
$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft
File: IohtF2pzwL483ViJwqizI-O5QSw.mft (raw, json)
Hash identifier: MVR+qDlitGY5cIHDW/smFoOGne9EtaYprE0onr8OAhI=
Subject key identifier: 76:2A:4B:13:07:E9:8F:8C:06:24:7A:F9:B4:95:4A:22:55:8B:BE:49
Authority key identifier: 22:88:6D:17:6A:73:C0:BE:3C:DD:58:89:C2:A8:B3:23:E3:B9:41:2C
Certificate issuer: /CN=A91658EF/serialNumber=22886D176A73C0BE3CDD5889C2A8B323E3B9412C
Certificate serial: 15A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft
Manifest number: 2D5D
Signing time: Tue 24 Mar 2026 16:39:21 +0000
Manifest this update: Tue 24 Mar 2026 16:39:20 +0000
Manifest next update: Tue 31 Mar 2026 16:39:20 +0000
Files and hashes: 1: IohtF2pzwL483ViJwqizI-O5QSw.crl (hash: kjiOcnxY0Ugbo6254trdfH8d4IMWQti5UHR0wutE04I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.crl
rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5541 (0x15a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91658EF, serialNumber=22886D176A73C0BE3CDD5889C2A8B323E3B9412C
Validity
Not Before: Mar 24 16:39:20 2026 GMT
Not After : Mar 31 16:39:20 2026 GMT
Subject: CN=69c2be39-f87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:17:b1:23:a7:af:3f:00:05:ae:8f:dd:09:
5f:62:10:43:70:7c:88:41:9e:18:63:7b:76:e3:85:
9b:2a:3f:a2:da:0a:00:a9:0b:46:56:d6:46:6d:bb:
2c:dd:2e:9a:ca:40:a6:aa:2b:40:ac:fa:6d:17:55:
c4:5d:c0:0c:c6:10:20:e5:7b:75:a7:7a:55:84:90:
0f:0c:5c:c0:35:48:84:88:43:50:95:0f:be:41:52:
ae:25:5e:03:76:d6:e9:15:43:80:e0:a2:25:eb:0d:
00:65:05:9a:53:0d:20:c7:43:75:af:c8:d6:18:ec:
b9:6c:41:c0:ef:c2:c8:29:51:dc:0d:9f:44:36:47:
3e:ea:44:bf:39:46:6a:b0:a5:70:f8:a3:50:d5:3b:
fb:41:44:d5:05:f7:5a:80:e8:b3:bc:38:ef:66:69:
21:d8:55:2f:97:f3:eb:c6:7a:24:97:c8:fe:e6:d1:
59:04:f7:8b:48:55:94:22:b7:29:74:06:61:4e:15:
51:dd:b0:89:4e:9a:11:3f:2a:4f:be:da:8d:ae:cd:
50:44:30:32:55:69:31:5d:97:94:ba:0b:b9:07:03:
d0:c7:98:46:4c:1b:f3:b0:a0:da:6c:ce:65:60:ea:
19:18:a2:c3:53:50:dc:d8:17:9f:9e:d9:d9:72:17:
51:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2A:4B:13:07:E9:8F:8C:06:24:7A:F9:B4:95:4A:22:55:8B:BE:49
X509v3 Authority Key Identifier:
keyid:22:88:6D:17:6A:73:C0:BE:3C:DD:58:89:C2:A8:B3:23:E3:B9:41:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:2e:80:dc:1b:2e:3a:04:5b:dd:a2:a4:40:5f:03:ae:37:df:
71:f7:f4:41:17:58:2c:c8:ab:81:d8:48:84:2b:ba:8f:5f:1c:
bb:84:26:9b:3d:d0:10:0f:69:fb:27:53:23:4e:78:2b:68:e8:
92:29:a2:ec:90:53:80:2b:9c:b8:74:3d:2e:58:39:f4:f6:6a:
45:49:41:a4:f0:03:e2:57:08:aa:b5:18:00:d2:90:d1:51:c8:
b7:c6:87:17:2b:ce:dc:e7:31:54:44:97:a8:63:c4:5d:2a:fe:
ab:56:4a:19:b2:9d:0e:b2:89:0f:27:14:19:0f:77:e4:07:a2:
f7:1b:46:4f:02:e6:5b:7a:27:96:b5:30:d9:75:c5:16:a6:dc:
ea:50:ce:78:51:a5:3b:2e:8d:cc:e3:a6:b9:76:57:86:c6:82:
c8:1a:33:22:80:a1:dc:50:9f:64:39:2e:ba:e7:e9:3c:f3:c2:
53:52:5f:7b:48:1a:c9:fa:00:1c:15:4e:9b:7b:c3:76:1c:0c:
1e:c7:f0:8a:47:fe:92:0a:b8:32:9e:e7:1a:91:7b:81:dd:3a:
18:09:c8:8d:db:89:59:74:07:67:51:d9:43:c4:ac:79:2b:02:
10:28:ab:c8:f9:37:8f:6a:1f:9f:c9:90:db:e7:d1:c6:22:23:
35:14:be:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:20:55 2026 by rpki-client