
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
File: IrN0ThSJpKURK82Mvxepj_HbZnU.mft (raw, json)
Hash identifier: +sEMfNHaRkAzpvNl/ji5dpFgxJmT8K7RE0qd481lIks=
Subject key identifier: C2:EF:DC:8E:43:BB:B0:2D:E8:59:63:76:F9:25:14:6F:ED:7A:6A:96
Authority key identifier: 22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75
Certificate issuer: /CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675
Certificate serial: 03B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
Manifest number: 03A8
Signing time: Wed 25 Mar 2026 00:23:26 +0000
Manifest this update: Wed 25 Mar 2026 00:23:25 +0000
Manifest next update: Wed 01 Apr 2026 00:23:25 +0000
Files and hashes: 1: IrN0ThSJpKURK82Mvxepj_HbZnU.crl (hash: PXaWQx18ACvDCoMDyDSaWL9YBP0EdYmv7Kv2Jz+G7gE=)
2: F2C91F5678BE11EFBB3FC76DC4F9AE02.roa (hash: DRPYHt96EX1APt3QQLSOdPENVuq6bm635GQlVX6wlt4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl
rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:23:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 946 (0x3b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2B54, serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675
Validity
Not Before: Mar 25 00:23:25 2026 GMT
Not After : Apr 1 00:23:25 2026 GMT
Subject: CN=69c32afe-5fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:55:f5:f5:fa:eb:6d:4e:69:30:ba:47:55:
10:04:78:42:8e:50:93:b4:16:c3:5a:55:b3:91:cd:
6f:71:ff:94:2d:85:c4:78:ba:d1:50:77:f1:9f:b1:
c9:ad:5b:16:a2:25:92:75:9f:48:2d:50:ad:51:80:
b3:a1:37:02:87:44:60:ce:49:8b:2f:9a:35:0a:37:
49:fc:83:4b:1f:46:60:a1:8d:08:d4:db:11:29:ef:
94:9e:50:22:97:75:70:b4:b6:f6:d6:2c:78:29:ab:
15:96:1c:28:17:e0:84:32:2e:e2:3c:77:54:71:dc:
43:95:ff:1b:60:53:d8:07:c4:67:07:ae:20:01:b4:
86:bf:a7:a3:f4:00:ca:dc:14:dc:5c:33:44:2e:6a:
9d:21:16:b8:25:54:c9:8f:32:5d:33:93:9f:7a:c7:
35:a7:f9:3e:31:26:a8:c6:cf:a2:f4:d2:11:66:80:
84:ff:6b:f7:58:81:65:65:66:5e:44:1f:c9:2d:81:
63:71:27:80:e3:33:3e:23:04:4a:dc:f0:c1:e6:5a:
68:43:3a:38:ec:3d:c2:99:22:48:ed:58:fe:94:b0:
e1:7f:13:9e:f7:12:f9:e6:2f:8d:7e:43:53:cd:29:
11:26:af:7b:2b:07:2f:54:11:58:87:ae:de:4f:0e:
5b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EF:DC:8E:43:BB:B0:2D:E8:59:63:76:F9:25:14:6F:ED:7A:6A:96
X509v3 Authority Key Identifier:
keyid:22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:08:d0:e9:df:b1:9b:49:95:d6:e8:76:d2:84:85:a8:bd:72:
31:2a:6f:72:84:a7:a4:15:25:96:4e:17:73:06:15:4f:40:3c:
3c:4e:8e:5a:44:59:c3:c7:00:c9:f4:73:d5:aa:66:d0:3f:04:
1f:11:94:3b:ad:14:62:ab:e8:a6:03:7f:b6:a5:9b:5c:6b:b7:
1c:f8:06:02:e7:fd:e9:cf:e1:0c:36:03:0b:1f:38:c9:dc:62:
89:66:8b:1e:84:f5:ca:b0:03:3c:82:cc:44:67:2a:56:79:e3:
9f:33:ec:6d:ff:05:87:5d:f0:1a:a4:47:09:a4:85:56:d8:2e:
41:72:d7:1e:33:06:e3:f7:66:d4:f7:bb:1f:4f:4f:70:18:bf:
39:7e:92:db:36:c6:00:d3:34:82:33:97:7e:d4:3d:47:23:0d:
f6:b4:bc:e9:4f:03:e0:f4:59:92:b5:ef:f4:85:78:00:b5:73:
90:7a:81:93:0b:5e:59:6b:7f:e1:06:ce:4c:90:79:ef:f7:f0:
06:9b:ce:a6:2c:2c:89:08:54:d2:af:f8:67:3b:d0:99:9e:7d:
18:43:a3:ed:7b:d4:12:0f:45:8e:71:0c:82:97:66:90:71:ec:
e5:41:08:f9:30:19:19:70:b2:0f:ed:4d:f1:32:97:30:80:70:
6b:1d:fe:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:58:52 2026 by rpki-client