
$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
File: i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft (raw, json)
Hash identifier: 33spj+Hk5AW0FigDI9Ya8a++BcxMIvYqnFumH6tEf54=
Subject key identifier: F2:AE:D3:70:BA:AC:0E:AF:AA:A9:78:83:A3:21:8D:83:9A:8C:FE:37
Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7
Certificate issuer: /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7
Certificate serial: 028C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
Manifest number: 0284
Signing time: Fri 27 Mar 2026 01:23:47 +0000
Manifest this update: Fri 27 Mar 2026 01:23:47 +0000
Manifest next update: Fri 03 Apr 2026 01:23:47 +0000
Files and hashes: 1: i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl (hash: wfBPDjngBdchrWW5WHWlAswWnQLwDounnfpPfxJmqk4=)
2: 9EFAFA76234311F18F511571AA833773.roa (hash: 4NzUw4b9D8ALfqcLviwrDkJ97hUefCQAutbVZdbx1i0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl
rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:23:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 652 (0x28c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914ECD7, serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7
Validity
Not Before: Mar 27 01:23:47 2026 GMT
Not After : Apr 3 01:23:47 2026 GMT
Subject: CN=69c5dc23-12e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:f4:c3:4d:ce:c4:52:27:57:62:4a:48:50:
bb:4f:3a:99:24:8c:ad:9e:e7:da:a2:6c:f3:83:e0:
2f:04:5a:9d:b3:63:4d:83:78:b6:d3:2f:d5:99:1e:
b4:1e:5f:a3:5c:f0:81:55:4f:32:ec:87:74:03:5a:
ff:43:c1:16:39:0c:43:6d:04:fe:4e:d5:9f:bf:f5:
e8:df:0c:b1:97:09:37:11:d1:37:df:32:6e:d4:63:
d5:d5:78:50:d9:e7:77:49:96:c7:9d:80:3f:18:1d:
eb:16:e8:eb:aa:a8:86:55:bc:c6:d5:e9:03:d2:c5:
6c:c8:3a:a9:d3:5c:e2:e3:97:6f:5b:7d:85:f2:6d:
29:2e:7e:79:22:f2:66:ca:72:ca:01:2d:e6:9a:a9:
5c:66:3e:fb:48:7d:96:f6:85:de:aa:9d:1e:01:54:
af:1a:c0:f6:58:89:29:08:0a:c3:cb:3a:0f:aa:6b:
f2:1a:8a:8f:0d:3e:59:4c:d5:fb:41:7e:a1:c3:87:
37:f0:80:78:21:22:ff:4c:b3:a3:b4:d4:ec:7a:52:
37:20:84:67:b9:39:2a:f0:6a:89:7d:94:70:28:8d:
25:8e:15:76:14:8d:bc:14:5f:7b:55:05:0b:09:32:
af:8b:55:02:fe:61:22:11:9f:1d:c1:e4:b1:90:db:
3e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AE:D3:70:BA:AC:0E:AF:AA:A9:78:83:A3:21:8D:83:9A:8C:FE:37
X509v3 Authority Key Identifier:
keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:aa:d5:eb:d3:9b:35:9c:38:8d:78:78:be:c9:51:9e:d5:2d:
38:23:d0:9f:51:bb:e3:0a:e0:50:58:3a:57:7a:0b:36:e5:28:
d6:c8:71:31:3d:a2:7f:81:a1:b2:b2:a1:dd:33:a0:33:ec:d9:
b0:70:27:c9:b6:74:42:58:a6:66:04:d5:a2:67:a6:83:35:c9:
9c:58:11:f7:3c:05:b4:44:5b:d6:28:8c:63:75:2e:26:97:a5:
6a:04:ac:51:37:d7:9c:70:1b:7c:4a:db:dd:87:03:05:63:be:
75:57:36:c6:55:b6:53:45:e2:02:fa:1a:6e:13:76:44:84:c1:
e7:23:c3:8d:e6:82:a5:82:d3:51:0b:ee:30:18:29:ba:94:a4:
e9:80:c8:b2:1e:4d:89:8b:72:29:f0:fa:bf:d0:54:b3:e9:7a:
d5:1e:26:d7:9c:28:c7:0d:88:78:86:b1:29:d6:dc:24:f2:63:
c5:35:0c:6c:6c:11:61:75:56:33:c9:4e:d1:36:13:10:6f:52:
b9:d1:66:fe:12:ba:5a:13:0f:a2:89:04:74:a3:75:7a:85:91:
1e:a9:bf:79:8c:9d:dd:54:59:9e:24:58:5c:fd:7d:82:5b:e7:
ca:f2:2c:1a:3e:8e:e4:8d:37:78:47:21:6e:b8:77:c7:3d:e8:
bf:7d:b6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:40:51 2026 by rpki-client