
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
File: IrN0ThSJpKURK82Mvxepj_HbZnU.mft (raw, json)
Hash identifier: IIBXcWN1TMaO0hWdJ2mIaesO/1tc6RluOd3tOzqdB9E=
Subject key identifier: F2:D6:EA:5E:8F:0B:32:8A:1E:79:5F:E5:31:C2:02:2E:2E:7F:32:F2
Authority key identifier: 22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75
Certificate issuer: /CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675
Certificate serial: 03B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
Manifest number: 03AE
Signing time: Sun 05 Apr 2026 00:29:10 +0000
Manifest this update: Sun 05 Apr 2026 00:29:10 +0000
Manifest next update: Sun 12 Apr 2026 00:29:10 +0000
Files and hashes: 1: IrN0ThSJpKURK82Mvxepj_HbZnU.crl (hash: Q/O2P0FQYrHb5sfgvjatwdeR9fKv4yXKTdsDAZeVOE4=)
2: F2C91F5678BE11EFBB3FC76DC4F9AE02.roa (hash: DRPYHt96EX1APt3QQLSOdPENVuq6bm635GQlVX6wlt4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl
rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 952 (0x3b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2B54, serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675
Validity
Not Before: Apr 5 00:29:10 2026 GMT
Not After : Apr 12 00:29:10 2026 GMT
Subject: CN=69d1acd6-fac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:7e:88:03:a0:fb:8a:df:12:50:a7:d3:b1:
29:c6:7f:54:38:a9:17:2c:2a:0a:09:b3:23:30:cf:
32:f7:29:1c:21:d0:76:03:e8:4a:a2:71:c3:ab:69:
ea:81:14:06:d3:56:f5:3d:2a:a2:85:ab:85:5b:26:
1e:62:2d:91:68:bd:35:21:fe:5c:49:88:da:21:13:
5d:ce:f1:dd:7e:26:6e:ae:7f:b3:8e:59:c0:34:a4:
52:08:bd:92:36:f1:bd:d9:25:44:40:20:97:65:17:
62:88:91:db:8e:d5:db:ea:8d:6f:68:7f:64:d2:97:
cd:48:b4:60:f7:81:3a:f2:e2:83:a5:57:a1:4b:a6:
6c:4b:6c:8d:f9:cc:6c:a8:e1:3e:22:1f:d8:b3:79:
98:81:7b:a1:24:3b:c5:a6:e1:55:73:9e:59:52:2f:
79:cd:7c:77:95:70:db:a0:f6:43:42:cd:40:ae:7f:
04:a9:66:ed:7b:e0:2a:7d:c8:46:d9:6c:9b:df:79:
4c:97:b8:40:c8:52:71:0a:5f:b9:05:0d:d4:62:e8:
80:c5:e4:17:fd:23:24:5d:bd:a6:ad:8a:84:7c:02:
c3:1c:5d:37:01:ba:b2:c9:41:ea:09:67:2d:60:81:
d3:e1:bf:93:ea:90:ea:32:4a:1a:07:ca:21:53:39:
36:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D6:EA:5E:8F:0B:32:8A:1E:79:5F:E5:31:C2:02:2E:2E:7F:32:F2
X509v3 Authority Key Identifier:
keyid:22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:f2:94:45:7d:eb:58:01:3a:1f:af:78:8c:8a:6d:04:a8:f7:
3c:55:d4:46:fc:08:6c:2e:27:56:66:5a:22:57:2d:b3:b9:05:
43:cf:ae:18:ee:77:54:2c:c2:84:65:72:ef:91:2f:12:7e:25:
fa:3f:ec:fc:6f:ba:cc:a8:d0:62:2d:e4:2c:e0:22:b8:6d:67:
1d:b6:82:e7:6f:ca:27:d2:5e:b4:3a:67:e1:5f:51:fa:86:3f:
0e:06:4f:7b:ab:51:48:7a:ee:6c:1a:21:f0:04:1c:58:48:6f:
5d:18:db:b9:98:33:5b:f4:05:a9:4c:2a:a4:ce:63:5c:47:9a:
9a:69:2f:bb:53:29:16:0b:3c:7d:18:16:71:cb:a0:8f:77:a7:
f9:15:cb:6a:10:c9:a3:06:68:5d:90:b0:4a:98:60:25:01:75:
a0:d7:80:c1:b8:66:c5:49:b6:fd:2f:f6:7e:f8:0e:72:ad:00:
16:bc:62:6d:6d:7a:de:a6:d9:04:cb:cd:7b:aa:71:af:27:fd:
b2:d9:73:24:50:2b:ad:31:37:68:2a:1c:f7:24:4d:aa:14:b7:
ac:1a:83:56:55:7e:ca:9c:0b:b7:40:20:fe:a5:27:9c:6e:eb:
99:24:4e:7b:d1:7e:db:b6:e7:01:a1:03:6d:d4:75:5b:61:80:
80:31:ac:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:56:16 2026 by rpki-client