
$ rpki-client -vvf rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
File: I9INognIlcMA7mtlm2sYKZJfvU8.mft (raw, json)
Hash identifier: XSObAyltsOTNVVXZn38nnWS9hFcGa6F2+f94I90dj70=
Subject key identifier: 21:5E:9F:18:AF:CA:F3:DB:73:4D:5A:E1:45:07:24:09:72:4D:B8:DD
Authority key identifier: 23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F
Certificate issuer: /CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
Certificate serial: 0D02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
Manifest number: 0CE9
Signing time: Sun 26 Jul 2026 18:47:30 +0000
Manifest this update: Sun 26 Jul 2026 18:47:30 +0000
Manifest next update: Sun 02 Aug 2026 18:47:30 +0000
Files and hashes: 1: I9INognIlcMA7mtlm2sYKZJfvU8.crl (hash: NouqgyHUQ03ZhI5YGhQBvIr85yCpSu1/OYoQCRnA5Jc=)
2: 7B96F1340C6011F088E6FD2FC4F9AE02.roa (hash: mKkuVSeTZtVuG7BfqaqUZzcHeF9XMKmK1adCEnjlrRM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl
rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 18:47:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3330 (0xd02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91829E3, serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
Validity
Not Before: Jul 26 18:47:30 2026 GMT
Not After : Aug 2 18:47:30 2026 GMT
Subject: CN=6a665642-c410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:63:20:ef:8a:d7:1e:46:03:df:0d:cd:c1:
8a:c1:eb:d6:05:b9:ed:e2:60:6e:51:f7:36:38:8e:
7e:68:bf:b6:16:36:24:28:85:52:d7:1e:30:ba:38:
63:5f:9f:af:1a:75:00:12:36:bc:ca:43:21:17:f7:
73:8e:e0:83:f8:5a:f2:56:2e:1e:3d:bf:3d:2c:94:
fd:45:f8:7e:36:ca:9f:79:90:fa:75:1b:af:01:4e:
e2:0c:0b:22:f5:63:8e:42:d9:21:3d:c6:4f:56:18:
bf:75:57:1b:38:e8:81:b2:70:a7:59:c5:d8:55:a0:
3d:3f:ab:15:01:26:ea:ee:8a:50:93:43:d8:68:17:
a5:f5:10:bb:fe:64:ab:c1:dd:f2:a5:4d:46:92:f7:
d1:bd:0e:94:0d:a8:5c:ec:91:d7:37:94:31:4f:d8:
22:9f:f7:4b:96:c4:af:e1:aa:e0:46:b7:5a:14:a1:
d8:fc:5a:7a:40:87:13:da:3a:d9:62:c4:69:89:a6:
f8:3b:8e:22:87:2d:a4:be:f0:62:7c:30:dd:cd:08:
bf:b9:57:6a:2c:54:88:22:8c:08:22:79:da:e3:ad:
af:97:52:0e:03:9a:07:be:4e:ea:f3:33:2c:50:d8:
48:ba:47:71:d7:13:ed:16:e9:32:46:e9:cf:32:d4:
f0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5E:9F:18:AF:CA:F3:DB:73:4D:5A:E1:45:07:24:09:72:4D:B8:DD
X509v3 Authority Key Identifier:
keyid:23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:4f:fd:a2:9d:13:e6:17:7f:8d:0a:4a:f2:ac:01:27:b9:43:
2e:32:5b:f0:44:fe:7b:6c:53:e0:d8:cf:66:86:df:0d:a3:df:
91:cf:28:39:a7:eb:3e:14:4b:61:08:2a:d1:23:8c:42:e6:e2:
4e:b1:fa:8a:10:9f:19:5a:e2:d9:c1:51:62:f5:89:d8:f7:9f:
e7:f1:fe:35:80:13:18:2c:a0:9a:ed:d0:72:c2:6e:d8:7a:08:
32:78:ea:f4:d1:90:d4:02:02:64:b5:fd:8e:69:12:d0:1a:0e:
7f:3a:c1:cf:87:d9:71:dc:43:b9:f7:22:6f:e6:ae:ef:6c:95:
9e:de:67:07:77:54:ac:b3:b1:b7:d6:56:81:60:f1:ea:2d:93:
70:bb:b0:54:23:8d:88:0b:a6:d7:77:b1:1e:2d:2b:af:23:61:
c3:d1:d0:10:b2:8b:ce:30:66:a8:99:29:1f:97:df:36:61:76:
fa:e8:61:4b:a5:63:3a:5f:be:2c:f6:11:1e:65:b2:92:a9:2b:
00:98:31:49:be:a9:b7:e5:f7:d8:64:cf:34:6e:be:5d:3c:cf:
33:1a:76:76:ba:12:9c:f6:9b:a5:39:3e:e8:00:65:85:f6:93:
84:90:e2:b0:a7:b6:39:22:c2:cc:e7:38:fe:a2:2d:58:14:db:
81:72:28:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:37:57 2026 by rpki-client