
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft
File: IIUPxwwl_bFV037LDsOWLGtH_K0.mft (raw, json)
Hash identifier: cKO0LyD9rI0ZX8OS97nD9sF5KCpwhOS0NL1+liNCibI=
Subject key identifier: DC:4F:6E:92:38:D3:B1:B4:34:79:C9:6A:F6:2F:82:70:4A:7F:9D:C2
Authority key identifier: 20:85:0F:C7:0C:25:FD:B1:55:D3:7E:CB:0E:C3:96:2C:6B:47:FC:AD
Certificate issuer: /CN=A919D545/serialNumber=20850FC70C25FDB155D37ECB0EC3962C6B47FCAD
Certificate serial: 07DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IIUPxwwl_bFV037LDsOWLGtH_K0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft
Manifest number: 07D4
Signing time: Thu 26 Mar 2026 21:11:22 +0000
Manifest this update: Thu 26 Mar 2026 21:11:21 +0000
Manifest next update: Thu 02 Apr 2026 21:11:21 +0000
Files and hashes: 1: IIUPxwwl_bFV037LDsOWLGtH_K0.crl (hash: flJIFR2aic2b9ZkqhhbuwOpX+pJE52FhNtrlu5vIc38=)
2: 934C22582E1C11EBB3ADE232C4F9AE02.roa (hash: /d1oiYvRZiMCHQrnq/bB0/o38ZTfcwJhY9uDXJ1VBK4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.crl
rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IIUPxwwl_bFV037LDsOWLGtH_K0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 21:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2013 (0x7dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D545, serialNumber=20850FC70C25FDB155D37ECB0EC3962C6B47FCAD
Validity
Not Before: Mar 26 21:11:21 2026 GMT
Not After : Apr 2 21:11:21 2026 GMT
Subject: CN=69c5a0fa-22ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:27:d4:cd:08:e2:8f:80:a5:b2:01:b8:14:33:
c0:ce:da:9a:42:73:94:96:3e:34:b3:2e:18:4a:2d:
e8:e4:64:ab:98:7f:8e:29:90:0e:6c:07:36:4f:d6:
78:24:6b:82:b0:51:ab:4c:ae:e8:e1:13:89:80:eb:
99:7c:25:16:fc:0c:2c:96:78:68:8d:b2:ee:5e:c8:
09:b9:69:e6:c7:86:6e:d9:00:7d:d2:dd:59:80:92:
93:ad:02:a3:39:39:27:b1:6b:c9:1d:7d:92:60:e3:
60:2e:f6:d6:1f:c4:b8:e0:ce:dd:45:64:a1:62:a7:
84:62:76:ef:cf:e2:41:21:8c:47:f9:63:7c:12:8c:
87:64:96:e9:e7:76:80:eb:dc:f3:79:3a:4d:f8:cf:
ba:64:62:9c:db:2a:c3:22:6b:c6:1a:d9:e6:85:35:
95:a2:d7:8a:29:27:50:b5:85:d9:9c:e4:31:89:25:
7d:c2:d8:5d:3c:e7:e0:f4:42:32:e2:b5:e6:f3:77:
20:78:16:50:54:5f:cd:3e:ab:a5:1a:bb:b4:2b:61:
24:8b:f8:ab:7d:59:fd:9e:3d:17:15:79:91:c0:28:
f8:e9:4d:5f:05:0f:38:f4:c4:f9:41:b3:6f:55:78:
29:5b:6c:33:63:35:78:00:b1:06:f6:e4:56:68:22:
39:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4F:6E:92:38:D3:B1:B4:34:79:C9:6A:F6:2F:82:70:4A:7F:9D:C2
X509v3 Authority Key Identifier:
keyid:20:85:0F:C7:0C:25:FD:B1:55:D3:7E:CB:0E:C3:96:2C:6B:47:FC:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IIUPxwwl_bFV037LDsOWLGtH_K0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f3:64:02:46:8c:8e:17:ec:c9:bb:a6:26:c1:7a:8f:59:6d:
dd:4b:af:9d:6d:63:67:4b:eb:6f:de:55:81:bc:bf:96:eb:3a:
5a:48:a8:5f:cf:5d:e1:92:e2:0d:1e:16:2d:53:4c:c2:2c:b8:
62:91:81:c7:09:43:e9:fd:1e:c0:a1:36:d7:63:73:26:fa:f0:
2c:17:ee:ca:da:a4:65:a3:49:88:58:42:37:3d:ec:92:2b:33:
3b:4f:28:d1:a9:3e:b7:5e:51:cc:46:46:e4:63:ac:4c:63:81:
28:83:bf:b5:94:15:4d:32:10:83:8f:73:cb:05:53:70:4a:91:
97:26:10:3e:a8:c3:29:af:da:17:17:d9:8e:bb:8c:6d:ca:e6:
25:26:cd:bc:39:8d:f6:25:fb:d3:c4:4e:a2:85:31:60:d3:b2:
bc:fa:9f:79:05:5e:b1:f0:84:29:38:6f:4e:e6:6a:d1:8f:df:
5c:51:ff:ec:ee:70:92:dd:ab:d9:16:9c:41:7b:9d:41:83:c7:
89:48:5a:c8:f8:ca:0e:fc:fe:48:4e:10:8a:62:93:b0:f3:f4:
ee:55:69:0c:84:d0:f2:29:3e:2a:6e:8f:ca:9b:49:34:b2:9d:
b8:3a:75:ba:e3:93:ba:00:e9:91:6e:d9:b4:59:6d:26:7b:5e:
b8:7e:27:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:45 2026 by rpki-client