
$ rpki-client -vvf rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
File: I9INognIlcMA7mtlm2sYKZJfvU8.mft (raw, json)
Hash identifier: lV20Hg7+BzERzcOCo0nOZL5sZBGkNhxbclxOEt25gQI=
Subject key identifier: D2:DC:3A:32:62:7C:B8:99:87:22:3B:B1:32:67:14:F0:09:39:83:5E
Authority key identifier: 23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F
Certificate issuer: /CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
Certificate serial: 0CC9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
Manifest number: 0CB0
Signing time: Sat 04 Apr 2026 18:22:47 +0000
Manifest this update: Sat 04 Apr 2026 18:22:46 +0000
Manifest next update: Sat 11 Apr 2026 18:22:46 +0000
Files and hashes: 1: I9INognIlcMA7mtlm2sYKZJfvU8.crl (hash: g4FrtlRw0l4fdl/a195Qx/DDN/w+P7p7uUvLyjiox1c=)
2: 7B96F1340C6011F088E6FD2FC4F9AE02.roa (hash: mKkuVSeTZtVuG7BfqaqUZzcHeF9XMKmK1adCEnjlrRM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl
rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:22:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3273 (0xcc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91829E3, serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
Validity
Not Before: Apr 4 18:22:46 2026 GMT
Not After : Apr 11 18:22:46 2026 GMT
Subject: CN=69d156f7-ac1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:40:ca:24:24:cc:08:ac:5a:82:40:c4:b9:
38:96:31:2c:cc:1f:c4:85:e0:f7:65:8a:6a:56:6b:
1d:59:35:db:f7:dc:18:a5:ef:66:a7:00:00:e0:23:
8c:07:23:98:8f:92:2e:d6:1f:a8:b7:6e:d4:e3:6c:
ff:b4:e8:4f:63:e4:0f:7a:7e:44:33:9e:a0:c8:f5:
e0:8a:47:35:40:64:9f:6d:44:db:2d:77:55:24:f4:
5e:f2:f5:42:33:a9:8d:10:c3:4d:72:05:48:be:e8:
ae:96:d2:ed:5d:60:14:68:3a:b2:bc:b7:63:85:77:
ba:99:68:bc:b8:a1:86:70:3a:b5:c6:84:f8:00:96:
fd:df:05:0f:2e:04:92:c5:2c:7d:91:60:68:73:19:
f5:83:bd:2a:10:95:35:99:09:c6:f9:09:14:f9:6b:
da:4c:2f:a7:8d:9c:e3:a4:38:c7:55:57:91:6a:02:
d5:40:07:d0:93:fd:51:90:98:f8:7c:27:77:84:1d:
53:91:33:83:71:a5:69:ab:74:fd:4c:0a:80:8f:3c:
c3:64:a9:70:00:8d:69:b8:ed:e0:7f:2e:b3:07:d4:
fd:fe:3d:0c:ad:26:4d:3b:37:74:8c:aa:9c:b6:17:
cb:ee:f3:95:13:e1:be:a4:76:b5:fe:87:0f:95:81:
5d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DC:3A:32:62:7C:B8:99:87:22:3B:B1:32:67:14:F0:09:39:83:5E
X509v3 Authority Key Identifier:
keyid:23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:00:2c:b3:bf:e1:b8:18:17:79:cf:9e:93:7a:02:dd:95:8a:
5f:a3:89:9b:9b:d5:85:34:c3:89:71:11:58:fc:c2:a7:4c:3f:
03:94:0b:02:67:bb:53:a4:d8:5c:c1:25:e1:bb:08:13:2f:30:
75:99:19:2e:17:40:8f:c6:1c:55:48:53:66:22:36:38:7e:88:
6a:10:f4:08:0e:64:2f:b9:4d:58:ea:3f:97:de:71:10:47:c6:
a0:57:d0:91:e9:b0:c3:b4:f4:73:59:0c:c6:d5:97:b9:6f:88:
9c:9f:ca:39:3a:46:7e:2c:38:ed:2b:f2:91:2c:50:7a:08:97:
42:f0:c5:fc:66:b5:78:4b:9b:22:f1:6c:7d:f1:61:e7:8f:07:
00:6a:31:2c:53:ad:98:16:38:9b:9e:c4:99:a3:02:96:a4:43:
0e:9d:f9:4d:66:3a:09:39:e8:c2:3a:f9:3e:12:32:5c:66:93:
f9:32:33:23:9f:28:c2:36:a3:ae:c2:b8:af:4e:8b:e5:6a:8e:
2d:94:23:a5:f3:ac:72:82:2e:2f:af:18:74:7b:34:1c:8a:15:
86:35:21:f7:e1:b5:62:71:42:74:01:12:fe:bb:02:a9:21:ac:
7f:1d:1f:ff:18:ba:d3:b8:52:21:7a:d0:f4:25:cb:d9:db:2a:
b0:4c:ff:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:59 2026 by rpki-client