
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft
File: IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft (raw, json)
Hash identifier: KouLNB30sb95/uodJmLNUyV4KSQhz2Lld+3tB73THjE=
Subject key identifier: D2:AC:4C:90:B0:A8:E1:D2:94:A5:71:88:D5:E3:96:F8:ED:D6:9E:A2
Authority key identifier: 22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7
Certificate issuer: /CN=A91A42A4/serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7
Certificate serial: 0250
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft
Manifest number: 024B
Signing time: Mon 27 Jul 2026 03:50:23 +0000
Manifest this update: Mon 27 Jul 2026 03:50:23 +0000
Manifest next update: Mon 03 Aug 2026 03:50:23 +0000
Files and hashes: 1: IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl (hash: 7QULMO+TmrcTCsrBibOoF3QgmDkmFdkD7+Fnns8Joa8=)
2: 73E56336069E11EE9D687712C4F9AE02.roa (hash: om7Sq6Lx++CTZo3S6TXHABbbtVLGwtLuoqtkbUG/ymw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl
rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592 (0x250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A42A4, serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7
Validity
Not Before: Jul 27 03:50:23 2026 GMT
Not After : Aug 3 03:50:23 2026 GMT
Subject: CN=6a66d57f-748f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:90:87:79:d2:70:90:f7:d2:f1:36:18:b3:
a2:f7:48:bb:a2:84:99:b2:a6:ac:74:f1:08:88:85:
15:fd:49:3e:a2:32:7c:e9:f9:58:a1:ca:ff:9f:e3:
9e:2a:5e:f3:34:74:31:5d:f7:e5:57:ef:47:1a:98:
ab:17:3d:f4:91:05:be:67:56:86:7e:d9:18:0a:9c:
ac:99:31:71:78:dd:5d:90:84:58:6f:e3:c7:81:36:
35:49:f5:b6:1f:bd:63:1c:ff:a9:d6:2e:33:6f:c7:
b8:f8:52:25:7b:27:3f:a3:1b:20:69:a7:41:b1:7d:
d1:c8:5c:a8:2b:45:90:a9:bb:a0:41:ea:a7:ce:a5:
52:eb:c2:c3:29:4a:3c:a2:b5:80:6d:a9:a6:ec:0c:
a5:b7:d8:55:a3:58:9a:bb:84:db:a3:ca:04:2c:12:
d4:af:66:b2:12:49:66:05:59:d0:29:e0:5b:1c:a0:
d3:be:62:9c:db:6b:93:50:0e:47:6e:71:b1:c6:df:
f1:9a:ed:f0:bd:42:3d:30:6d:df:89:67:e5:39:74:
37:0a:53:0b:59:99:10:15:55:db:24:e6:80:55:56:
56:dd:6d:0e:20:ea:d1:fd:87:45:3b:3e:c1:f6:36:
34:c7:bb:06:d1:bf:00:51:a0:7a:31:79:34:1a:9d:
4c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AC:4C:90:B0:A8:E1:D2:94:A5:71:88:D5:E3:96:F8:ED:D6:9E:A2
X509v3 Authority Key Identifier:
keyid:22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:e3:7d:6c:de:47:18:d8:01:0d:d1:af:79:a4:00:68:66:58:
95:1e:b8:13:c0:5d:2e:31:d0:56:d5:b1:5d:91:3d:6c:e8:85:
6f:0d:f9:a5:a3:f4:c5:6c:02:57:04:83:8c:5e:62:ed:5e:e5:
d5:e9:01:5e:ad:55:00:22:fd:7d:80:cc:84:f4:96:d0:37:2a:
c8:98:c8:86:60:c1:89:45:cf:4e:56:d3:65:58:d1:ab:81:7f:
77:ad:d1:e5:3a:db:d5:78:3e:e9:8b:82:f4:4d:85:36:31:30:
e6:e5:2e:34:2c:f6:99:2a:03:07:77:db:fe:cf:fb:f4:f3:ff:
fa:1e:de:c5:4e:03:ac:b4:d4:88:87:a0:61:26:6b:f1:c4:83:
24:8c:c1:08:21:31:35:4c:46:1b:68:1f:f1:4b:ee:ab:91:90:
4b:0c:2e:da:d7:ce:36:16:e5:76:88:f3:48:6f:35:21:58:e5:
66:f0:ee:56:2e:db:a0:ca:5a:d7:75:d6:e8:d6:11:a7:02:40:
b5:d0:9c:6b:d8:25:25:1f:1e:28:e1:8d:13:64:dc:7f:a7:b0:
5f:cb:e3:c9:e5:f2:34:8f:b9:fc:05:47:30:83:ff:9a:de:d3:
d8:45:b9:c6:52:1a:93:ad:2c:e7:29:ec:79:3d:60:26:d9:f7:
5c:f7:2c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:44 2026 by rpki-client