
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft
File: iruZJsMSoUFJxSMLpV-oz1uJquE.mft (raw, json)
Hash identifier: WzlfYiTY+RLbIs/mpHnsQG3Gl1PwgvC450EraGo2noI=
Subject key identifier: 4E:D6:C9:4E:65:53:7A:09:94:AD:46:D6:A9:4E:44:D0:C8:98:1D:66
Authority key identifier: 8A:BB:99:26:C3:12:A1:41:49:C5:23:0B:A5:5F:A8:CF:5B:89:AA:E1
Certificate issuer: /CN=A91E8C52/serialNumber=8ABB9926C312A14149C5230BA55FA8CF5B89AAE1
Certificate serial: 06E4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft
Manifest number: 06DD
Signing time: Sat 04 Apr 2026 21:59:01 +0000
Manifest this update: Sat 04 Apr 2026 21:59:00 +0000
Manifest next update: Sat 11 Apr 2026 21:59:00 +0000
Files and hashes: 1: iruZJsMSoUFJxSMLpV-oz1uJquE.crl (hash: MpTJyeQV3YcpLzJK9B2lBxCyoUamk6oyJLZHX8hxfl4=)
2: 09C9D20691BC11EB8C38801CC4F9AE02.roa (hash: VX88OE/wWbDicqUK9Ecwlc7eXNXa2V1ARfcCGVaZ16E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.crl
rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1764 (0x6e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C52, serialNumber=8ABB9926C312A14149C5230BA55FA8CF5B89AAE1
Validity
Not Before: Apr 4 21:59:00 2026 GMT
Not After : Apr 11 21:59:00 2026 GMT
Subject: CN=69d189a5-2176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:54:4c:db:9c:18:dd:80:d3:94:8d:26:50:a5:
10:ac:12:c0:fd:19:01:17:86:6c:5a:e2:61:91:cf:
59:c7:e9:5f:2c:79:3a:8c:a3:77:0b:54:6d:6c:50:
59:ce:5b:53:4a:9a:39:f4:e1:d8:a0:71:3e:de:ac:
50:af:6c:fb:cb:25:c9:bf:09:e6:8a:e0:25:62:ca:
7e:7f:40:66:4c:fc:84:90:c4:31:da:1c:44:85:42:
6b:b7:c3:b7:43:63:69:5e:64:5a:f7:54:6f:c8:cd:
1a:a7:5e:86:21:6f:39:82:e1:13:47:7a:0e:18:4f:
84:5e:0f:9e:07:49:fc:89:14:e7:ac:78:08:4c:90:
76:01:fc:50:54:dd:eb:ce:be:38:48:26:68:6a:dd:
67:ef:2a:ce:df:2e:ab:14:a6:39:4e:3f:ff:6b:2b:
7c:6b:c3:bb:6d:af:52:a8:51:84:cf:79:0e:28:32:
c5:c3:86:e5:14:89:d0:47:12:94:b5:4b:54:e6:cf:
a5:de:6b:f6:95:8a:9a:93:71:91:c9:5d:de:1c:ec:
e8:36:72:c3:09:da:cc:0d:04:d3:70:ae:62:b6:4f:
e5:bc:5a:51:7f:03:9a:b9:02:46:66:d4:16:d9:4c:
29:c6:7b:22:71:67:2c:c0:64:25:46:3f:41:0c:71:
88:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D6:C9:4E:65:53:7A:09:94:AD:46:D6:A9:4E:44:D0:C8:98:1D:66
X509v3 Authority Key Identifier:
keyid:8A:BB:99:26:C3:12:A1:41:49:C5:23:0B:A5:5F:A8:CF:5B:89:AA:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d3:12:ea:d7:41:92:51:fe:2e:4f:d0:ba:83:9f:c7:9e:7e:
05:6c:bf:a1:7c:b7:9a:31:38:0d:ec:12:52:b2:74:35:c5:cd:
f3:e2:26:ae:d1:fc:0c:d6:f6:cf:a9:d7:6d:e5:2c:78:de:41:
b7:c8:98:13:0a:51:4b:3b:9d:9a:a9:e7:e3:fe:76:f3:b3:ff:
9d:7b:46:26:73:3e:d3:eb:68:45:8c:c5:ad:c6:58:6b:bc:30:
20:bc:99:ff:0b:c3:b6:7f:00:7a:d9:fd:09:10:75:20:53:19:
65:12:65:10:4e:11:96:ae:87:94:c7:d0:26:ff:bb:dc:d2:52:
4a:6e:e9:ad:a9:2a:b3:9b:be:3d:04:4a:64:77:b3:63:22:cf:
24:9e:07:a9:5c:67:c3:6f:fd:93:06:91:b3:c5:00:3e:b5:33:
4a:53:45:e8:86:b0:0b:1d:c4:11:72:3c:61:10:86:ba:86:02:
cd:4e:29:75:18:fc:6a:9b:53:1c:eb:b2:2c:bc:6f:18:bb:2b:
33:83:bd:84:73:5c:fc:31:9f:cb:23:8a:58:5e:96:fc:01:6a:
f0:6c:9b:da:9d:ab:e4:89:81:6b:bf:6e:aa:1e:9d:e6:cd:2a:
be:6f:fc:05:a7:33:55:8f:9d:90:d6:54:2e:ed:1a:dc:e5:f3:
a4:19:71:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:39:33 2026 by rpki-client