
$ rpki-client -vvf rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft
File: iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft (raw, json)
Hash identifier: oIPy8tCL3Z2BV4cm5o23zOGfN5Eewhh0Ne7WoEW3DyY=
Subject key identifier: 3F:48:32:7B:97:B0:14:CC:46:19:22:E2:E2:96:CB:E2:A5:23:9E:6B
Authority key identifier: 88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A
Certificate issuer: /CN=A91376FB/serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A
Certificate serial: 0492
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft
Manifest number: 0485
Signing time: Thu 16 Apr 2026 23:57:51 +0000
Manifest this update: Thu 16 Apr 2026 23:57:51 +0000
Manifest next update: Thu 23 Apr 2026 23:57:51 +0000
Files and hashes: 1: iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl (hash: Qg2NaG5RBDaOaj+EBFSr1EyPDZj4EAVL3KuDMl28RrU=)
2: 25C61AECB7ED11ED9CF6A63EC4F9AE02.roa (hash: xofse8Wy66MIstuqq88GIwR6LgO/Bu5HVqHK6p5t5Hk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl
rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1170 (0x492)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91376FB, serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A
Validity
Not Before: Apr 16 23:57:51 2026 GMT
Not After : Apr 23 23:57:51 2026 GMT
Subject: CN=69e1777f-6153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2a:ff:a1:3f:8e:1b:c7:9e:e5:19:f2:44:c6:
47:7d:8e:43:71:b9:04:c2:09:89:98:49:df:a7:bf:
e5:64:30:ec:0d:13:66:2e:2d:97:c5:95:28:16:e6:
9d:90:05:c6:27:0e:33:9d:56:51:3d:60:bd:5d:88:
b8:c8:d2:9c:8e:c2:da:2f:da:c4:d9:ed:6d:d0:2c:
b5:8b:9a:b5:43:55:d7:3f:c0:12:92:ad:aa:c2:de:
4b:fa:be:ae:3b:47:b3:d7:de:c0:b8:f9:9d:bb:7f:
88:7e:ec:a1:36:76:47:83:e7:42:29:7e:bd:9c:f0:
e0:33:21:8e:67:42:0b:64:30:b2:a7:c2:33:6a:3c:
3c:18:e5:59:3f:d6:3a:4a:85:f4:6e:94:90:55:64:
41:75:4c:37:e8:52:ed:e5:7b:aa:01:cb:00:13:c2:
f7:c9:0c:a0:fb:14:65:4c:13:13:ea:ac:31:f4:e0:
76:35:12:80:0a:40:58:52:e0:2d:9a:bb:14:61:c0:
7c:95:62:e4:59:14:a8:06:b8:31:24:64:9b:1e:50:
eb:3c:02:3d:51:83:4f:0b:59:c0:0a:99:8a:73:df:
a6:d8:d5:5d:ea:c0:2b:57:a7:bb:f1:a2:06:e0:c4:
c9:93:a9:e9:eb:77:0f:41:18:e4:e0:31:ff:d3:9d:
8f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:48:32:7B:97:B0:14:CC:46:19:22:E2:E2:96:CB:E2:A5:23:9E:6B
X509v3 Authority Key Identifier:
keyid:88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:e7:4b:79:38:f5:c7:38:d6:9b:ef:84:54:15:cd:c5:bb:e4:
7c:33:fe:6f:04:42:a2:20:3a:1d:ca:2d:0c:c5:c6:e3:89:9f:
8b:08:1d:ed:a1:97:4f:e6:88:19:73:6a:4a:88:27:53:8f:f6:
c6:04:3f:d4:c4:54:ac:60:00:74:67:4b:4e:74:df:73:d7:c5:
2f:f4:99:2a:02:8a:52:86:16:34:07:34:5a:33:ae:c3:7c:23:
7a:94:32:8a:2b:c9:ee:ed:c5:5a:6c:e9:4e:17:d1:48:22:04:
7e:81:19:97:bb:7d:09:8d:50:7a:e6:15:69:30:e1:73:93:00:
db:fb:9a:40:59:a0:95:50:2e:5c:0e:0a:d3:8b:a6:f7:de:44:
1c:3c:09:5b:af:4e:77:ba:76:28:c1:99:ba:3c:3b:78:34:ff:
2f:b8:c6:80:1e:65:23:2e:0c:22:46:b0:b3:de:e2:0f:9a:e1:
bc:a5:b2:fa:26:3c:cf:db:ac:dc:ab:0c:21:9e:a2:63:23:4f:
8c:d7:31:e4:02:0c:b0:68:f1:ac:d1:dd:01:3e:bc:32:cf:c4:
44:fd:a3:f5:b0:41:06:dd:8d:ea:2f:43:81:45:38:93:85:5c:
e9:4a:5f:83:27:3b:8b:fa:9e:7e:38:3c:2c:38:22:d2:1e:e1:
34:4f:19:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:18:24 2026 by rpki-client