
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
File: 7IR2kVK97dy3D7wh1sbKO_9Il4E.mft (raw, json)
Hash identifier: d8h0Cd3FBDfPTkNQ+RZkJO8lhXJ+P5df3CEHHTFpgOc=
Subject key identifier: 99:EB:2D:59:D2:39:4D:20:DF:35:02:18:39:63:80:14:94:7C:FE:0C
Authority key identifier: EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81
Certificate issuer: /CN=A9189BB3/serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781
Certificate serial: 021C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
Manifest number: 021C
Signing time: Mon 02 Mar 2026 22:55:24 +0000
Manifest this update: Mon 02 Mar 2026 22:55:23 +0000
Manifest next update: Mon 09 Mar 2026 22:55:23 +0000
Files and hashes: 1: 7IR2kVK97dy3D7wh1sbKO_9Il4E.crl (hash: iTIWAEmhHLhI2ZBaifRGBAKFx3eBagMHtoIafySm+uM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl
rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 22:55:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540 (0x21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189BB3, serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781
Validity
Not Before: Mar 2 22:55:23 2026 GMT
Not After : Mar 9 22:55:23 2026 GMT
Subject: CN=69a6155c-dbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f3:8b:0e:06:bf:d3:a5:56:c2:03:d6:fb:cf:
37:03:6d:dc:0f:85:86:14:d8:2a:1a:4f:6d:82:1e:
ef:32:4e:82:4b:6e:d3:89:2f:79:2c:05:4d:c0:05:
45:7e:8e:34:ba:05:8a:83:4f:5f:78:52:69:df:d2:
92:22:4f:cc:67:78:1d:ed:80:38:1f:37:1f:97:de:
53:92:26:93:5e:bb:3b:36:84:9c:a0:60:8d:04:77:
62:87:b4:10:26:f8:9f:19:07:a2:0e:61:e8:38:d6:
0f:92:e6:8f:67:55:8c:7c:b9:2a:18:3a:0c:69:91:
51:c4:a6:0e:cf:51:75:ba:04:18:90:8d:f1:ac:6f:
14:2a:b8:1d:2a:c6:71:3d:6b:a0:16:bf:cb:6b:86:
30:80:49:77:0b:7d:03:d3:80:5d:71:c6:2b:05:7f:
9d:d1:18:bc:43:c0:e1:77:cd:2d:9c:08:7e:64:79:
0f:f3:ae:44:41:65:fb:43:d0:17:c6:91:0f:d4:cb:
48:3a:7d:d6:77:53:11:c9:d6:b7:c9:51:a5:ea:36:
cd:57:52:19:a2:a4:5b:8a:90:3f:aa:83:83:85:dd:
af:c7:4e:19:30:52:95:9a:13:45:f4:c0:aa:59:c8:
20:50:3d:25:9c:7c:bb:e4:41:c0:7d:7c:fa:c3:79:
89:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EB:2D:59:D2:39:4D:20:DF:35:02:18:39:63:80:14:94:7C:FE:0C
X509v3 Authority Key Identifier:
keyid:EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:fb:72:20:3d:03:04:73:fa:92:b3:4a:40:cd:56:bf:03:79:
bb:ee:e3:20:b8:2e:a1:bf:b4:23:7e:21:ab:b7:1a:c5:20:39:
7d:b3:31:96:83:99:bf:e1:59:c3:6c:5b:60:08:d7:5e:de:80:
94:0e:bb:c6:95:2e:98:22:34:71:c0:6d:58:4d:bf:72:9a:bb:
d4:42:98:79:72:a5:98:1f:eb:d3:5c:88:78:f8:39:8a:50:f7:
4c:e7:05:46:b3:c9:ac:df:62:cb:35:c6:46:6f:b9:8c:d5:38:
aa:a3:58:69:c8:87:f1:c9:23:55:6e:74:46:c3:4d:71:02:94:
3d:eb:a0:23:51:67:d3:98:0a:2a:a0:80:f9:39:2b:e2:05:08:
20:72:fb:a4:6c:72:18:c6:1c:00:b6:22:8c:76:f0:48:1e:f2:
00:c2:33:a9:e2:a4:8e:19:80:fd:61:d4:97:63:4e:37:76:bd:
2d:b2:bc:a0:c0:78:a8:80:d7:13:d2:77:4a:46:32:d5:0c:4c:
8f:f5:02:db:e5:9a:f1:37:33:10:66:82:26:f1:9c:af:49:cf:
37:64:9d:25:18:81:0d:9e:3c:69:4a:2f:14:1d:a3:fb:ec:a6:
8b:36:c4:39:5c:1c:98:28:1f:07:95:89:52:a7:42:ec:e0:57:
a9:70:3c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:23:20 2026 by rpki-client