
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
File: SIcH43YxSt1UXMZgreziKYZME-A.mft (raw, json)
Hash identifier: 3TXHRO6n+Osp2dY70WyID0p8VPlC0sGihXJfBqhyLj4=
Subject key identifier: C4:8C:F6:59:8D:85:BD:BD:F3:1B:E5:2A:9B:BE:EA:E9:CC:7C:FE:7C
Authority key identifier: 48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0
Certificate issuer: /CN=A9193B7A/serialNumber=488707E376314ADD545CC660ADECE229864C13E0
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
Manifest number: 89
Signing time: Mon 11 May 2026 07:43:04 +0000
Manifest this update: Mon 11 May 2026 07:43:03 +0000
Manifest next update: Mon 18 May 2026 07:43:03 +0000
Files and hashes: 1: SIcH43YxSt1UXMZgreziKYZME-A.crl (hash: idVQwqxm4BNWdXQaV3AregUc89eH03vDtT224yrNcX0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.crl
rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:43:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193B7A, serialNumber=488707E376314ADD545CC660ADECE229864C13E0
Validity
Not Before: May 11 07:43:03 2026 GMT
Not After : May 18 07:43:03 2026 GMT
Subject: CN=6a018888-c3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1b:48:cc:82:17:d4:0a:33:5d:f5:bd:79:e2:
bd:5a:71:cb:8f:7f:a9:52:2f:4c:0b:9f:3d:6d:f2:
e0:e4:38:08:2f:ac:09:bc:62:51:81:9d:72:96:8a:
12:15:10:c4:92:54:c4:c5:f8:16:e7:de:01:a9:b0:
c4:8b:63:d2:cb:2f:5b:e3:2c:78:14:cb:cd:ac:39:
05:73:d0:cc:3e:03:27:26:b6:bc:fc:4d:fa:bb:c6:
ed:2f:7e:da:50:eb:c6:68:65:db:2b:93:48:49:d6:
87:ba:f5:f0:9d:73:db:e8:6b:e2:d6:9a:b1:70:2c:
fd:c7:52:21:86:d0:67:65:3c:5c:71:e3:23:13:80:
7b:ae:61:23:97:d2:75:48:00:10:10:8f:5d:51:bb:
8d:3d:4d:da:10:f4:c1:35:b9:f9:2b:b0:8c:ef:04:
a9:02:fd:30:6d:07:47:06:b3:b4:58:d6:06:ec:e9:
af:46:fc:bc:51:58:31:97:3c:34:06:2f:62:52:74:
32:49:ba:4e:2a:a7:1d:c3:b2:66:7b:8d:8c:03:45:
db:6e:27:cd:42:bd:47:26:07:58:6a:70:9e:6d:6c:
18:14:ce:ae:5e:e8:a3:21:f9:80:ca:40:ed:22:7b:
34:91:b0:b5:97:f1:90:9d:b3:f9:e8:ad:7b:7e:f8:
88:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8C:F6:59:8D:85:BD:BD:F3:1B:E5:2A:9B:BE:EA:E9:CC:7C:FE:7C
X509v3 Authority Key Identifier:
keyid:48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a4:e2:31:59:96:e8:a0:42:fe:33:d5:93:41:d9:9b:93:63:
b5:aa:3f:35:f7:5f:ed:08:15:44:59:ac:c8:0d:b8:ac:e2:50:
ea:6a:b2:ac:4f:93:25:86:b2:44:88:a1:51:df:f1:ef:8e:62:
c5:d5:8a:6f:f1:e0:34:2e:f6:ac:30:01:0e:08:fd:75:7a:d7:
f9:4e:9e:05:37:f9:69:74:09:c0:c3:f7:1a:3d:12:04:1d:3f:
6a:96:9c:48:b5:da:ea:ed:c4:98:6e:30:8f:55:01:03:b5:23:
ab:4e:aa:2f:b9:ab:69:7d:81:33:43:96:f1:89:c5:a5:8f:48:
1f:b3:45:d0:26:2c:dd:49:19:07:f0:8b:93:2f:af:17:9e:a7:
fc:8a:0d:48:a9:bb:0d:45:55:90:0d:c1:aa:65:55:cd:9c:16:
df:90:74:cf:97:c1:fc:e4:49:3f:b9:14:78:ca:5f:ff:d0:58:
1b:56:54:22:d0:93:2f:17:ba:5e:dd:59:f1:69:1a:1a:63:6f:
49:6d:d4:83:be:94:e5:2b:94:22:32:01:56:b1:40:b1:26:42:
61:6c:71:eb:81:b8:21:40:27:d5:43:c4:b9:bf:37:9c:da:b6:
13:fb:05:ba:18:dd:03:c8:9c:d7:d5:97:4b:e5:ef:b9:2b:1e:
8b:1a:9a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:00:01 2026 by rpki-client