
$ rpki-client -vvf rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
File: iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft (raw, json)
Hash identifier: WeA/f+SDSWkICDg0XlX1hBngWbAEJsNPkmESw/xdw0c=
Subject key identifier: D5:3D:65:C7:7D:CC:5B:7C:93:A1:23:7F:1F:63:A2:33:63:F4:EC:C2
Authority key identifier: 88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93
Certificate issuer: /CN=A919821D/serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
Certificate serial: 01BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
Manifest number: 01B8
Signing time: Wed 25 Mar 2026 03:13:14 +0000
Manifest this update: Wed 25 Mar 2026 03:13:13 +0000
Manifest next update: Wed 01 Apr 2026 03:13:13 +0000
Files and hashes: 1: iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl (hash: 0IsejsfNYacn8L6IhKlU0SVAP2PNXvaFYkB09RO9CQw=)
2: 51D4585A89B211EE9ADA615EC4F9AE02.roa (hash: mMNzjo+KW1b2ntUt0cKXNQz80BGQiuXIwjeasUtwgcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl
rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:13:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919821D, serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
Validity
Not Before: Mar 25 03:13:13 2026 GMT
Not After : Apr 1 03:13:13 2026 GMT
Subject: CN=69c352ca-1dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:da:9c:6c:70:5f:b0:1b:ee:25:3b:70:05:
58:32:64:1b:b7:c6:6f:e5:fd:4a:74:ac:e2:3d:9f:
a4:33:c7:a0:15:d2:4f:8a:65:e1:db:3f:4d:74:68:
0b:96:24:b6:d6:1e:39:9c:7f:1f:6a:f3:af:07:af:
81:75:03:c2:8f:2e:7b:f3:56:28:f2:80:14:d2:ee:
9f:41:de:78:e8:68:86:d5:73:19:87:5f:5d:58:a5:
e7:c7:de:49:52:08:db:93:cc:85:ae:d8:38:cb:6e:
2c:56:a0:6b:f6:25:b8:07:f5:e5:1f:38:46:36:ca:
ab:cb:c2:fd:41:21:05:3a:49:5e:67:55:4c:89:35:
a5:85:ca:15:ca:d9:a3:56:17:27:17:37:91:7a:d8:
e4:19:15:a4:6f:36:13:ae:8a:15:1b:cb:96:9a:e9:
31:78:c3:8d:74:3f:6e:5b:b2:0e:b8:8d:c5:57:03:
6b:c8:8a:24:13:4b:39:65:19:f1:bd:90:c5:27:11:
94:59:a6:0e:fb:a6:84:04:6d:c1:44:ab:f9:15:ba:
93:e9:9a:df:80:fc:d0:f4:0b:94:5a:22:f1:ae:aa:
9b:6a:72:69:87:8c:ed:e0:a7:2d:ec:a0:51:a0:58:
3f:85:2e:3d:16:37:a9:71:ac:58:e1:a7:1d:c2:69:
35:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3D:65:C7:7D:CC:5B:7C:93:A1:23:7F:1F:63:A2:33:63:F4:EC:C2
X509v3 Authority Key Identifier:
keyid:88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:88:f4:1a:80:64:9e:0a:cd:39:fb:06:3b:0d:2c:df:08:58:
1d:61:6a:e0:30:0c:92:92:d6:da:4e:c2:7b:33:13:7b:96:fa:
21:6a:9c:12:20:ff:09:6e:e0:2d:a7:42:c6:9f:a3:16:b7:b0:
00:48:ff:3c:d8:2b:32:49:4e:20:82:e7:13:7d:e2:0f:31:b2:
bb:a0:3a:88:26:b7:40:19:b5:ca:a4:65:9b:41:fa:89:e8:e2:
8a:fa:7b:16:ed:64:bc:1f:fb:cc:8a:04:bb:e9:62:10:7a:8b:
c9:6e:8a:7b:e7:7a:a4:57:76:cd:22:4d:69:26:3a:5b:66:95:
ea:eb:94:dc:4d:bc:a4:5a:a7:51:17:a3:c6:87:5d:54:ff:35:
bf:85:16:6b:74:81:bd:f4:41:f8:46:c3:b4:8c:af:27:06:d0:
58:8d:36:f6:7c:65:d8:1d:a6:5f:3f:c1:43:6d:0d:fb:18:a1:
1e:ba:76:4a:07:44:f9:38:2c:f0:75:8c:c3:0b:ac:c7:cd:33:
f8:9c:d1:16:a8:51:77:97:15:94:85:ee:4e:33:ec:d4:8d:b8:
90:8e:34:18:2b:3a:29:6d:de:b4:86:e8:22:f8:47:ce:da:38:
19:8f:21:5e:7f:dc:eb:0e:bf:a6:ec:a1:24:a8:d9:d9:94:30:
43:4c:6c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:24 2026 by rpki-client