
$ rpki-client -vvf rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft
File: i0WgWBIZndhsv8hCI_2BqzMGJrk.mft (raw, json)
Hash identifier: 8TnduxHAu4HvhhWQyuzTkKSK6KJBF+LHXnC5rXUUtT4=
Subject key identifier: F0:66:E6:A0:B9:A8:2B:54:77:CA:34:5C:C8:49:BB:76:15:53:F2:01
Authority key identifier: 8B:45:A0:58:12:19:9D:D8:6C:BF:C8:42:23:FD:81:AB:33:06:26:B9
Certificate issuer: /CN=A919762A/serialNumber=8B45A05812199DD86CBFC84223FD81AB330626B9
Certificate serial: 67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0WgWBIZndhsv8hCI_2BqzMGJrk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft
Manifest number: 63
Signing time: Wed 25 Mar 2026 07:12:48 +0000
Manifest this update: Wed 25 Mar 2026 07:12:47 +0000
Manifest next update: Wed 01 Apr 2026 07:12:47 +0000
Files and hashes: 1: i0WgWBIZndhsv8hCI_2BqzMGJrk.crl (hash: uPkrOG1rYuBtbHB+3jWbBaOQbIdgusxa5+wlO9dZ1ic=)
2: 9724DB52944911F0BBB4490AC4F9AE02.roa (hash: lrnY90MK4IZ1+v8LT/IR8+iuZQ3iOAKAABMyKp5uRJo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.crl
rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0WgWBIZndhsv8hCI_2BqzMGJrk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:12:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919762A, serialNumber=8B45A05812199DD86CBFC84223FD81AB330626B9
Validity
Not Before: Mar 25 07:12:47 2026 GMT
Not After : Apr 1 07:12:47 2026 GMT
Subject: CN=69c38af0-7e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:07:66:82:41:cb:d8:9e:7b:88:5b:88:b1:
4e:5a:46:58:9c:54:bf:82:69:bf:20:2d:b0:35:ba:
91:b6:2e:4b:98:ee:d6:4d:65:0f:98:f2:42:25:b3:
ac:20:dc:b1:ef:a1:95:4d:f2:36:2b:45:aa:8c:71:
7c:41:ba:23:d5:81:e2:d6:c3:a8:71:43:0f:71:9a:
1f:93:69:0a:b6:80:e5:ce:b3:c3:55:47:55:54:61:
0c:82:d7:c2:07:d1:09:79:84:1e:b5:d0:cb:59:cd:
29:4a:33:ac:84:6a:6b:d0:54:14:cf:dc:94:2d:0f:
f6:ab:2b:da:86:b6:78:da:75:4b:c4:af:57:a4:eb:
be:e4:b9:48:30:b6:92:07:b6:3a:34:a5:34:6c:a8:
10:02:f9:e8:6d:ba:07:ea:c8:4a:f6:8d:6c:33:a2:
a9:2e:c9:90:0f:46:28:fb:79:d7:6f:04:de:c5:03:
e3:1b:e1:f0:0f:a4:d0:67:c7:a5:3e:be:8d:0d:f7:
c0:33:3e:29:81:29:a7:86:20:78:39:1c:8f:81:2b:
fd:ea:c3:80:11:38:d4:31:12:3b:26:ef:18:e7:9a:
de:57:76:4b:f0:ef:36:6d:7f:12:34:b9:dc:ef:06:
43:75:06:bc:18:88:77:86:85:be:ec:d0:73:44:83:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:66:E6:A0:B9:A8:2B:54:77:CA:34:5C:C8:49:BB:76:15:53:F2:01
X509v3 Authority Key Identifier:
keyid:8B:45:A0:58:12:19:9D:D8:6C:BF:C8:42:23:FD:81:AB:33:06:26:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0WgWBIZndhsv8hCI_2BqzMGJrk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:12:60:90:af:4d:df:bf:2b:ff:e2:bc:e5:19:71:e2:43:dd:
fc:44:2f:dd:b4:fc:01:d5:75:5c:46:dc:ff:05:23:d1:6d:c6:
3c:9b:3a:c9:14:ac:85:69:e1:d2:61:a4:39:c0:68:90:ef:6f:
c6:fa:ff:de:63:73:b0:d2:8f:a7:51:2e:99:2e:a3:df:cb:ae:
d2:99:28:2f:7c:25:c2:5b:10:62:09:33:d4:9c:4c:f4:c9:e8:
d6:59:90:1a:0b:41:03:89:c2:da:0d:9c:ed:e1:3a:0a:1b:97:
2d:b3:ef:b1:95:05:3c:d2:99:ad:88:60:b1:a7:09:3b:51:c8:
e3:bd:31:d2:bb:9e:9a:53:9c:f4:cb:26:b9:d8:9d:d2:33:b5:
d2:92:a7:5e:f8:97:0b:49:4b:52:f6:d5:15:26:1d:bf:30:3d:
ab:88:df:e5:21:10:52:9e:6d:e8:bd:bc:2d:b0:bd:f9:36:c8:
6f:4b:44:2e:60:23:6e:43:ac:b2:3c:de:2c:6d:b9:ac:90:7d:
c0:e9:ce:ac:e9:c5:43:df:ed:dc:73:68:79:f0:5f:a4:70:e6:
1d:d6:da:19:bc:49:41:cf:a2:b8:22:84:e5:f8:1f:f7:5e:b8:
55:67:e2:1f:73:5d:46:0c:de:4e:d0:d2:ce:7a:04:de:7b:a5:
4c:a8:d0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:59:55 2026 by rpki-client