
$ rpki-client -vvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
File: I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft (raw, json)
Hash identifier: 6q0+bShFQuCwyQqAhwLcXkP4o6Yqh09gNUNSMQKGxcQ=
Subject key identifier: CD:1D:68:B5:9A:BF:D5:C6:5E:04:50:00:5A:53:71:F6:03:4D:05:79
Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17
Certificate issuer: /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
Certificate serial: 0132
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
Manifest number: 012E
Signing time: Sat 21 Mar 2026 04:34:00 +0000
Manifest this update: Sat 21 Mar 2026 04:34:00 +0000
Manifest next update: Sat 28 Mar 2026 04:34:00 +0000
Files and hashes: 1: I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl (hash: RhV/yfAtkyJwmJ+6ii6sejGjpSIUJcK8a3XQZ04gIdg=)
2: 43A05F96ABF111F0AF8F880CC4F9AE02.roa (hash: wPYuTSmobZhaRnTY/GjZDyWoVCU3cKsQlUPlALVpkaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl
rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 04:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306 (0x132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91122B3, serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
Validity
Not Before: Mar 21 04:34:00 2026 GMT
Not After : Mar 28 04:34:00 2026 GMT
Subject: CN=69be1fb8-421c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dc:98:8e:a5:80:b9:c0:a0:81:e0:4a:ce:df:
d4:17:4b:c5:4f:e6:71:33:a5:91:e1:38:52:90:15:
cb:2c:83:12:02:83:99:ec:39:a6:95:e4:79:76:89:
a0:ea:73:b2:7f:ba:21:05:fa:62:bb:dc:67:f6:c5:
9f:cf:47:21:80:82:0d:d5:0e:3f:76:db:33:49:99:
78:90:44:96:64:dc:39:02:52:91:de:ef:69:66:96:
4a:af:50:9a:0f:32:cf:38:03:6d:1d:34:68:c3:6e:
5e:5d:ab:85:a8:a8:55:0d:17:1f:78:bf:2c:54:a4:
9d:92:4e:35:f8:f2:c4:b2:e0:f2:8e:6c:b6:42:30:
47:18:af:65:ed:c6:98:da:74:63:4b:fb:b5:03:50:
ba:31:b9:bc:33:21:bc:b7:f8:4e:8a:a3:3e:11:4b:
9d:56:a8:9e:a7:75:6a:64:e8:3e:72:02:dc:a8:7e:
e2:2b:d7:49:b3:b1:e5:08:6b:e0:18:dc:40:19:5e:
0c:32:6e:e8:36:ef:2d:50:21:87:fc:97:e9:c4:40:
e2:d9:cd:d9:c6:45:0f:f0:c4:10:09:ee:c9:e1:23:
16:b5:a8:74:77:3e:9b:33:81:5a:07:e9:b8:9d:eb:
08:1f:93:7e:11:97:34:f4:66:3a:fe:34:0c:6d:cb:
aa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1D:68:B5:9A:BF:D5:C6:5E:04:50:00:5A:53:71:F6:03:4D:05:79
X509v3 Authority Key Identifier:
keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:58:06:17:47:1b:a5:29:1c:8b:fd:f1:5d:d9:7d:9b:5d:0e:
f2:7a:29:3e:9c:62:20:25:f4:d8:31:a3:12:72:c9:f9:ed:af:
95:38:49:4c:a6:80:16:6e:e2:79:1e:01:e9:d8:1b:a8:15:2b:
cd:66:db:3b:1e:70:9d:db:a6:92:62:f2:70:c4:c4:84:f5:b7:
17:8a:e2:65:28:fa:5c:33:cb:02:7e:2d:45:ec:40:c4:3d:b4:
b2:b9:05:f3:51:c0:ab:ae:2e:67:9c:99:77:aa:f2:24:ed:03:
d4:74:d7:9d:62:af:35:60:87:ad:c0:d8:39:40:7c:8e:d2:13:
89:81:a7:8d:d5:d7:65:e0:4c:8a:5d:a1:74:93:ff:b5:a6:8e:
30:db:e1:6b:3a:c7:37:0a:9e:ca:ab:94:a9:0c:b1:e4:96:2f:
68:77:c1:cd:a0:7b:bd:cc:df:02:19:ce:93:eb:54:ef:c3:28:
4f:78:ce:ca:96:f2:82:ac:67:46:9f:21:b7:59:e4:98:f5:2f:
14:a3:00:e4:7f:7c:af:dd:e9:b0:d0:9b:1f:5b:cb:b8:d6:ed:
01:ed:56:fc:b8:57:8b:fc:29:82:ee:43:d9:3a:3e:82:e9:45:
d7:66:70:f9:fa:d2:2e:dc:96:e0:87:d7:a0:3b:4d:02:21:38:
e8:82:74:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 23:48:31 2026 by rpki-client