
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
File: iaMdROlPHMJ4ULusFsAsIKqznOU.mft (raw, json)
Hash identifier: mNdq3AcKML2zpeWQdcIBLK5XBRB1c2nP8g/PatX+OfE=
Subject key identifier: 0E:9A:07:39:1A:7B:0A:24:A7:94:8C:BD:D0:01:70:27:77:87:C5:A7
Authority key identifier: 89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5
Certificate issuer: /CN=A9196F73/serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5
Certificate serial: 0B6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
Manifest number: 0B56
Signing time: Mon 06 Apr 2026 19:02:22 +0000
Manifest this update: Mon 06 Apr 2026 19:02:21 +0000
Manifest next update: Mon 13 Apr 2026 19:02:21 +0000
Files and hashes: 1: iaMdROlPHMJ4ULusFsAsIKqznOU.crl (hash: T1nlx2leSfjk/SgSP65y3nzdblLyELg+Qi4SjvHvHPY=)
2: 9AE4F7EC53A211EA8D26BD0CC4F9AE02.roa (hash: JuE06CSNAAV8+NliC0AVlzjHWrODAM4vJnnB5WZLKk8=)
3: F392CF9E53A311EAB1641213C4F9AE02.roa (hash: hK13KfCAsMi+xHUuka2Pkznncer1XgUOHCwFnVLDtqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl
rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 19:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2924 (0xb6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196F73, serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5
Validity
Not Before: Apr 6 19:02:21 2026 GMT
Not After : Apr 13 19:02:21 2026 GMT
Subject: CN=69d4033d-b3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:11:24:fb:8a:23:47:5e:bf:8d:71:5c:3b:29:
e1:b4:b3:9f:73:0d:e4:57:5d:a9:b1:8c:3c:8d:f2:
7f:6e:7a:fc:a7:b7:eb:7e:ca:18:ef:72:41:7d:38:
82:88:e9:b6:51:4c:2e:4c:3e:b6:d8:62:b1:6e:ff:
58:aa:15:39:73:6b:c1:ab:a0:5c:92:f0:0c:f2:49:
64:69:e9:45:b5:92:6b:40:83:ca:63:d0:ac:fc:1c:
00:e7:ff:ea:95:c3:df:c3:c2:c5:a5:ed:ce:7d:af:
4f:d0:03:3e:dd:b2:86:65:e1:44:b7:79:c3:08:e5:
c6:cf:fd:76:6b:f5:3d:91:34:51:51:05:b5:41:4a:
18:9f:6f:2d:5b:80:50:f9:b7:c9:9d:5b:48:03:91:
72:7c:a0:c8:04:ee:bd:cb:59:cf:28:bf:28:91:c5:
36:2a:c8:1c:5d:d1:ef:ef:50:cf:a0:1b:25:59:0e:
0d:a8:9a:7e:70:32:d4:9d:8c:94:46:8a:83:7f:0e:
58:f8:71:ae:3a:10:82:63:b8:ed:53:68:46:7a:d1:
93:f6:f0:c5:61:3f:39:6c:f8:90:f0:f3:f5:e3:a9:
40:87:47:de:5e:3b:7a:ed:00:a3:52:28:bc:44:7c:
e4:35:e5:74:0f:4b:10:6d:fb:a6:00:71:b5:d4:e1:
02:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9A:07:39:1A:7B:0A:24:A7:94:8C:BD:D0:01:70:27:77:87:C5:A7
X509v3 Authority Key Identifier:
keyid:89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:97:d4:26:ba:d2:e3:34:98:d4:e9:00:22:83:46:37:c9:a1:
2c:66:9a:68:71:49:7c:b4:84:d1:1b:ca:0a:0d:d2:3f:9d:26:
b7:43:f6:d8:cd:fe:eb:c5:39:34:44:a8:8c:71:2c:1e:7c:bf:
00:7c:1d:18:40:98:d6:62:5c:83:c0:f1:00:df:3f:a1:23:59:
75:c6:75:bb:71:42:b3:a5:e4:6a:5e:9c:1a:3a:b0:50:e0:7c:
74:b6:0b:41:ef:fb:6b:1f:66:9b:83:b2:14:fe:1c:58:de:12:
36:a5:f0:33:22:29:7f:f2:04:d4:a4:56:8f:51:54:08:86:ea:
b1:65:c7:85:e7:67:fe:b1:4e:f3:f3:60:1e:11:15:cc:b1:b8:
44:90:f4:ae:32:de:b6:a2:1c:92:ef:3a:88:60:6d:e0:fe:4b:
ee:85:60:ed:75:6e:72:64:7d:f3:09:a5:7c:9d:ba:93:96:41:
4a:a9:c0:98:ab:e1:36:ae:92:83:ae:04:aa:3c:5c:06:d6:af:
84:51:f2:6d:c7:a0:ed:05:0a:85:70:0d:99:09:88:4a:65:f9:
19:cd:13:fe:b3:97:4a:3b:2d:ad:9f:97:05:04:88:fb:26:53:
ac:8a:25:6d:8e:94:21:25:e2:04:53:7b:d8:85:8c:30:5e:d8:
f2:33:35:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:04:41 2026 by rpki-client