
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft
File: IRcCLfYdpCG55OG7hIPYXkmCv5E.mft (raw, json)
Hash identifier: Ss/Tt58C+ArBudaI1D3MeiXyDe6Q7yacBPua17CYKjs=
Subject key identifier: 6D:66:E1:29:F8:48:AF:87:A3:2F:CB:67:C2:FF:DF:57:68:4C:0A:F8
Authority key identifier: 21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91
Certificate issuer: /CN=A9169382/serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91
Certificate serial: 058E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft
Manifest number: 057A
Signing time: Tue 24 Mar 2026 22:59:15 +0000
Manifest this update: Tue 24 Mar 2026 22:59:15 +0000
Manifest next update: Tue 31 Mar 2026 22:59:15 +0000
Files and hashes: 1: IRcCLfYdpCG55OG7hIPYXkmCv5E.crl (hash: 71to2oAcEC30ZWULQ0DFBWttAYZhJ/bLwHNx/dCJhY0=)
2: B5D70D9ACE3311EFA7B9B640C4F9AE02.roa (hash: Axsa0uyuPTjbrC5wnPZ4BHAIMgaPThG3uMiLY0ziBzQ=)
3: E41BF8841CDC11ECBA794120C4F9AE02.roa (hash: +WJvFTxAonY5wxNQGiwRI3ZI8HmyeaPv5VFRCqzMfWE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl
rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:59:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1422 (0x58e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169382, serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91
Validity
Not Before: Mar 24 22:59:15 2026 GMT
Not After : Mar 31 22:59:15 2026 GMT
Subject: CN=69c31743-d9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:f4:69:de:e9:84:fd:69:c5:99:79:6b:48:
56:e7:3b:26:39:21:21:48:a7:a2:00:7c:40:8f:c0:
ea:52:4f:bc:25:f0:42:56:a1:91:f4:6d:21:5b:e4:
23:a7:18:2a:95:4a:74:f0:ba:32:bb:dd:33:0b:03:
7a:b4:f8:43:cb:8f:f9:c1:5a:2d:d7:04:66:f5:ab:
aa:8c:ef:84:8a:17:97:cf:ae:45:89:c6:9c:d0:cd:
94:34:f7:77:cd:b5:1a:01:2b:0d:35:4f:71:8f:d6:
ff:52:8a:ec:2d:11:38:b1:ae:d7:1f:81:7a:f0:02:
a1:d6:39:ac:43:b3:22:b1:74:8c:c3:09:63:d0:77:
52:93:4a:bf:42:02:d0:07:a6:6c:2f:be:ba:47:3c:
de:cf:60:3f:3c:f4:77:da:2d:21:8f:64:8e:bd:9b:
6f:82:c0:8e:d6:06:70:f2:77:fd:e1:14:fd:ab:72:
dd:3e:65:c1:b2:bd:d8:73:84:8a:52:73:e2:5f:54:
33:dc:2e:ad:3c:1b:00:58:51:ec:3f:3c:4b:f6:df:
1b:93:ac:3c:0d:3d:16:5c:65:b0:5c:68:92:31:dc:
01:37:dc:bc:c8:77:90:87:50:b6:3d:71:1c:b3:df:
b4:b6:2a:7d:70:08:1f:82:7a:5d:45:d4:58:3e:55:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:66:E1:29:F8:48:AF:87:A3:2F:CB:67:C2:FF:DF:57:68:4C:0A:F8
X509v3 Authority Key Identifier:
keyid:21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:37:48:d3:2d:cd:11:df:a7:46:4d:da:9d:29:cc:9e:4b:cb:
97:08:40:9e:ca:be:5c:36:fb:b3:91:6f:7f:f8:9f:d0:d4:79:
50:7f:78:38:79:07:d1:f7:82:b8:45:97:76:d2:98:3e:4b:ea:
d7:b5:ed:45:2f:47:51:52:0d:9d:9c:fc:a3:ed:44:3f:d8:e7:
9d:cd:6b:77:d4:7f:23:48:b9:5e:da:2c:c4:af:a5:a5:77:8e:
9a:7a:f3:29:aa:2a:04:a5:4c:0b:06:10:af:44:77:d7:97:2d:
0c:db:d9:54:c5:f9:f6:37:8f:87:6a:c0:f7:e3:c1:06:95:3e:
0c:db:5b:fd:61:42:ca:d7:d5:cd:72:25:3e:f8:19:5e:22:2f:
28:61:b5:d1:78:96:df:f0:fa:46:3e:11:5d:4a:c5:63:6c:05:
d2:d7:07:47:6a:19:e9:a4:dd:72:f8:39:cc:9c:61:ca:b6:d0:
ca:69:8a:07:41:e8:d4:49:83:f1:98:87:c3:65:fe:0a:37:74:
7a:7b:3e:51:b7:e8:0d:97:bc:59:1c:42:7d:ed:c2:73:76:56:
fe:16:6b:2f:22:74:2e:2f:f8:94:53:51:3f:79:7a:13:db:f0:
29:7e:24:c8:2c:a6:fb:17:a0:3f:8e:02:c7:6b:dd:f9:f5:96:
b8:01:de:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:39:33 2026 by rpki-client