
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft
File: IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft (raw, json)
Hash identifier: syV7WEgxm3Bq++z39Vq0lzub+Mt0Mjjx7KMIwVxulhA=
Subject key identifier: 15:8F:68:84:C8:ED:E1:96:E3:01:B9:62:D8:29:40:5E:CE:FD:DA:80
Authority key identifier: 22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4
Certificate issuer: /CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4
Certificate serial: 018E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft
Manifest number: 09F8
Signing time: Sat 04 Apr 2026 20:29:49 +0000
Manifest this update: Sat 04 Apr 2026 20:29:49 +0000
Manifest next update: Sat 11 Apr 2026 20:29:49 +0000
Files and hashes: 1: IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl (hash: 9VOt8BmwdZgKWObk0HMCOENX5G2lQrEcgB+1ZCLBcWM=)
2: 79057E1CEB1011EEB9CE4F19C4F9AE02.roa (hash: QIU3lIyA+5VKaavxpFKOY/kby8goMr79mIMT44fjsag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl
rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E9F4, serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4
Validity
Not Before: Apr 4 20:29:49 2026 GMT
Not After : Apr 11 20:29:49 2026 GMT
Subject: CN=69d174bd-f334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:c7:a4:43:b1:b4:81:16:da:f8:63:6e:6c:
0b:a0:86:f3:0a:63:e0:55:04:73:e1:f6:a3:23:61:
dc:9f:4f:0e:ba:bf:86:89:f6:90:a6:0f:be:ab:17:
66:6b:e5:c7:d0:4a:5f:9d:60:85:78:43:aa:e2:b2:
0f:6a:cb:c2:64:86:c3:4e:63:01:86:aa:f2:10:d1:
2d:27:e1:82:20:7d:e7:99:b2:08:ae:46:1b:88:83:
f8:71:26:81:05:b5:d9:6e:5c:4c:c7:cb:02:3f:81:
fe:b4:bb:30:43:c4:3d:7d:8d:3f:2c:c8:2f:d3:f8:
d0:dd:01:9c:f1:a3:22:ed:85:1f:01:0c:0d:b1:64:
2e:04:94:ba:33:cc:45:4e:76:a0:2d:51:d7:95:b0:
02:e9:10:2a:87:6f:2d:57:17:96:c6:a7:50:f2:11:
dc:c2:1a:86:13:4b:a9:0d:9c:38:fd:8e:33:86:f5:
9b:3d:b7:e6:72:9c:c4:00:8f:e5:de:18:74:31:d6:
1a:79:72:db:82:d3:44:78:b4:8b:5a:88:21:e9:33:
b2:ad:f8:95:08:e7:ac:2a:c2:9e:12:ca:63:80:ee:
25:bb:4f:4b:a3:8e:7e:4c:b3:a8:ce:71:3c:f0:b4:
68:5c:4b:a6:9c:2c:8a:ea:b9:4e:2c:20:25:79:8d:
62:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8F:68:84:C8:ED:E1:96:E3:01:B9:62:D8:29:40:5E:CE:FD:DA:80
X509v3 Authority Key Identifier:
keyid:22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:11:84:55:4e:75:2f:35:12:19:8f:7e:ce:5c:9d:df:bc:65:
a2:f0:1d:0f:27:f5:59:60:46:86:ee:46:5a:1b:89:9b:9b:b4:
94:57:09:47:c3:a4:d9:a3:39:01:4c:ec:53:ad:9b:f1:5e:87:
8f:0b:cd:a6:ab:26:16:cd:37:ed:54:b8:7d:8b:0a:d6:bb:d1:
3a:ec:65:12:e5:5d:2a:3e:81:c5:7c:e1:a6:40:ef:94:0b:34:
77:f3:18:11:61:7d:e6:d7:1a:65:a4:3a:3a:81:aa:1a:75:01:
54:47:b9:05:54:13:c4:ee:f7:72:a5:1a:a4:00:e5:99:e2:88:
24:85:60:73:7a:e1:bf:53:76:ae:c7:e0:a0:75:c8:a2:58:42:
4a:d7:14:e9:24:04:c5:a4:9b:f4:cc:3a:6d:d5:2e:61:63:f0:
8c:d0:6f:0b:8c:a8:41:56:5a:1e:16:c1:b0:14:98:c6:b2:df:
96:43:d9:5d:16:36:45:a6:36:2b:91:9d:45:de:ff:f0:5e:ab:
6f:3c:2b:66:68:07:a6:9e:d7:5c:ca:72:27:25:13:7f:25:b6:
17:9a:aa:2c:7f:6c:0b:d0:f6:51:83:f6:a3:27:af:e1:75:50:
ff:50:4d:01:a4:3a:10:aa:7b:f5:6b:57:e7:3e:cc:b8:63:c5:
83:30:70:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:39:11 2026 by rpki-client