
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft
File: 9-izu07xkrh2NgHbMj9N4oMaEBo.mft (raw, json)
Hash identifier: ld5YwXew+0DPADz4SXYpYaVLIDP7xYIZ+9qiwH5Pi6E=
Subject key identifier: 9C:11:C5:AD:88:6F:53:F9:0E:F5:4B:A9:B1:BD:70:81:77:D2:EC:E2
Authority key identifier: F7:E8:B3:BB:4E:F1:92:B8:76:36:01:DB:32:3F:4D:E2:83:1A:10:1A
Certificate issuer: /CN=A914B6D8/serialNumber=F7E8B3BB4EF192B8763601DB323F4DE2831A101A
Certificate serial: 0D0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft
Manifest number: 0CFD
Signing time: Tue 24 Mar 2026 17:59:10 +0000
Manifest this update: Tue 24 Mar 2026 17:59:09 +0000
Manifest next update: Tue 31 Mar 2026 17:59:09 +0000
Files and hashes: 1: 9-izu07xkrh2NgHbMj9N4oMaEBo.crl (hash: pTx5SzyPMcu6nCrScJhb2WTtf0HiqipS7xGq/pWaphg=)
2: 576819C8FFC811E9B70CA176C4F9AE02.roa (hash: Amw7E1YxZBlEfV1zp0e7MD9tZSbZD1DON7nJYMgbP5s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.crl
rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3339 (0xd0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B6D8, serialNumber=F7E8B3BB4EF192B8763601DB323F4DE2831A101A
Validity
Not Before: Mar 24 17:59:09 2026 GMT
Not After : Mar 31 17:59:09 2026 GMT
Subject: CN=69c2d0ee-3554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:62:ff:10:f8:44:b8:b3:cb:9a:8b:b5:d5:9f:
1c:d5:14:8d:60:ee:79:f1:68:54:e3:01:35:74:53:
c5:b3:d4:2b:21:f6:ac:f8:91:a2:67:36:71:6f:a2:
b9:f0:2b:b8:9f:10:68:66:bd:6f:17:f5:a1:db:32:
cd:8a:ed:05:ee:10:8a:de:e7:89:ce:09:2a:dc:f4:
23:ac:ad:aa:af:d0:58:ae:bf:b6:c4:03:50:de:8b:
cb:d2:01:bb:a2:9d:b5:a8:fc:93:57:f8:b8:82:6d:
fd:66:48:14:60:10:39:cf:63:9f:7e:76:10:1a:ef:
5a:70:bc:a3:a3:24:fd:e6:a0:11:35:8d:e3:bc:8b:
fe:d0:ac:5b:d8:94:59:44:b9:ed:32:49:d2:15:f3:
71:b3:c4:25:fa:6a:6a:43:26:f6:a7:24:a5:6c:49:
99:76:05:54:cf:9c:db:3b:80:ce:83:9c:d3:b6:11:
db:f7:9e:f8:d9:16:58:2e:74:fd:94:d0:aa:bc:8a:
a7:3f:73:da:91:1b:3b:1f:08:78:13:5b:f9:90:35:
0f:26:7d:33:d7:93:0f:db:b2:8c:49:70:79:3f:e0:
d9:76:70:2f:82:db:62:52:6a:4c:ca:7f:fc:0f:ee:
e0:5d:76:21:36:bf:ef:c4:09:af:7a:9a:ab:06:8a:
06:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:11:C5:AD:88:6F:53:F9:0E:F5:4B:A9:B1:BD:70:81:77:D2:EC:E2
X509v3 Authority Key Identifier:
keyid:F7:E8:B3:BB:4E:F1:92:B8:76:36:01:DB:32:3F:4D:E2:83:1A:10:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:76:ac:5a:1f:af:d3:11:a1:b0:95:9c:3e:b8:63:68:2d:d8:
45:d5:6c:80:c3:ae:9f:22:a1:10:97:32:e1:b1:b7:00:0e:ea:
aa:31:1f:01:e7:98:76:02:dc:a0:28:8e:5b:27:7d:d6:e3:84:
c0:9b:51:a9:7e:8b:e8:88:3a:37:1b:31:5a:d3:c7:9e:af:5d:
79:24:28:72:7d:21:b7:7c:2f:3c:38:09:23:5d:65:98:44:c6:
f8:84:5c:60:16:84:6f:c4:71:c4:d2:2c:87:fd:9d:05:04:18:
b8:fe:9c:ca:30:f8:a2:ba:32:19:e8:10:45:cd:47:87:a8:da:
2e:7e:f7:4e:45:60:c5:c1:b8:5b:83:3a:0f:7e:66:db:31:25:
8b:a9:4c:9e:55:3d:87:21:e6:9d:73:c0:b0:bb:f6:6d:a9:8e:
2b:7d:b6:3c:2a:96:a8:60:5d:04:ef:d6:a8:af:38:27:c4:3e:
2b:fd:92:60:ab:5c:34:ac:3c:10:d9:a3:b2:e9:0d:60:e2:a6:
f2:c9:57:e7:67:d2:e9:ae:29:e9:37:42:24:ba:c2:80:42:85:
38:ef:a7:a6:f1:cf:01:b8:d2:e3:ed:6f:53:04:c3:4b:7e:6a:
cc:34:1f:82:5c:1a:b7:df:27:6e:2e:9f:90:6e:16:11:f6:07:
a3:e1:32:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:36:04 2026 by rpki-client