
$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
File: IdPtIffN68fQDxu3oJURuVze_iM.mft (raw, json)
Hash identifier: W5+eFFHmDhkhkIlCwhTrvFwpGIckClmw9NwpAynRYfU=
Subject key identifier: 80:C1:CE:B4:43:BF:A0:E5:3E:8E:39:FA:77:07:C5:83:72:BF:33:FA
Authority key identifier: 21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23
Certificate issuer: /CN=A917336A/serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
Manifest number: 013B
Signing time: Sun 05 Apr 2026 04:51:00 +0000
Manifest this update: Sun 05 Apr 2026 04:51:00 +0000
Manifest next update: Sun 12 Apr 2026 04:51:00 +0000
Files and hashes: 1: IdPtIffN68fQDxu3oJURuVze_iM.crl (hash: i3DvMjp039Z4AQKk3DgU9aj4C45QvIQ1Rt5KQ4RNvnQ=)
2: 809F6BF2990511F090DACC2BC4F9AE02.roa (hash: ePh5F//jVgKgbKd9KhC0MLvbTZUoIXDojFlNTXr56Xo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl
rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:50:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917336A, serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23
Validity
Not Before: Apr 5 04:51:00 2026 GMT
Not After : Apr 12 04:51:00 2026 GMT
Subject: CN=69d1ea34-f5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:26:f5:a6:08:ab:e5:d1:11:71:df:58:33:
cd:98:a1:ec:a0:df:0d:da:0a:20:03:ba:98:6b:eb:
79:ba:96:8b:86:67:99:c6:bf:01:e5:9c:7f:48:74:
d2:0b:b2:57:a8:1f:bd:0a:5e:b8:91:bc:1c:37:e1:
e2:c1:29:24:0c:e1:81:93:05:1d:97:39:19:c0:75:
ff:53:20:b1:15:c8:41:21:8e:39:3b:a4:2a:95:0e:
92:fa:28:90:32:2e:63:10:ca:6e:02:7e:46:fc:b0:
2c:6f:19:08:fa:40:b6:0d:d7:db:a0:9e:65:4b:ef:
95:58:9c:7c:cf:ab:56:df:72:50:8d:9f:8b:bd:0b:
35:a6:a8:e8:61:90:ac:95:04:2d:2e:3e:4f:ea:76:
29:bf:18:2f:44:4b:5e:68:4f:08:35:28:9c:27:90:
f4:c6:8f:0d:27:e1:76:1b:a2:07:7c:83:81:bc:55:
eb:6a:87:93:a5:6b:41:2f:83:ce:d0:c1:33:77:f1:
2b:19:1d:74:96:65:67:3f:28:d8:7a:8b:f2:16:d7:
05:a3:65:f1:13:72:13:62:36:bf:32:d6:bd:04:95:
11:ec:21:d0:a2:1f:36:8b:fc:67:94:be:8d:b2:a6:
7a:12:02:2b:ef:11:d6:5d:99:c2:1d:ce:26:d2:47:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C1:CE:B4:43:BF:A0:E5:3E:8E:39:FA:77:07:C5:83:72:BF:33:FA
X509v3 Authority Key Identifier:
keyid:21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:da:d8:bf:7f:1a:3e:17:db:96:05:f6:86:e7:de:8c:93:19:
64:47:9a:10:48:1b:64:58:e4:82:8c:bd:2d:3d:b3:a9:ae:59:
58:11:50:76:77:50:2a:fa:fa:d6:99:3e:7d:08:04:8c:7b:de:
22:c2:1b:b2:55:f6:0a:89:8f:71:6d:26:49:bc:65:f5:95:92:
92:d0:8b:02:1b:aa:49:d2:ce:fd:99:13:16:65:f1:b3:ee:f8:
ac:57:9b:36:64:15:f9:4a:e7:2d:15:06:4f:ba:d7:eb:d1:39:
54:e1:c4:d3:90:9c:8c:f4:cb:a8:35:d0:35:cc:86:4a:e3:90:
52:39:2e:75:d9:c0:3b:72:50:15:79:5c:ea:a9:9e:f6:bc:aa:
b1:f7:da:49:be:c2:b7:28:b7:da:4e:67:ab:61:04:7a:8f:63:
0e:00:31:88:af:4e:af:04:05:76:92:a6:bf:a0:9b:cb:66:4b:
e6:5b:c8:b6:38:ff:8c:73:26:b3:e6:3a:b3:08:d2:75:41:3d:
40:11:c5:56:03:18:23:fb:c6:3c:68:8e:01:77:79:6b:c7:35:
74:ec:02:42:8f:e2:a1:07:8c:25:ee:5a:d2:8e:24:27:94:de:
f5:7b:bf:8d:9d:8a:16:11:d6:c2:1b:1d:cc:1b:ef:d3:65:3e:
fc:5a:f2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:47 2026 by rpki-client