
$ rpki-client -vvf rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
File: IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft (raw, json)
Hash identifier: +8+lJJNjOqgPN7PzpG5PGCzd2QIpEqm2LEyktDAXH/0=
Subject key identifier: 88:59:E1:64:A5:E6:05:2F:86:21:66:B5:71:7A:B6:8F:8B:49:0F:AC
Authority key identifier: 21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12
Certificate issuer: /CN=A914022F/serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12
Certificate serial: 0734
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
Manifest number: 0728
Signing time: Sat 04 Apr 2026 21:38:01 +0000
Manifest this update: Sat 04 Apr 2026 21:38:00 +0000
Manifest next update: Sat 11 Apr 2026 21:38:00 +0000
Files and hashes: 1: IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl (hash: Li7t/TAWi3vbVltzSpCWewzPJLoQP8i7j1dgkC1cXqg=)
2: 24F33D7877AF11EB8E972C66C4F9AE02.roa (hash: kjgnZeVn+N324KHyf3fGO9g9YrF9YolyFM7PZ06SKLc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl
rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1844 (0x734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914022F, serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12
Validity
Not Before: Apr 4 21:38:00 2026 GMT
Not After : Apr 11 21:38:00 2026 GMT
Subject: CN=69d184b8-96e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:74:84:0f:f1:06:9a:ad:c3:d5:09:00:47:0b:
a8:2d:f7:59:68:53:cb:2b:8f:c2:ee:e9:d3:5a:3d:
dd:7c:1d:47:5c:9a:5b:4b:40:4a:d4:02:23:cd:cd:
c0:03:02:c0:7c:c2:77:68:90:50:fa:f7:ee:30:61:
11:54:72:99:49:f6:7b:28:4a:d5:cd:7d:88:74:d9:
8d:4e:84:ce:38:6b:0d:4e:cf:b9:2a:9b:3e:85:6f:
9d:26:39:fa:a4:41:79:ea:ec:20:0a:70:35:4c:ec:
98:64:0d:75:5f:2e:8a:27:89:ef:cf:61:f6:74:af:
3a:37:95:19:61:fe:dd:34:7c:46:3e:75:85:1b:96:
a0:dc:a5:7f:6a:12:5d:d7:42:f2:9a:16:c8:33:02:
cc:44:a9:b4:8a:93:8c:82:f8:dd:8d:1d:32:2f:48:
28:e3:c7:b7:24:e5:e1:b3:4e:a6:9d:f8:65:ed:5e:
7e:9b:ca:e0:48:a5:1e:c0:ce:06:ad:85:e3:1e:ea:
20:9f:0b:36:1f:70:72:ff:5f:59:47:2a:ff:bc:1a:
65:b2:f4:ac:15:8b:41:3a:62:a0:d7:ef:c5:c9:82:
4f:0d:6e:c8:63:f3:ed:3a:b1:22:a2:68:4a:29:8c:
d1:26:75:75:9c:de:00:92:b7:5a:e0:72:1e:32:b8:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:59:E1:64:A5:E6:05:2F:86:21:66:B5:71:7A:B6:8F:8B:49:0F:AC
X509v3 Authority Key Identifier:
keyid:21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:79:f6:7e:31:fc:bd:40:69:4d:5d:38:cd:0a:0b:70:0f:de:
41:fd:19:6c:15:1e:0e:32:1d:05:a7:a4:a0:b8:a4:39:ab:a7:
15:aa:0d:47:a4:45:05:31:19:7f:19:ce:7b:1a:93:d0:61:b8:
3d:01:61:ce:72:48:af:be:13:86:e9:77:47:58:38:65:72:7c:
39:b5:ba:f3:74:65:e7:eb:79:f8:3d:f9:9e:c4:d4:76:af:8d:
66:55:9b:26:e4:26:0e:46:a6:96:0c:6e:7d:3f:ac:be:e8:15:
16:5b:de:72:d9:32:0c:34:37:e0:4a:d8:e2:24:d7:ae:c7:1d:
f5:19:5f:d0:ac:93:8b:62:d0:30:a3:98:ec:f0:c8:26:ca:9d:
ae:bd:62:6c:65:42:a7:59:25:1a:6a:ed:49:2b:5b:48:35:1d:
dc:af:46:1f:bd:b5:6b:3b:ce:be:1d:af:ca:19:e8:28:38:26:
a6:c4:56:e5:ae:a2:36:4c:ad:12:2e:3d:7e:87:29:ed:26:f9:
cf:83:4a:b1:d8:28:b7:2d:40:f1:2c:77:b8:9d:38:0f:af:68:
d4:b5:3c:70:7f:f7:3f:47:60:6c:f8:a5:c7:0b:0c:7a:3c:d2:
f7:f2:6f:eb:15:9c:11:94:9b:bd:ae:6d:39:ca:26:8f:ed:4b:
ff:58:66:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 22:24:49 2026 by rpki-client