: 1118
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
Manifest number: 1106
Signing time: Tue 24 Mar 2026 17:09:22 +0000
Manifest this update: Tue 24 Mar 2026 17:09:22 +0000
Manifest next update: Tue 31 Mar 2026 17:09:22 +0000
Files and hashes: 1: iAd3htZlI61ZmNY_aXr0LwOcKqk.crl (hash: TOZzRdLE/HItR4Vd8q1alqAPnMhWus+hv2XXgO3abjE=)
2: 744CCD5834F911E98AB73628C4F9AE02.roa (hash: HYEKunXFXGODG028S70WdJ2ItWUZF2FtLd9w5pl0ghE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl
rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4376 (0x1118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A4E2, serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9
Validity
Not Before: Mar 24 17:09:22 2026 GMT
Not After : Mar 31 17:09:22 2026 GMT
Subject: CN=69c2c542-babb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:e3:4d:5d:41:1b:b4:6f:12:d3:a6:32:79:
99:87:f5:bc:83:1f:31:ec:e6:be:19:3e:98:b3:b8:
8f:c2:ed:e3:7f:34:ac:7b:e1:8d:f7:bd:98:d3:27:
90:0d:77:98:dc:63:d7:b0:2e:67:53:6c:8e:0d:31:
9e:9e:c2:be:42:a5:ea:0e:78:f5:80:37:e5:ce:97:
2d:84:4b:65:5f:61:d3:1c:c7:7d:bd:4d:ba:77:b3:
1c:5c:93:41:17:a6:61:78:8e:28:65:19:6b:58:2e:
9a:35:7a:4f:5a:42:a3:ec:a8:42:c1:81:a2:95:d7:
61:c8:09:4e:c1:9e:c8:b8:d0:f8:d0:2c:36:5a:a9:
e8:1c:b7:f4:f1:dc:b2:bd:ab:2a:32:49:c1:62:73:
8c:b1:35:25:e2:f3:a6:30:95:78:95:da:62:08:03:
a9:4e:52:39:1c:22:cc:9c:15:0a:58:1f:1f:ab:47:
c8:88:ac:ec:b9:5d:85:c6:ff:47:df:a8:d0:d8:fe:
9e:3a:4a:75:a1:b9:d9:8e:cf:7b:cb:bd:95:c1:be:
f7:48:25:3d:14:1f:39:15:2e:2b:41:68:6b:b2:73:
b8:41:6b:b3:05:36:95:1b:30:7e:e9:88:6b:24:dd:
51:8d:5f:3c:26:71:46:6d:f7:b1:aa:0e:30:b5:09:
1f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:88:20:C5:CA:99:10:55:6F:DF:B1:86:C8:88:04:1F:2A:B8:01:AA
X509v3 Authority Key Identifier:
keyid:88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:97:c5:87:a6:66:2d:d0:32:ba:fb:61:1f:b7:57:5c:c3:63:
0a:28:d2:28:54:82:ce:7e:28:36:59:27:a7:f8:f6:d9:22:fd:
83:c9:3a:15:ca:0a:f7:16:26:ae:d5:dd:f7:dd:b2:c4:22:fd:
3e:91:e8:aa:5d:56:16:6e:c7:2e:85:89:3b:93:0d:46:05:08:
95:82:9d:bf:b9:78:23:8e:b7:1c:ec:1f:6d:e5:99:ec:db:19:
2b:0b:5f:a0:91:5e:7d:fb:e7:89:30:86:bb:10:6a:20:dc:1b:
bb:ff:a0:85:77:f2:b5:77:00:b1:6f:80:ea:ec:ce:5e:f2:c2:
6e:fb:6e:c7:0b:d7:a6:fe:0d:c9:4f:8f:92:81:b0:69:db:18:
0f:ba:da:a4:e8:2a:41:7a:14:1a:40:14:cb:7c:b6:87:68:f0:
4d:ce:07:4b:67:83:ec:f9:6a:a9:46:a4:aa:c5:63:29:8a:6f:
05:44:7e:e5:53:ca:d2:ca:a2:64:8f:d2:1c:55:8c:01:32:97:
31:0b:38:d2:5e:be:37:2d:26:90:cd:92:61:3b:0b:a6:e7:26:
10:a9:ae:59:b4:7b:72:e5:ae:51:c3:5d:10:d2:dd:c4:13:46:
02:10:7d:d0:8b:67:c3:ca:2f:a0:45:ab:e5:80:e5:97:ee:7e:
c9:2b:5a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:29:25 2026 by rpki-client