
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft
File: iS3iAjP9DGSOLnuflZUPOpaBfL8.mft (raw, json)
Hash identifier: r/RU57CGUxipDjlTDuzJ0bSS5o85SxSsSMyYXFXsuB8=
Subject key identifier: 9C:2E:11:90:2E:2A:47:5F:AE:5D:59:17:D3:44:C6:88:8A:9B:CF:AE
Authority key identifier: 89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF
Certificate issuer: /CN=A91C7175/serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft
Manifest number: 0128
Signing time: Wed 25 Mar 2026 04:52:15 +0000
Manifest this update: Wed 25 Mar 2026 04:52:15 +0000
Manifest next update: Wed 01 Apr 2026 04:52:15 +0000
Files and hashes: 1: iS3iAjP9DGSOLnuflZUPOpaBfL8.crl (hash: Gv+afKIaf0IFcvdDy9yAD5Eu29zXylu7vKRKczHqrWE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl
rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7175, serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF
Validity
Not Before: Mar 25 04:52:15 2026 GMT
Not After : Apr 1 04:52:15 2026 GMT
Subject: CN=69c369ff-60d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a2:88:6e:34:4a:88:78:d2:2f:89:aa:ca:84:
29:7f:e6:a1:81:f5:f3:9d:6f:5f:2d:76:5d:4c:fb:
16:fe:3d:16:e4:7b:c2:9d:e2:ad:3b:26:b6:b6:f5:
31:b5:0e:80:b1:d2:68:84:fa:5d:0c:b3:eb:39:06:
cb:d1:6e:4d:e5:b1:29:db:86:62:4e:db:d5:9f:eb:
b3:88:8c:9e:88:23:8d:d1:09:e2:00:9e:2b:cf:59:
75:aa:20:ec:bb:12:b8:e9:8a:58:27:19:22:43:21:
de:3f:b8:6f:cd:32:d9:63:2f:24:ed:43:78:be:68:
c9:32:86:78:7b:e1:4d:c5:40:62:3b:46:31:bb:31:
a5:23:b7:a4:72:78:71:93:c4:54:ce:a5:54:9a:6e:
bd:3a:7b:25:2b:d4:9a:27:57:a1:20:6c:de:11:ad:
48:15:83:a6:b8:d3:39:54:6c:3e:88:9f:e6:c7:a0:
76:03:79:6a:1b:24:23:99:e5:b9:e2:e6:6d:ba:af:
c1:85:56:7f:9f:d6:94:50:9c:bd:60:f8:58:67:32:
f3:e0:d9:32:75:aa:e1:05:29:86:e9:b9:be:78:eb:
10:9d:57:d4:e8:5f:1b:b6:46:10:d8:91:74:79:16:
59:23:c3:f9:14:03:7f:39:22:66:4a:42:65:5e:69:
82:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2E:11:90:2E:2A:47:5F:AE:5D:59:17:D3:44:C6:88:8A:9B:CF:AE
X509v3 Authority Key Identifier:
keyid:89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:96:44:2a:25:f5:2b:65:27:93:3c:76:c6:dc:94:e6:b3:df:
b1:f4:de:cf:0e:f8:1c:93:c9:32:f9:88:70:b6:48:7f:e5:19:
cd:47:a8:1b:50:5a:2b:fb:1a:40:44:ac:c9:6d:bc:c7:26:21:
14:00:0b:14:50:6b:5d:e9:ba:21:a2:61:b5:58:09:8a:cb:a7:
e0:55:7f:47:16:ff:6b:65:66:2a:01:13:ed:5c:41:55:ba:a1:
e5:dc:2d:72:fd:c7:67:29:e5:fb:a5:3c:0f:b1:7b:31:e6:00:
f9:a1:f5:22:1a:3f:b6:22:24:35:5c:22:d4:30:e9:f5:61:50:
e7:c2:81:2f:73:67:8c:1e:08:46:b7:0b:4d:5a:6c:92:a1:e8:
1e:f4:bf:67:6c:86:75:23:6f:2a:ca:a5:08:71:fa:f6:f2:90:
fa:d3:13:08:11:cd:70:14:05:f7:6c:4d:1a:48:cd:5d:a9:c2:
75:bb:83:e2:98:a1:04:84:37:86:df:c8:33:e4:16:98:96:b4:
db:6c:ff:4f:9c:88:d2:82:11:c9:9c:e8:f7:26:62:02:a6:b4:
93:48:c1:53:af:e2:69:b7:7a:9f:63:f5:fd:65:3e:fb:14:39:
14:15:63:41:02:c3:02:1b:b1:e8:00:be:bc:fc:c5:f8:76:96:
c0:71:03:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:29 2026 by rpki-client