
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
File: iV5rynpcNtnzBEctDScTpILJ2yU.mft (raw, json)
Hash identifier: rYABuHK0DDPSWPp9alHuzwMi7y33dnqgqVBAxWYEClw=
Subject key identifier: D6:17:7B:92:33:03:4C:B5:14:9F:A8:C0:6E:B4:A1:3F:74:5B:D8:27
Authority key identifier: 89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25
Certificate issuer: /CN=A91B829A/serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25
Certificate serial: 0CEB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
Manifest number: 0CE0
Signing time: Tue 24 Mar 2026 18:07:04 +0000
Manifest this update: Tue 24 Mar 2026 18:07:03 +0000
Manifest next update: Tue 31 Mar 2026 18:07:03 +0000
Files and hashes: 1: iV5rynpcNtnzBEctDScTpILJ2yU.crl (hash: u85W6UID8vZshth+oRrjdQeA2eCyb9IUwp42edkQ9Vo=)
2: 37759456617811ECBB095A62C4F9AE02.roa (hash: GoPelaWzfjsTFtPr3I95eodushRHuWInvxaTpmekvow=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl
rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3307 (0xceb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B829A, serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25
Validity
Not Before: Mar 24 18:07:03 2026 GMT
Not After : Mar 31 18:07:03 2026 GMT
Subject: CN=69c2d2c7-f782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d7:84:c7:32:d3:58:c3:82:b4:d2:6c:9b:7b:
4d:d4:d8:ab:58:c8:e4:46:0f:02:1c:34:bf:f6:41:
b5:2f:58:ef:74:e8:10:af:ed:21:13:b3:af:b9:d2:
23:48:fa:72:7a:75:a6:35:9a:58:51:51:73:e7:8f:
55:c3:a6:a7:0d:10:6c:4c:39:08:b2:fb:1e:ab:f3:
5d:29:6f:16:b2:a2:10:96:89:07:74:c6:a1:20:93:
9c:98:d1:54:d7:34:24:cf:0a:06:e1:0e:96:f8:87:
ef:3d:9b:26:0b:09:6a:30:a8:b9:06:fa:d8:cc:f1:
40:98:28:cd:ec:41:c2:00:96:b1:df:9b:4e:cf:fb:
ae:86:c6:fe:cf:3c:82:7c:34:03:0b:85:07:21:36:
aa:40:64:a2:4c:77:17:78:e3:e2:25:61:5e:27:49:
49:2b:c0:af:be:fc:c7:9f:b2:23:a7:0b:2c:8c:0a:
8c:05:29:53:f0:fa:d5:5b:27:b4:68:a8:11:6d:c0:
24:7b:bc:e7:3c:3a:51:67:f8:bb:6a:b1:71:98:6d:
de:3e:fc:d4:a8:3b:e1:35:c3:21:af:77:27:88:4e:
5b:33:53:10:e9:3e:0c:13:8c:1e:cd:c4:da:66:70:
fe:89:41:24:6a:b3:e1:b4:b8:98:e1:6d:49:a0:e5:
d0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:17:7B:92:33:03:4C:B5:14:9F:A8:C0:6E:B4:A1:3F:74:5B:D8:27
X509v3 Authority Key Identifier:
keyid:89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:28:77:12:90:37:21:1d:c9:14:69:d3:76:a6:21:5b:d5:fd:
fa:3e:d8:a5:6c:c5:4b:b8:eb:e5:fa:bc:f6:57:e0:a1:17:90:
c6:b0:b4:49:8d:cb:2a:2a:ed:2e:ca:d4:3b:cc:80:db:5b:16:
3a:59:9b:a4:0e:49:59:61:64:7f:19:78:a8:cd:a1:87:12:f3:
4d:77:1a:ff:64:05:cd:2a:32:67:cb:83:ff:33:33:3b:d4:08:
cc:dd:e6:18:5c:ff:81:71:24:28:62:1b:32:75:bc:90:79:18:
04:9f:6f:c5:7d:19:da:de:95:90:db:8c:75:63:d7:aa:60:76:
4e:74:19:4f:9b:6d:3c:42:2c:44:f7:8a:94:63:6c:92:0d:63:
a3:70:31:18:9f:cc:d4:72:6b:51:2a:03:ff:d4:5f:09:ac:d4:
c5:f8:93:ab:a2:d4:ca:4c:03:5b:89:29:94:bb:84:5e:20:d6:
1f:5d:a0:6f:37:0f:bd:0b:ba:a7:b8:02:b4:74:af:6a:a3:60:
8f:70:60:a4:cd:d5:50:74:db:13:fc:de:46:c2:9b:c6:2a:21:
a1:d0:1f:d3:f5:03:dc:ed:cc:45:d7:c9:0f:32:32:c3:0f:8e:
ab:4c:57:6f:af:f6:53:21:34:09:a1:1b:9a:ad:72:8a:ca:55:
1d:9d:13:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:21 2026 by rpki-client