
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
File: ips7kjmTluj8a4YwntVzMMlOEX0.mft (raw, json)
Hash identifier: BvgYGLUP60icDoYJR0iVS8C6EgWcOq/Yykm8I82uUTo=
Subject key identifier: A0:24:12:BA:94:D2:CC:CF:44:76:AA:CA:E4:13:CD:0D:EF:23:1C:59
Authority key identifier: 8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D
Certificate issuer: /CN=A919A3CA/serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
Certificate serial: 0A2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
Manifest number: 0A21
Signing time: Tue 24 Mar 2026 19:34:56 +0000
Manifest this update: Tue 24 Mar 2026 19:34:55 +0000
Manifest next update: Tue 31 Mar 2026 19:34:55 +0000
Files and hashes: 1: ips7kjmTluj8a4YwntVzMMlOEX0.crl (hash: nmin1n2qRRlQbAh175XNeRVVb9nwipWBUhCnFfnhiKE=)
2: B972C58C8FA611EAB095C928C4F9AE02.roa (hash: Lmz5u1XQZ5pr8gx+0xG0dq5xcsKIBrpCQ17vf78quGQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl
rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:34:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2605 (0xa2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A3CA, serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
Validity
Not Before: Mar 24 19:34:55 2026 GMT
Not After : Mar 31 19:34:55 2026 GMT
Subject: CN=69c2e760-4779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a7:3b:71:bd:5a:a9:52:9d:68:1b:43:21:27:
f1:6a:cb:a9:5b:28:6d:72:f4:c3:1c:37:5f:39:35:
47:a5:86:1d:fe:0e:ad:7c:78:28:b5:46:51:82:f3:
52:11:fc:6d:06:75:71:8e:62:99:1c:72:6a:bd:c0:
1e:f3:ed:59:d2:7b:cf:bc:83:f6:9f:0a:5e:51:67:
16:59:09:93:f5:49:7a:55:8f:38:8b:41:1f:68:f1:
04:ad:6b:0b:7b:aa:45:54:8e:b3:c7:b3:2c:16:a3:
86:26:bf:e7:d5:88:2b:65:35:5b:2a:4c:5b:fe:6f:
9f:20:ba:e0:51:78:60:2b:05:91:4f:2d:60:17:74:
f7:dd:fd:81:84:38:8e:e2:59:01:25:ad:3d:82:c8:
0a:93:57:f6:f3:f4:f5:e9:ed:29:de:df:15:a5:76:
16:4f:b1:a5:5b:65:e6:09:98:1b:08:8f:ce:7c:f7:
a2:5e:b3:93:7c:8c:7c:c0:4b:46:a6:bf:58:73:16:
b8:7c:dd:79:72:c2:f6:bf:eb:10:9a:c0:2d:36:ef:
77:92:33:3d:db:fc:5e:cb:32:e7:b5:de:c3:cb:49:
16:a7:19:ee:75:91:91:71:86:7d:10:77:db:1a:9d:
e5:a9:f3:93:70:b9:85:17:5f:a3:48:f5:dc:a8:04:
d8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:24:12:BA:94:D2:CC:CF:44:76:AA:CA:E4:13:CD:0D:EF:23:1C:59
X509v3 Authority Key Identifier:
keyid:8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:4f:7a:d5:e8:03:25:a0:33:13:60:e7:7c:91:86:ff:e1:05:
94:fc:3c:96:ab:51:fd:5a:2a:75:a8:f9:1a:17:21:fb:40:80:
98:a6:88:22:3c:65:ba:9d:d9:2f:88:3e:b9:fe:40:c8:c0:c4:
2d:77:3a:b2:f4:e2:56:fc:1a:5b:13:21:31:55:d0:a3:31:a0:
19:08:c6:64:b1:6d:e8:71:cb:88:08:84:60:72:47:fd:9b:fc:
c0:9a:14:d8:71:f8:e6:15:10:f7:c4:ab:28:ee:4f:63:95:8d:
96:3b:00:36:b5:72:4e:a2:46:ba:01:bc:d0:f1:11:02:9c:1c:
8c:8f:a7:73:be:81:ea:4d:4c:f8:98:84:21:fb:3f:b1:16:bf:
32:da:aa:3f:c8:5b:3a:20:d4:da:f2:70:37:d5:e8:6d:ff:ea:
7b:83:75:74:9c:37:6c:fd:fa:55:77:d3:62:4c:f9:f2:4b:38:
df:83:34:7e:3b:ec:4f:78:e8:66:26:31:26:11:30:7f:e2:18:
2e:34:aa:ea:6c:fb:f6:67:92:d7:b5:79:22:96:c8:6c:dc:cf:
71:93:7a:4f:19:d7:b8:08:3c:5f:a3:c5:3d:45:71:1d:a9:94:
27:1f:10:d9:7a:e4:75:37:c9:05:6d:7b:af:36:90:2b:38:90:
1a:29:b6:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUEzQ0ExMTAvBgNVBAUTKDhBOUIzQjkyMzk5Mzk2RThGQzZCODYzMDlFRDU3MzMw
Qzk0RTExN0QwHhcNMjYwMzI0MTkzNDU1WhcNMjYwMzMxMTkzNDU1WjAYMRYwFAYD
VQQDEw02OWMyZTc2MC00Nzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyqc7cb1aqVKdaBtDISfxasupWyhtcvTDHDdfOTVHpYYd/g6tfHgotUZRgvNS
EfxtBnVxjmKZHHJqvcAe8+1Z0nvPvIP2nwpeUWcWWQmT9Ul6VY84i0EfaPEErWsL
e6pFVI6zx7MsFqOGJr/n1YgrZTVbKkxb/m+fILrgUXhgKwWRTy1gF3T33f2BhDiO
4lkBJa09gsgKk1f28/T16e0p3t8VpXYWT7GlW2XmCZgbCI/OfPeiXrOTfIx8wEtG
pr9Ycxa4fN15csL2v+sQmsAtNu93kjM92/xeyzLntd7Dy0kWpxnudZGRcYZ9EHfb
Gp3lqfOTcLmFF1+jSPXcqATYrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKAkErqU
0szPRHaqyuQTzQ3vIxxZMB8GA1UdIwQYMBaAFIqbO5I5k5bo/GuGMJ7VczDJThF9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTNDQS81N0QyMzgwMjhG
QTIxMUVBOEVDMDZFMUNDNEY5QUUwMi9pcHM3a2ptVGx1ajhhNFl3bnRWek1NbE9F
WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lwczdram1UbHVqOGE0WXdudFZ6TU1sT0VYMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTNDQS81N0QyMzgwMjhGQTIxMUVBOEVDMDZFMUNDNEY5QUUwMi9pcHM3a2ptVGx1
ajhhNFl3bnRWek1NbE9FWDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtE961egDJaAzE2DnfJGG/+EFlPw8lqtR/Voqdaj5Ghch+0CAmKaIIjxlup3Z
L4g+uf5AyMDELXc6svTiVvwaWxMhMVXQozGgGQjGZLFt6HHLiAiEYHJH/Zv8wJoU
2HH45hUQ98SrKO5PY5WNljsANrVyTqJGugG80PERApwcjI+nc76B6k1M+JiEIfs/
sRa/MtqqP8hbOiDU2vJwN9Xobf/qe4N1dJw3bP36VXfTYkz58ks434M0fjvsT3jo
ZiYxJhEwf+IYLjSq6mz79meS17V5IpbIbNzPcZN6TxnXuAg8X6PFPUVxHamUJx8Q
2XrkdTfJBW17rzaQKziQGim2Ww==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:34 2026 by rpki-client