
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft
File: iEiqzfKVEwPnCY9BnYygBCKJDGk.mft (raw, json)
Hash identifier: 02jDJIfDIYy7MDaCq1p70JFz4NcV2ezFc1MgiuZQtF4=
Subject key identifier: B8:12:BD:05:D7:8B:E3:8E:5A:BD:53:30:1B:93:2D:64:6F:31:7B:7E
Authority key identifier: 88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69
Certificate issuer: /CN=A91A8047/serialNumber=8848AACDF2951303E7098F419D8CA00422890C69
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft
Manifest number: 0110
Signing time: Wed 25 Mar 2026 05:16:50 +0000
Manifest this update: Wed 25 Mar 2026 05:16:50 +0000
Manifest next update: Wed 01 Apr 2026 05:16:50 +0000
Files and hashes: 1: iEiqzfKVEwPnCY9BnYygBCKJDGk.crl (hash: pVWpWCBJJBo1YPtoNPy8mPD/Z3KHMMmArrzAD9uJ2qU=)
2: 029310329B1911EFA0BD6470C4F9AE02.roa (hash: sF4XH0IQ21oQ8m5K9x+3vDfpTIdkfnTIhVS8Hca4fYI=)
3: 07BAAB7C9B1611EFB5C28465C4F9AE02.roa (hash: 56jPZ3sozg97+OIj6pG3u2XuGIaHvsmkzxKJ4TjEACM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl
rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8047, serialNumber=8848AACDF2951303E7098F419D8CA00422890C69
Validity
Not Before: Mar 25 05:16:50 2026 GMT
Not After : Apr 1 05:16:50 2026 GMT
Subject: CN=69c36fc2-ea14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:52:17:31:47:a6:68:1e:79:f8:b1:27:2b:
6b:aa:97:76:5e:de:10:04:91:9d:69:b5:31:ab:79:
7c:e4:06:72:35:61:7c:5a:9d:89:df:a3:9d:ea:e9:
b9:68:25:9d:21:1e:70:c8:3e:62:b7:63:2d:60:a3:
b5:b5:d1:9b:1f:24:cd:51:61:91:d3:ee:f9:f1:9b:
32:0f:e5:08:49:5d:b7:52:fb:68:d3:7b:a0:60:ce:
d2:11:b1:81:65:7d:d7:9c:29:4d:d5:00:b3:ec:dc:
f0:ad:c0:ca:d5:b6:5c:c9:66:ed:7a:5b:89:12:d2:
ea:e1:ae:8f:54:80:40:d0:a7:33:d9:7c:b0:df:48:
23:a2:80:a1:7c:63:ca:54:fd:4b:dc:ac:bd:e6:53:
3d:c4:17:be:3f:ad:80:87:a4:6f:31:87:67:ed:b8:
6d:91:02:ae:fb:ca:0e:29:3a:2f:a6:dd:bd:0f:76:
ee:f5:1a:5b:13:1f:fd:27:0d:63:f2:7f:a7:ba:cb:
ba:6f:6b:f1:b3:41:3d:fc:1b:d8:72:b6:ae:92:f3:
2c:cc:d1:1b:67:3e:6d:2e:ce:bd:9d:f7:e1:da:ac:
18:54:06:09:98:00:dc:66:e3:4f:21:ff:e7:26:fe:
07:0d:01:45:cd:ff:ce:12:d4:24:af:30:a3:81:61:
5a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:12:BD:05:D7:8B:E3:8E:5A:BD:53:30:1B:93:2D:64:6F:31:7B:7E
X509v3 Authority Key Identifier:
keyid:88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:f5:16:f3:8d:79:2a:7b:ab:ed:f9:88:7a:59:a1:36:27:5b:
83:c4:7a:52:8d:c3:e8:1e:92:36:ca:99:52:f1:a9:66:e2:e4:
91:2d:1a:0c:ad:ed:77:dc:fd:68:e9:de:c8:63:b5:70:64:39:
71:5a:ab:f5:2e:a1:cf:2e:a4:b2:59:d9:4b:2d:1e:e6:fa:49:
f1:e9:ec:e6:78:1e:ab:95:03:1d:1f:24:a9:39:fc:e2:a2:0b:
39:56:6a:5a:4a:49:61:01:48:40:dd:c1:e5:3f:12:b9:05:82:
c2:21:b0:c4:e3:25:fe:56:2a:f7:60:d4:fb:4b:a3:77:5c:11:
31:ae:b0:06:5b:78:56:c8:e9:42:61:50:f3:75:13:75:7d:96:
91:41:6d:5e:c9:d5:31:ef:53:a1:a5:3a:6c:19:e5:87:4b:07:
cb:5d:92:ff:1e:7f:3b:70:6b:f7:46:06:88:5f:52:82:ac:a1:
5f:b2:8b:d4:5a:e5:8b:b1:93:5b:d0:ee:7a:8c:87:b5:73:ea:
eb:e1:b9:80:ae:5f:5a:9f:b4:d1:73:69:f2:fa:7c:91:60:96:
7d:7d:20:5a:e3:99:d7:d9:3e:1a:18:14:a0:f8:6f:92:77:ba:
6e:30:76:b6:17:f4:f5:08:7c:28:f2:dc:5c:20:8b:6b:31:71:
92:58:bd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:44:59 2026 by rpki-client