
$ rpki-client -vvf rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
File: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft (raw, json)
Hash identifier: AmhEJvA9/MNC9bt93/FNfERyu8r0H6S5ivIPc0ae1D4=
Subject key identifier: 16:E6:14:C6:2E:9A:A7:26:45:94:BE:24:F8:22:56:19:80:59:EA:94
Authority key identifier: FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6
Certificate issuer: /CN=A91820AF/serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6
Certificate serial: 074E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
Manifest number: 0744
Signing time: Sun 26 Jul 2026 22:33:46 +0000
Manifest this update: Sun 26 Jul 2026 22:33:46 +0000
Manifest next update: Sun 02 Aug 2026 22:33:46 +0000
Files and hashes: 1: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl (hash: RlSFtrGI2AMRP4hXrF1GKAG8E5yCRISPiNnR5nrAQTI=)
2: D4DE5FF8A01F11EC87D72549C4F9AE02.roa (hash: aA6Dw3R9kVAHSoiUlastCf/DMZ8hslWGyzDMB+ksQeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl
rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 22:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1870 (0x74e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91820AF, serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6
Validity
Not Before: Jul 26 22:33:46 2026 GMT
Not After : Aug 2 22:33:46 2026 GMT
Subject: CN=6a668b4a-bd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:1d:20:bb:92:ba:72:f3:43:c6:31:bf:92:
45:5e:56:b3:98:90:3a:ca:db:08:58:a9:5a:25:7b:
a0:1f:93:2d:92:bd:b6:6d:55:25:16:e8:26:70:ed:
5e:b6:b3:c3:2d:cd:73:20:7b:f8:dd:a3:3b:a8:66:
1a:60:cc:24:1d:54:77:c7:1f:04:33:69:3f:5c:9c:
8b:bb:a7:1f:b0:12:77:02:e1:9d:e9:3e:36:02:fc:
0c:12:f7:18:3d:4a:63:aa:9a:ee:30:a8:f4:45:32:
bf:9e:60:d7:19:61:10:39:24:c2:4e:8f:70:9b:7b:
c6:f1:3a:b2:2c:79:70:2a:5f:05:07:bd:9a:85:5b:
50:a9:0c:48:dc:3f:bf:bf:21:22:74:14:4d:13:04:
b9:1c:15:a4:43:41:a3:be:ea:f0:91:54:04:b2:09:
06:00:62:df:a5:d6:56:9d:0a:1a:13:91:12:b3:92:
8c:84:1a:1c:64:51:20:84:bf:5f:73:b3:24:d2:17:
44:ba:2d:e3:39:ec:ce:8d:7e:dc:97:98:da:3a:3d:
4e:5e:be:ce:fa:a1:ab:cd:a1:03:7c:80:81:ca:92:
7d:70:ad:75:10:4e:0f:e9:5e:54:b5:3f:20:75:76:
1e:ab:b2:1f:db:34:35:58:81:50:e7:95:6c:71:97:
0f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E6:14:C6:2E:9A:A7:26:45:94:BE:24:F8:22:56:19:80:59:EA:94
X509v3 Authority Key Identifier:
keyid:FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:70:6f:fc:0a:8f:c0:18:04:ec:8c:03:86:f7:d7:2d:23:6c:
df:e8:e6:b0:e5:4b:af:80:fd:c8:cb:3b:aa:3e:c8:ea:df:38:
f7:6b:51:ed:a9:27:de:c3:ca:7a:e0:ea:ab:2d:e6:7a:ef:ac:
5e:cf:0f:ea:37:c3:4c:28:4b:56:87:a6:b1:c2:6f:72:8b:b6:
73:01:09:14:21:6b:e9:3a:d9:f4:c1:1d:23:a5:4a:b6:54:f5:
85:0d:27:92:03:50:34:d9:3c:b9:6d:63:af:b3:34:48:83:4f:
2c:58:ff:4b:f9:5b:2a:09:76:a4:42:76:eb:b1:56:0f:00:0d:
d2:d6:0b:66:2c:3d:67:ce:17:9a:14:2a:a2:99:b1:6e:c3:f4:
f9:fc:e7:e4:00:36:b5:c1:13:c7:40:99:ef:26:23:4f:68:3b:
89:fd:f2:0c:f6:58:f9:7b:b5:62:61:b9:5a:3b:af:60:32:6a:
ad:66:ec:a4:42:31:7f:3d:11:84:c9:e3:77:9a:6c:18:1c:eb:
a2:e4:b4:ee:5a:af:ed:d8:d5:e6:6f:98:20:a8:a5:91:e6:22:
9c:e3:51:33:67:c9:1c:1e:77:4f:37:19:97:8b:c2:8b:83:27:
19:5f:e8:e5:d1:22:71:b1:5b:9d:7a:d2:cc:30:75:3e:79:f7:
f8:95:e3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:40:13 2026 by rpki-client