
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.mft
File: iBzVaxmrfMJiYzdmnqtzClWnLLY.mft (raw, json)
Hash identifier: 9YY9Z9wTpWrj4MwuyQXaLHEoJwdgYcyecaKeOge4/5E=
Subject key identifier: B8:55:E8:3F:C5:A8:AC:39:C5:CD:AA:E6:40:43:BC:75:27:42:7E:2A
Authority key identifier: 88:1C:D5:6B:19:AB:7C:C2:62:63:37:66:9E:AB:73:0A:55:A7:2C:B6
Certificate issuer: /CN=A91ED9F9/serialNumber=881CD56B19AB7CC2626337669EAB730A55A72CB6
Certificate serial: 0196
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iBzVaxmrfMJiYzdmnqtzClWnLLY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.mft
Manifest number: 0190
Signing time: Wed 25 Mar 2026 03:41:50 +0000
Manifest this update: Wed 25 Mar 2026 03:41:50 +0000
Manifest next update: Wed 01 Apr 2026 03:41:50 +0000
Files and hashes: 1: iBzVaxmrfMJiYzdmnqtzClWnLLY.crl (hash: 0v0lByqOZTEfzvDwSCp85il+aEY8IWbxDE1hb0zKnvc=)
2: D714E00CB26F11EFB2BFFC58C4F9AE02.roa (hash: IytG8ias0paLkVTw5O/t3fkTpsmCa8qHyJURlQDLoME=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.crl
rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iBzVaxmrfMJiYzdmnqtzClWnLLY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:41:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED9F9, serialNumber=881CD56B19AB7CC2626337669EAB730A55A72CB6
Validity
Not Before: Mar 25 03:41:50 2026 GMT
Not After : Apr 1 03:41:50 2026 GMT
Subject: CN=69c3597e-0e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:54:17:35:95:41:4e:95:67:57:56:ba:99:
39:61:72:b1:1c:97:9d:50:ca:a8:5e:f5:1e:fa:94:
18:3d:e2:90:a0:b6:80:93:5f:34:2b:7a:65:4f:00:
98:8e:04:91:29:03:e1:82:12:69:b5:75:81:4a:70:
a8:ab:15:f1:22:ae:cd:55:0b:a5:31:74:b1:cb:be:
f6:f2:5d:9c:01:57:fe:5d:aa:ac:5c:31:d8:1b:37:
b9:a2:48:f1:20:92:8b:43:32:3f:c8:45:65:86:83:
9c:97:67:e9:5c:2d:5c:8a:b9:25:32:3d:ae:9b:f5:
a4:93:55:03:21:0c:73:f2:74:05:38:37:ec:52:42:
98:f1:ba:c4:66:28:b6:78:90:6f:f1:c6:45:06:24:
de:a1:e2:a3:6e:ac:5d:c6:2e:9d:ea:7d:c1:45:5d:
b5:d7:91:f1:b0:c0:08:cc:5b:03:6d:62:d4:6d:0f:
80:ec:37:f7:2b:a7:15:63:ab:6d:64:fa:c2:55:47:
13:b9:ec:9b:85:9f:24:90:92:8d:ea:71:10:7b:3a:
79:77:24:bd:25:8d:f3:7c:ce:b8:3f:66:91:fc:8a:
f0:75:df:db:f5:37:2f:17:cf:73:6d:0f:ef:f5:d6:
ab:dc:08:e6:e5:a5:6b:39:62:9f:5c:f4:7a:32:aa:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:55:E8:3F:C5:A8:AC:39:C5:CD:AA:E6:40:43:BC:75:27:42:7E:2A
X509v3 Authority Key Identifier:
keyid:88:1C:D5:6B:19:AB:7C:C2:62:63:37:66:9E:AB:73:0A:55:A7:2C:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iBzVaxmrfMJiYzdmnqtzClWnLLY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:7c:8a:2a:a2:7b:3a:47:10:ec:d2:e9:a9:a0:ee:94:aa:e8:
ac:10:1e:4b:f8:ca:63:3d:12:44:1e:9c:9e:d6:90:b9:71:58:
ac:9b:50:0d:56:b2:4d:ce:78:bd:d1:1a:b0:a5:65:71:ba:21:
67:4f:0e:10:27:90:b1:f2:bd:23:da:24:02:ca:b7:83:80:be:
17:87:87:10:b9:aa:52:b3:e7:61:13:11:99:8a:26:02:a2:e0:
6a:88:f1:76:98:57:61:7f:c2:bf:35:9a:c8:1d:55:91:09:c9:
2f:43:9b:2c:4b:ec:e7:c3:4f:fc:cf:66:ae:13:45:4a:87:d4:
54:90:f8:03:da:04:b3:61:13:fc:78:33:5e:02:7e:d2:dc:18:
20:ef:a0:65:68:63:86:da:8d:4f:eb:7f:9d:16:76:eb:ca:57:
1d:e0:5d:ca:9f:69:cf:e6:e8:fa:e8:68:13:e9:2f:0d:4c:56:
44:d9:62:f5:43:b2:5c:d0:a4:d3:a6:19:ea:35:70:1b:e2:9a:
3e:40:cd:f3:09:d1:99:c9:70:ed:74:57:a9:10:99:6b:2a:3e:
9d:fb:6d:09:15:5e:3f:be:3f:d2:48:e5:ff:9c:f1:fc:f4:b0:
1c:ce:fc:5c:c3:92:d0:64:22:52:94:60:40:4a:b5:09:11:49:
bf:c7:31:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:28:51 2026 by rpki-client