
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
File: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft (raw, json)
Hash identifier: VnC2k+r0hXEkByku1mLA4mIFnUh9Y6VN2v0liATxR18=
Subject key identifier: 38:FE:53:0F:00:2C:53:5A:AA:37:67:02:3E:F3:73:07:0D:F9:C4:EA
Authority key identifier: 21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4
Certificate issuer: /CN=A9176302/serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4
Certificate serial: 0152
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
Manifest number: 014B
Signing time: Wed 25 Mar 2026 04:27:16 +0000
Manifest this update: Wed 25 Mar 2026 04:27:16 +0000
Manifest next update: Wed 01 Apr 2026 04:27:16 +0000
Files and hashes: 1: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl (hash: Lydf547cGuTW44Y5dFnO4VekAUax0VyTZipZhz74qr0=)
2: 0EE57B38378F11EF88F9BF5AC4F9AE02.roa (hash: WHnvu+Pkyj9CrMAjMQLr+EPjFUT9HZOr2H0sC02K+Yc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl
rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338 (0x152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176302, serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4
Validity
Not Before: Mar 25 04:27:16 2026 GMT
Not After : Apr 1 04:27:16 2026 GMT
Subject: CN=69c36424-16f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:57:9e:51:ca:b7:2d:b0:62:98:25:75:27:d8:
2d:be:81:94:8a:0d:04:95:9b:26:32:c4:33:03:de:
78:98:2a:10:bb:93:90:c4:f8:88:02:31:b8:56:55:
b7:f5:99:44:ce:9a:f6:51:f6:44:f7:d7:f1:39:79:
4a:ca:ea:2c:a3:89:47:ac:2a:ab:46:11:cb:46:b3:
31:ff:4b:98:db:15:46:9c:a9:ad:38:b5:78:5a:cb:
2a:c1:e6:f4:db:86:70:77:0e:b7:3f:2b:55:98:d7:
94:54:5d:e3:36:23:1c:e0:d9:37:2d:13:cc:17:cd:
c8:c9:ab:a1:b8:90:8d:39:80:91:3e:66:d8:f7:35:
a5:02:92:8c:50:27:c8:f4:1c:10:05:b7:94:09:d8:
72:91:52:80:27:7d:81:f1:6f:0f:f2:25:8b:9a:ee:
2f:00:df:99:17:5e:32:f9:63:6c:bd:a2:1a:b3:73:
6b:8e:13:7f:47:eb:cb:25:34:d3:5b:62:83:28:a3:
87:b3:89:a3:bd:60:d4:7a:6e:eb:1a:b0:66:b5:31:
9d:e2:6c:c6:1f:c6:03:93:09:a9:2a:66:b3:c4:4e:
ab:5a:f0:b4:d0:fb:06:75:0e:97:a7:43:1b:f0:64:
95:88:5f:ae:02:7d:02:22:7c:99:d4:71:ce:49:e8:
f6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FE:53:0F:00:2C:53:5A:AA:37:67:02:3E:F3:73:07:0D:F9:C4:EA
X509v3 Authority Key Identifier:
keyid:21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:22:5f:09:0e:9d:77:91:20:3a:34:ba:3a:b7:f5:a3:b3:32:
4c:33:45:6f:43:91:50:91:2b:d5:d9:a9:26:d4:19:b7:e4:0b:
95:fb:b8:55:53:21:67:c3:8c:b4:4f:bf:43:b2:78:7b:e8:1b:
0b:d3:6a:52:1c:d0:1d:50:8f:20:7d:da:77:3d:81:c3:2e:ee:
e5:fb:0d:7b:94:cb:21:56:46:38:f1:3e:c2:24:df:5a:a3:85:
b4:f8:a7:95:03:f9:87:4a:07:fd:9b:83:87:8f:aa:94:19:56:
57:3f:08:fb:20:7c:32:da:bc:79:6a:ca:66:15:01:05:b2:07:
db:1c:22:67:ae:a3:5f:32:36:ea:b5:cd:c3:f8:6e:c4:ed:ae:
96:e7:b8:70:94:63:29:c1:8d:fd:9d:a5:62:e2:d7:71:9b:1c:
fd:37:2c:8c:e6:21:b7:0c:a8:2c:21:e1:f2:8a:19:67:d5:2e:
d1:b9:d6:4a:4b:e3:e1:ed:72:77:f0:36:9a:e2:6c:6c:9a:3e:
10:88:50:c4:4a:77:f7:a8:d7:03:8c:f5:73:83:ed:95:1b:ca:
35:b7:f0:cc:b9:a6:81:94:31:1a:cc:43:7b:0a:27:14:01:23:
db:f1:47:f3:d8:3a:00:d9:d1:14:66:61:ee:8e:69:63:30:dd:
05:3e:cd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:55:58 2026 by rpki-client