
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
File: IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft (raw, json)
Hash identifier: GDLsMp4DjkZu85sSWDZC2B7EO7Scv39NnxrBeSKwsCA=
Subject key identifier: 34:B7:F1:87:93:57:4C:D5:F3:1B:D5:95:73:8C:44:BE:61:F6:04:21
Authority key identifier: 21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6
Certificate issuer: /CN=A91159B7/serialNumber=21F20227559DB1F863849AB643233C3E935776A6
Certificate serial: 0E08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
Manifest number: 0DF8
Signing time: Sat 26 Sep 2026 17:55:01 +0000
Manifest this update: Sat 26 Sep 2026 17:55:00 +0000
Manifest next update: Sat 03 Oct 2026 17:55:00 +0000
Files and hashes: 1: IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl (hash: +6/BUhHTDcmVjS61m9rSgVgHam438EX2duC+7Nfxgck=)
2: 7FC0801ED4EF11EC84AABC0CC4F9AE02.roa (hash: rkIEofZev6bDtd5nBARLbA+jCza/n/hXbR4AIclPFH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl
rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 17:54:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3592 (0xe08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91159B7, serialNumber=21F20227559DB1F863849AB643233C3E935776A6
Validity
Not Before: Sep 26 17:55:00 2026 GMT
Not After : Oct 3 17:55:00 2026 GMT
Subject: CN=6ab806f5-bf97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a1:46:37:53:0c:04:10:84:1d:9b:15:2f:97:
fb:57:44:98:e4:9c:b9:84:db:6b:44:a9:42:ad:88:
47:6c:35:9c:15:a9:9c:cd:32:e0:c9:25:ec:c2:17:
a4:c3:50:c8:59:15:cf:28:4e:34:97:78:6f:19:50:
d7:b9:1e:e6:8a:1d:11:79:68:18:a7:e0:92:4d:60:
52:b6:0f:39:37:d2:06:72:0f:c0:56:29:72:49:0b:
ed:8d:26:6b:cd:15:65:f2:79:48:c7:0d:3b:70:20:
eb:ba:fb:ef:5d:ab:40:f2:25:9a:19:d2:0c:5d:54:
ed:6b:d7:d9:7b:ea:59:06:f4:59:7e:53:7d:b1:71:
67:23:f4:06:59:d4:b1:9b:e4:c2:35:55:e5:95:b8:
44:ee:3a:86:d1:da:62:20:b3:26:e3:33:cf:1e:41:
b8:01:a6:16:56:ed:f7:42:f6:39:82:bc:33:be:ce:
7e:63:59:43:74:3f:9d:48:03:a1:a9:97:e4:39:29:
97:60:4c:38:30:15:f5:54:6c:71:af:f8:d5:b6:40:
52:8e:16:02:1f:ae:aa:5c:ca:53:79:e1:d4:28:8e:
bf:5a:c1:c4:25:d0:5f:28:d0:10:6b:70:00:08:42:
97:a3:55:70:57:c7:bd:94:1a:e2:7f:ed:d8:3b:f3:
bb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B7:F1:87:93:57:4C:D5:F3:1B:D5:95:73:8C:44:BE:61:F6:04:21
X509v3 Authority Key Identifier:
keyid:21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:66:0c:9f:99:af:cf:42:a9:39:3e:93:f0:34:76:4c:11:83:
c6:9f:48:0f:0f:b4:ef:73:5e:e4:b1:cc:62:07:30:8b:ed:e1:
5f:45:17:d3:6c:b4:70:98:96:cd:b8:53:9e:f1:5f:54:e3:c7:
01:5e:04:be:dc:35:c9:80:10:23:c4:87:75:fc:8c:eb:1c:4c:
cf:8f:9a:39:54:d8:2e:6a:7f:d7:d8:37:bf:04:a5:85:b4:18:
41:4b:13:57:45:bd:3f:9e:cb:4a:96:70:0f:d0:92:25:cc:e6:
aa:0b:96:83:91:41:c2:b3:c1:f4:c4:ad:f3:84:ba:0d:89:cc:
1e:8d:fa:3c:90:c6:a0:ff:2f:08:ea:40:67:c8:3a:a6:88:03:
04:86:95:ec:67:7f:41:4a:0c:35:46:95:05:45:c4:cb:6c:c8:
0d:49:1b:6b:2e:5d:15:80:57:b1:08:a5:de:df:c7:a2:55:f4:
5b:0f:e6:a6:0f:a0:ee:ae:a7:0b:94:78:29:bd:7b:09:27:b1:
7a:09:72:d4:dc:b4:dc:e0:fd:0e:d1:5d:24:85:27:9a:0c:6f:
c9:71:32:0b:22:9b:ee:81:2a:72:31:ee:80:bb:75:87:b2:92:
2e:66:73:f9:fa:aa:ae:8e:8e:6d:99:75:83:cc:9b:e4:d3:92:
30:15:c8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:45:33 2026 by rpki-client