
$ rpki-client -vvf rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft
File: IffNCqAWhDVSmHRj5kIpcu8DnOg.mft (raw, json)
Hash identifier: mNKKgsJUegwPF9tjgOsiNdNMDJs5va+1Z92UfHMBlEA=
Subject key identifier: 06:96:46:E5:CE:7D:90:5D:9C:23:97:02:B7:2E:5A:86:50:D5:D0:EA
Authority key identifier: 21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8
Certificate issuer: /CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8
Certificate serial: 051C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft
Manifest number: 0507
Signing time: Tue 24 Mar 2026 23:20:34 +0000
Manifest this update: Tue 24 Mar 2026 23:20:34 +0000
Manifest next update: Tue 31 Mar 2026 23:20:34 +0000
Files and hashes: 1: IffNCqAWhDVSmHRj5kIpcu8DnOg.crl (hash: 25bKOvwU9ohP7E+e9Q4YNtsmKHGozbcOEeFbPu+NYoY=)
2: E097013E910C11EFB994E187C4F9AE02.roa (hash: ZdZHwag+6Cd1JHK+9hW+Jbti2LN6Ngqb+sChSvSjYdc=)
3: F47ED252878B11EEA8C62644C4F9AE02.roa (hash: qA7mB7J1Wr5PxdKSeV/plvT1JHfQHozWTf8vXejp5kc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl
rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1308 (0x51c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919710C, serialNumber=21F7CD0AA016843552987463E6422972EF039CE8
Validity
Not Before: Mar 24 23:20:34 2026 GMT
Not After : Mar 31 23:20:34 2026 GMT
Subject: CN=69c31c42-5ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7d:43:57:01:23:7e:c6:5c:6f:0b:b3:fa:32:
29:29:41:1f:5e:9a:6e:78:cb:9c:02:44:cd:d9:b1:
08:90:2c:df:4c:ad:a1:f3:9d:52:7b:ed:44:10:04:
56:b3:c8:f9:e5:99:88:e3:18:b8:ce:c8:5f:e8:50:
f6:2e:39:46:44:be:ec:7c:7f:1c:36:1e:71:a5:25:
08:05:e1:a6:2a:ef:59:dd:ee:3b:e9:7c:4d:ac:25:
be:ae:d8:a3:2d:94:f7:20:3f:55:b5:05:e2:b7:21:
dd:8a:67:2d:ef:4c:7f:42:cd:7b:92:ff:92:1d:bd:
f8:67:7b:66:ce:74:f1:d7:a6:f4:1b:b7:c3:b1:3d:
b0:b7:92:e7:93:22:d6:b3:f9:26:06:b3:c5:48:cc:
ac:44:6a:fc:cd:f8:a6:42:7d:18:32:cf:fe:4f:40:
6c:aa:de:7f:5a:67:27:cd:b8:61:8b:5c:aa:36:26:
82:d2:ea:c4:30:52:bf:e6:ad:1b:c0:4d:c6:00:5d:
6c:c8:5e:7b:0d:46:ec:71:2b:b9:21:44:bb:b8:6a:
6d:60:27:2f:b5:5e:02:a5:f7:bc:2e:6d:1d:42:e1:
ca:62:2a:aa:16:40:76:6e:63:a4:e2:f2:b6:e3:2d:
bc:28:09:00:3e:33:12:43:d0:fa:fa:9a:da:15:45:
a3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:96:46:E5:CE:7D:90:5D:9C:23:97:02:B7:2E:5A:86:50:D5:D0:EA
X509v3 Authority Key Identifier:
keyid:21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:99:44:4e:5b:a0:3a:fe:30:9e:1a:1b:31:55:60:af:b1:86:
ec:ff:4a:3c:b6:5f:53:1b:64:c3:9f:a1:8a:a5:69:8c:ff:14:
4d:61:bb:0b:1d:a0:34:67:f5:fd:e8:b3:b7:c5:60:47:de:00:
ed:98:11:8e:8e:a6:30:23:c9:e3:c5:17:4b:f7:f5:8f:19:75:
57:03:ef:a1:2e:cc:79:7f:fb:de:a7:bb:f5:97:c1:1c:13:79:
12:d9:9c:96:26:ad:9d:e1:aa:5c:2a:1e:83:e6:51:0c:72:ec:
56:d0:31:45:ae:05:91:d0:10:a2:d7:30:b8:89:75:7c:c8:7b:
2c:1e:e9:70:88:2b:c4:9f:2f:cf:cc:33:c9:be:40:a8:db:a6:
df:1b:67:12:d2:c1:31:41:e2:21:74:bd:8f:90:51:e1:42:7e:
e9:b7:09:f3:58:6e:ef:b3:73:df:fb:0e:60:0c:07:7c:8b:8c:
01:6c:35:5f:86:32:5b:b2:6c:72:49:f4:36:1b:c1:97:58:3a:
f9:f9:cb:88:e5:6a:ae:96:a1:31:9e:2b:ae:ab:67:7d:45:ca:
ed:68:63:95:f6:eb:70:f1:3e:49:73:f3:5b:b0:9f:e1:c2:17:
ae:b1:94:40:ae:08:a8:6e:60:68:a2:6e:91:4d:0a:72:3b:30:
92:dc:e4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:34 2026 by rpki-client