
$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
File: IiZie3PlFUazvVEODioN6qglIHg.mft (raw, json)
Hash identifier: eIqcj0mDgp/AxgXTKJqGy7QXfis6pcptGygQ4FQe0ZA=
Subject key identifier: 1B:EC:A5:CC:A2:9A:5F:DF:35:76:D5:E9:E9:3B:F3:93:8E:C3:D7:82
Authority key identifier: 22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
Certificate issuer: /CN=A911695A/serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Certificate serial: 46
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
Manifest number: 3A
Signing time: Tue 03 Mar 2026 08:13:55 +0000
Manifest this update: Tue 03 Mar 2026 08:13:54 +0000
Manifest next update: Tue 10 Mar 2026 08:13:54 +0000
Files and hashes: 1: IiZie3PlFUazvVEODioN6qglIHg.crl (hash: ebZWU6c8aubRpr4O/K36GHUPg4hHC3q2Y5leOGAA0Uk=)
2: 1DF3803AEEC611F0B6553517716F56BC.roa (hash: ATMgVxPSynGqWdcAfi8xFi3AYSDzSjTxt/zALkRAATU=)
3: 1CED22CCEEC611F0B6553517716F56BC.roa (hash: yCZ1YjOxjTNparFE9ezut6qYMPYgcu+lh0VxqkB60X0=)
4: 1D6F4D7EEEC611F0B6553517716F56BC.roa (hash: mjkSPSU1CtFx25rdmfQRNQYhUhcPGhgag+X4DPy+syU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:13:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911695A, serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Validity
Not Before: Mar 3 08:13:54 2026 GMT
Not After : Mar 10 08:13:54 2026 GMT
Subject: CN=69a69842-5dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:b1:72:f9:77:c8:4b:66:94:01:79:89:87:
33:27:38:9c:a0:17:f9:58:4b:6c:26:cf:6c:a9:0e:
e9:cf:3d:6d:a9:65:c0:6a:84:8d:5b:f0:19:46:49:
f2:cd:bb:fc:5e:14:29:19:58:a1:aa:16:9c:f5:46:
77:39:11:b1:e3:a1:53:09:82:f2:8c:ab:71:fd:d9:
31:6d:08:f4:5c:3e:13:6a:f9:0f:5b:98:59:0a:5a:
eb:d4:d6:33:09:75:7e:fa:ad:21:0c:2f:bf:e8:bf:
ea:ed:81:10:7a:55:9b:66:55:99:d4:4b:14:ff:a5:
31:34:2e:e5:b3:8a:71:42:08:a6:0d:fa:a1:f7:c1:
ae:f5:4e:71:a4:e0:53:fe:b8:b3:92:78:16:49:5d:
1f:12:a3:a7:e5:1d:40:4d:ad:ae:81:6d:eb:a5:7e:
ae:4e:21:e1:8a:89:5a:9a:f5:bf:c3:27:ed:00:df:
1c:39:a0:72:5e:9f:84:ad:a4:1b:78:71:43:2b:a3:
2c:b1:7a:21:f5:c6:a0:25:99:60:84:83:88:3a:f0:
e8:47:9d:41:8d:5f:c2:bf:da:05:75:d9:52:b6:f1:
03:c7:36:3a:28:b4:5b:f1:e6:34:4c:8b:38:cc:a6:
6d:1d:2e:e3:a2:bb:5e:95:08:9e:41:41:44:26:b8:
5d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EC:A5:CC:A2:9A:5F:DF:35:76:D5:E9:E9:3B:F3:93:8E:C3:D7:82
X509v3 Authority Key Identifier:
keyid:22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9d:7b:18:d3:1e:b8:f5:a1:f3:4e:86:fe:52:b3:a7:8c:42:
8b:8b:99:e8:8f:ed:ca:89:92:cf:9c:34:20:7d:00:bf:c6:0d:
7e:7c:cd:2c:5d:52:f7:07:25:f1:f8:2d:3a:1c:d3:46:b1:67:
5a:ba:90:25:89:f1:ad:c8:01:51:1e:1d:7a:f3:38:c2:c4:2f:
4d:14:1c:a1:fa:b1:21:39:d4:58:2c:dc:79:9b:b7:36:02:f6:
7d:33:bb:6e:b0:30:8e:c2:3f:15:db:03:ba:83:3a:e2:a8:a8:
2e:6b:29:83:97:a1:81:00:0a:ad:23:13:84:ac:c7:ee:8b:51:
16:40:84:2a:07:99:14:31:60:ef:94:66:89:e5:b6:c8:78:33:
ca:c8:14:9c:bb:56:5b:ff:a5:ca:b5:17:ec:48:fe:f7:f9:dc:
e3:bc:5e:1b:5c:31:9f:99:6c:c5:d8:cf:7f:9c:59:77:6d:fa:
3b:0c:62:69:4c:be:09:41:27:7b:3f:f1:49:4e:28:89:45:a7:
15:cf:12:ba:4f:d4:8b:8b:ce:b4:14:df:42:d5:7b:29:45:a2:
31:7c:81:db:ca:44:67:96:ff:f8:06:a8:3d:c9:2a:8c:b3:01:
2e:7f:6d:81:54:44:a4:41:4f:ca:0f:e6:41:89:20:20:99:1c:
5a:87:1d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:42 2026 by rpki-client