
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
File: IgUecf7QG75bnNYkR2DObpAwevc.mft (raw, json)
Hash identifier: U9a56Uq1He7/rIOYpxOFx4nnHMKcusYp0Hs/CnY8tkM=
Subject key identifier: 4B:8B:57:99:DF:0D:8C:B8:5B:93:95:40:02:65:DE:F2:DC:7D:B0:36
Authority key identifier: 22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7
Certificate issuer: /CN=A9190226/serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7
Certificate serial: 0291
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
Manifest number: 0289
Signing time: Sun 05 Apr 2026 01:22:30 +0000
Manifest this update: Sun 05 Apr 2026 01:22:30 +0000
Manifest next update: Sun 12 Apr 2026 01:22:30 +0000
Files and hashes: 1: IgUecf7QG75bnNYkR2DObpAwevc.crl (hash: DijIPYiN5yukh58rubmWimrZ3TDcrQrQrxvg52N4Tvk=)
2: AF9BA1D2717111ED8518666EC4F9AE02.roa (hash: q4e7aYH9waKslT9vvJ5LwHeUoX9Y/i5O5m70Jm8iiXY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.crl
rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:22:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657 (0x291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190226, serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7
Validity
Not Before: Apr 5 01:22:30 2026 GMT
Not After : Apr 12 01:22:30 2026 GMT
Subject: CN=69d1b956-8fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a7:cb:5c:db:87:23:64:95:da:b1:71:fb:54:
e6:eb:52:d0:0c:58:71:eb:17:b5:9b:91:1d:6e:69:
07:51:8d:9c:b1:3d:6c:ab:f7:4d:db:2a:24:60:2a:
96:cd:03:01:21:1d:23:5e:85:08:cc:84:57:43:41:
80:66:66:a2:14:d9:4d:f2:f1:06:c1:49:d6:bd:3b:
fc:0e:24:b4:8f:83:e5:b2:ec:68:49:97:ab:cf:1b:
3c:b2:78:d5:b3:4b:f2:86:aa:08:f4:26:9c:a0:c3:
a5:44:c8:3f:c7:0a:dd:a6:25:be:c8:50:8c:ea:eb:
ee:aa:e0:74:eb:4b:4c:db:15:67:ab:63:2f:99:46:
42:a4:0d:c9:2a:85:a2:b5:4d:19:8f:e0:b8:fc:ae:
31:4a:e0:23:a0:75:25:75:eb:2a:0d:b7:68:bc:7b:
18:f5:7e:e5:7d:b9:d0:a5:35:8e:18:c8:df:17:23:
b2:b2:5f:d6:01:01:7e:62:9c:ec:f8:24:d4:4b:83:
9d:2d:89:2a:1c:29:86:5e:08:95:a1:3e:86:c4:2b:
6b:47:ba:f9:dc:0a:d5:fc:e2:9d:cd:59:ba:ff:51:
e1:9a:48:14:cf:fd:ee:78:f5:4f:4c:ea:e0:4f:28:
31:2e:fb:9c:01:85:d7:de:e8:c4:4a:02:c0:15:84:
3c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8B:57:99:DF:0D:8C:B8:5B:93:95:40:02:65:DE:F2:DC:7D:B0:36
X509v3 Authority Key Identifier:
keyid:22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b7:e0:b0:d9:c0:65:c5:9f:fb:d1:1c:31:8d:3c:0f:0a:82:
fc:e8:bb:33:07:0a:6d:3c:86:55:e3:61:63:d2:7f:c9:3b:66:
ab:d9:e4:1a:54:13:3f:22:90:ed:4f:0b:4e:a1:d7:30:dd:8e:
b4:ac:97:fc:6f:49:64:ab:bb:9a:b8:4d:32:0b:7d:f2:74:3f:
50:d8:17:ed:c3:d8:19:e4:32:8d:b1:5a:90:9a:e3:4b:94:cb:
7c:0c:9e:8b:a3:d6:19:ad:f1:f8:bb:cf:70:08:de:12:fa:29:
29:a4:35:85:3b:b8:e5:1f:bd:fb:e9:19:2c:60:cd:a0:21:62:
4c:a8:b3:53:7c:2c:3b:d4:08:9a:15:9c:94:ed:27:b1:06:4e:
e1:1d:cb:b2:b0:e9:c6:21:e6:c7:ff:0d:05:ee:55:a5:b3:43:
ec:65:bb:8d:4f:90:93:b3:be:1d:17:e5:e7:27:d1:23:35:45:
66:d5:a1:d0:51:00:03:15:62:d5:2d:6d:bf:a7:93:b6:96:93:
3e:c5:74:d3:78:cd:b5:0c:c2:0e:ec:ba:88:2b:e8:a3:27:de:
5b:5a:25:4a:1f:99:2f:4b:4f:4e:ab:3b:c7:2f:05:56:65:ae:
e6:d2:62:f8:53:23:c7:b5:e6:49:c9:43:76:d3:ce:9c:9e:ef:
ef:de:6e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:57:10 2026 by rpki-client