
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
File: Iu3562YIf9DpgXrnNsADnRiAiNU.mft (raw, json)
Hash identifier: /PevXqk3etrpw6s6c183THxNqp0U2M08b4WkKX1Z0w8=
Subject key identifier: 78:CD:E7:C2:78:0B:21:D7:BC:FF:06:F1:57:10:5D:2F:E5:90:22:2B
Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Certificate serial: 0501
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
Manifest number: 04B6
Signing time: Tue 10 Mar 2026 23:36:51 +0000
Manifest this update: Tue 10 Mar 2026 23:36:51 +0000
Manifest next update: Tue 17 Mar 2026 23:36:51 +0000
Files and hashes: 1: Iu3562YIf9DpgXrnNsADnRiAiNU.crl (hash: bAgg0R2KGYIuZZcUQAHferR6FhIRHBMksrYZ+z14OgU=)
2: 818F58F0EAF411EC9A14E22EC4F9AE02.roa (hash: 3Nhpzz36VSFEHxJya2rE/6rzHTYaQVksxEeUha/irsc=)
3: 20519AFE346111EFB91EA738C4F9AE02.roa (hash: sK7hOQtBbdjqCpDICxDk4yk4JTjSJi8T3sqSf4Lha9w=)
4: 8276BFA60BB811EFB091FD1CC4F9AE02.roa (hash: UCg4wJkvMAwrQhdPO9e6tz9kKiLqe8tkbkp5RwOBI9k=)
5: EB0EA48C8AD411ECB9E15216C4F9AE02.roa (hash: ddJzWQzhPMRW8RWCPYnqPYLIbALxTv96n4V/wf2N7x8=)
6: 4B44D6EC0F3C11F1BF24A2AC1C3D8C67.roa (hash: p+BwKAodmJqbLlqXyZtD+mJHN7NUdRLLCP8+RPEq8R4=)
7: E5AC554A897211EEA179DA5DC4F9AE02.roa (hash: J/y5zeodGHbN3vp7O7AJhQI6RPkj8TQkWk7gr7sHHCA=)
8: 15E884EAF73311ED8E92F45DC4F9AE02.roa (hash: u+MRGHbFeFUPlLfGYwJEnpOiyClJtJ0KRuVBvJpUNDk=)
9: BEF172F4BD1311EDAB02753EC4F9AE02.roa (hash: ErPhHuDK3ekByL6ifWQZAzFYI/duFVOlJelFvK4aMbc=)
10: 642A8EA2887911ECAFCDDE1FC4F9AE02.roa (hash: 2QtjnY/xrXLEykN5W8u+hPxfRcseLCmC+14qCL2SI+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 23:36:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1281 (0x501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Validity
Not Before: Mar 10 23:36:51 2026 GMT
Not After : Mar 17 23:36:51 2026 GMT
Subject: CN=69b0ab13-dfb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:67:75:9d:f8:b9:54:6a:72:78:0f:62:38:b8:
50:c4:47:e7:a6:17:6d:6f:45:4b:0a:17:ce:4d:a2:
91:0f:62:f2:0c:ce:55:42:34:d1:ac:ed:91:98:6f:
2c:3f:07:82:30:05:8c:26:9b:a5:e0:eb:dd:0a:60:
04:40:78:4b:23:f3:5d:92:77:13:d9:81:e0:e1:4e:
25:e9:67:99:e0:44:2e:72:fa:40:dc:c5:ed:79:58:
bf:b6:75:a0:a4:82:26:f2:05:41:72:86:a5:83:b1:
2b:25:fd:be:d0:30:df:2d:70:8d:bc:d4:7d:1a:7d:
ea:40:21:ed:73:ac:c6:9b:0d:cb:06:5d:b5:1b:a4:
39:fe:6f:76:8a:d1:70:40:71:41:69:cb:e9:16:ba:
f8:a7:23:fa:46:be:0e:49:78:ad:34:42:cf:71:79:
67:37:48:bc:20:ad:e2:54:7d:d2:58:d2:d8:32:81:
be:0e:03:ae:b3:52:6c:60:a3:3b:24:12:1f:8e:89:
be:57:02:03:7f:da:23:cb:7c:1c:2b:b2:82:47:23:
70:7f:73:7b:82:fa:d0:19:57:5e:93:d4:65:4b:c8:
a2:64:b7:36:30:72:80:9f:32:b4:00:f3:41:7c:e3:
4f:36:5f:a5:b4:5a:a5:a2:65:db:01:07:61:63:44:
a2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CD:E7:C2:78:0B:21:D7:BC:FF:06:F1:57:10:5D:2F:E5:90:22:2B
X509v3 Authority Key Identifier:
keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fd:fa:ea:21:5f:6c:b9:fe:d2:e1:d2:4f:58:fb:17:0c:02:
0e:50:23:d7:87:84:92:2b:d1:3e:eb:e4:6a:3a:a4:ac:7c:c2:
b2:aa:57:ba:68:a2:8d:1a:56:e2:98:fb:27:46:e0:af:e1:b0:
8a:db:61:27:0e:f0:50:5f:1e:d0:87:99:6b:69:20:59:24:80:
f7:11:58:55:2d:97:3c:35:02:e2:4e:85:36:12:40:a0:39:2d:
53:4d:ab:e6:4e:2f:a4:e8:4f:33:4e:d8:e4:4c:3a:26:e5:75:
6e:f3:43:12:4e:c3:31:8b:52:29:e9:ef:50:50:bb:a3:71:e1:
3d:36:67:4a:59:f2:e4:31:0f:7e:05:44:20:d4:da:07:06:9b:
1d:1e:7b:cb:53:75:cb:ea:1b:1b:8d:71:b5:d8:f7:b4:c5:8d:
32:32:bb:62:4b:b0:6f:80:9b:27:98:d7:9e:c2:30:df:04:b3:
36:a1:87:95:16:38:4b:58:5a:87:8f:60:f4:2e:95:2a:b5:c5:
37:81:94:46:48:82:ad:b7:44:d9:cd:00:11:8b:bc:f8:fe:3e:
2a:5e:64:85:86:09:0d:f4:7e:c4:e5:ed:9f:9b:50:d6:f7:50:
fe:43:65:83:80:8b:3f:66:1c:76:ef:b6:72:83:4d:b3:0d:9d:
df:36:c6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 10:37:24 2026 by rpki-client