
$ rpki-client -vvf rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
File: IpO9TF5PmillNYywGN8-Tu5N8c8.mft (raw, json)
Hash identifier: MbBVy5ynlHxL+0YjC7qUXBiSk/1K+tEmODbUWoXmIBk=
Subject key identifier: 8C:81:D7:5D:7F:70:DA:96:D1:39:CF:FB:19:3A:90:C1:C3:E5:13:6A
Authority key identifier: 22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF
Certificate issuer: /CN=A915177C/serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF
Certificate serial: 3089
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
Manifest number: 3062
Signing time: Thu 26 Mar 2026 15:28:50 +0000
Manifest this update: Thu 26 Mar 2026 15:28:49 +0000
Manifest next update: Thu 02 Apr 2026 15:28:49 +0000
Files and hashes: 1: IpO9TF5PmillNYywGN8-Tu5N8c8.crl (hash: JphJW1+/1hK5lZi4zhRcgaW0V8Xwmo3KL0nIbVc4vgY=)
2: 149AB4BE7CE911EEB9A02D83C4F9AE02.roa (hash: KX6DklLChpyy6uFhTyu0wieTEAiRW7QBB9X6fj81ntY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl
rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12425 (0x3089)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915177C, serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF
Validity
Not Before: Mar 26 15:28:49 2026 GMT
Not After : Apr 2 15:28:49 2026 GMT
Subject: CN=69c550b1-a062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:58:8d:f4:b6:73:1e:eb:b1:1a:85:cc:00:
cb:55:05:6e:16:4b:18:44:54:7f:e7:b4:b1:ef:c6:
ba:f8:fb:93:57:29:1b:21:a0:bd:41:54:2d:1c:4b:
6a:36:f3:73:a3:99:b0:72:a6:bc:80:4b:a9:be:43:
6c:1f:bb:af:16:80:61:63:99:56:b9:02:76:92:2e:
1d:0b:44:11:a2:b5:a8:14:47:ce:e6:7f:1a:52:81:
d9:14:70:91:96:20:c3:93:37:c5:1a:be:93:2f:5c:
df:45:8f:ae:fe:80:53:9d:16:17:9d:16:4e:0d:9d:
ef:6a:32:2d:d0:1b:8d:a3:26:bc:64:5a:67:57:1e:
38:2a:50:f5:8f:7f:18:5a:66:17:6b:3c:eb:3f:92:
24:85:86:53:20:b1:83:b5:a9:97:f5:06:ef:64:d2:
ab:32:6e:39:ef:fe:be:5c:5b:6d:c9:34:c5:b7:63:
ca:e5:20:9b:34:37:c2:0c:cc:12:1f:5b:20:84:84:
1b:36:ba:24:b3:da:4e:3f:4c:37:98:b1:46:e2:ea:
d2:00:a3:14:46:5e:20:63:10:6a:9f:3e:df:7d:af:
cf:d2:cf:48:e6:bf:94:c9:6e:03:bf:ac:18:9b:c0:
b7:49:f2:4b:89:1d:24:b2:ee:73:88:00:ff:a0:92:
6d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:81:D7:5D:7F:70:DA:96:D1:39:CF:FB:19:3A:90:C1:C3:E5:13:6A
X509v3 Authority Key Identifier:
keyid:22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:c4:85:50:8c:c8:69:6d:8a:2c:19:9f:4a:3e:a6:ab:14:ab:
5f:2d:57:e1:3c:89:89:e4:0c:b7:16:cc:3b:3b:12:c8:80:6b:
b5:c5:d2:1b:06:fc:f9:ac:36:cb:12:f8:94:d8:7b:8e:a6:4e:
bd:ad:02:28:f7:20:ae:10:97:9b:e0:b3:fa:25:7f:43:fb:db:
1b:59:b0:a0:23:87:17:ef:36:31:a5:77:42:0a:68:55:bf:85:
56:a4:1f:f9:d0:f2:05:e7:d2:ed:a1:99:cc:07:48:6a:4f:b6:
bc:14:9b:64:bb:1a:dc:53:68:ed:6f:ac:1d:e5:31:49:73:9c:
38:df:54:35:d1:79:b8:64:15:6b:88:21:48:57:d7:94:40:94:
30:0e:06:74:16:3d:55:16:00:98:3a:55:c8:f2:db:14:40:f9:
b8:8a:18:fb:96:e4:06:9e:87:88:e3:6c:a1:de:b2:67:62:9b:
b2:23:2b:26:9e:23:cf:30:95:8d:60:84:a1:71:ce:ac:73:51:
c4:a4:30:8f:bc:70:f7:66:0b:28:09:c3:53:bd:08:aa:bf:87:
ae:0c:23:b6:6c:00:6b:f8:4f:ed:a3:aa:c3:6a:ea:13:ea:fe:
64:7e:14:56:45:b5:a7:d3:e9:fd:f2:b8:c1:c6:3d:74:41:c0:
23:44:7d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:25:21 2026 by rpki-client