
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft
File: IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft (raw, json)
Hash identifier: MIvX0YkBlrrjmYU/ztN2V8opqM2zvMOHhETESyBi2ow=
Subject key identifier: EF:E6:5E:59:FC:87:19:66:F5:40:5C:2D:53:F3:FD:3C:91:3D:3A:3E
Authority key identifier: 21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95
Certificate issuer: /CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195
Certificate serial: 0A30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft
Manifest number: 0A1F
Signing time: Thu 16 Apr 2026 19:42:29 +0000
Manifest this update: Thu 16 Apr 2026 19:42:28 +0000
Manifest next update: Thu 23 Apr 2026 19:42:28 +0000
Files and hashes: 1: IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl (hash: UYG6es/VbPfK3HhcpdyLzOl3u/2il4Tcp1MqgRFAqfA=)
2: FE6C73289C9A11ED8123147BC4F9AE02.roa (hash: 2OCGb2GsDSN9eWUkEJm9OxDpHisk081Il0yQc3djlTw=)
3: 371ADD3E9C9811EDA6AEF053C4F9AE02.roa (hash: ZDaQsYTQonQRSy58mGR7Kcfg4nWAO+ekMAlPoJ+tMyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl
rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:42:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2608 (0xa30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A91D2, serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195
Validity
Not Before: Apr 16 19:42:28 2026 GMT
Not After : Apr 23 19:42:28 2026 GMT
Subject: CN=69e13ba5-dd18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:11:e9:50:d3:60:4e:f4:57:21:7e:8a:fa:e1:
3b:cb:32:b5:1e:c4:bb:01:b8:53:b8:17:59:ba:5f:
f5:35:e5:0d:2b:19:2c:33:84:de:95:8c:ec:80:08:
74:97:17:12:be:3f:41:22:31:af:37:81:10:35:5f:
44:ce:f9:12:eb:45:4b:c9:af:64:a1:e9:fd:09:60:
86:44:c7:ee:d0:e9:ea:7d:97:70:83:67:f5:d3:a4:
6d:44:11:ff:31:d7:c9:d0:06:88:7d:3a:df:85:00:
96:bc:cf:5c:ab:98:4b:a8:2b:22:7b:ba:57:28:93:
4e:bd:07:fa:bd:1c:1d:3b:6e:39:60:04:4a:8d:38:
49:95:45:7e:c1:52:ce:f8:50:a3:79:32:c4:03:51:
43:b1:7f:29:41:9f:e5:e6:38:fc:6d:67:55:d7:c3:
0a:d1:20:a9:76:a2:b4:44:70:3c:d9:cf:13:ca:78:
af:12:70:d0:ea:87:40:85:a8:f7:47:2d:c0:b1:de:
1a:6f:53:0e:46:26:61:6e:7d:27:98:73:c7:7f:dc:
7d:67:aa:dd:56:bc:51:4e:52:cc:c3:60:05:24:d3:
37:a8:b2:61:64:bc:97:86:3a:a4:36:bb:75:1c:70:
d8:57:99:9d:ff:74:7b:03:5c:b0:ec:da:28:eb:b8:
ed:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E6:5E:59:FC:87:19:66:F5:40:5C:2D:53:F3:FD:3C:91:3D:3A:3E
X509v3 Authority Key Identifier:
keyid:21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:bf:3e:3d:2c:f6:1b:60:29:1a:24:cf:aa:6d:eb:4a:6b:80:
dc:5f:1a:f6:13:46:29:dd:09:18:f5:63:66:1b:fe:2c:22:7c:
9b:32:6f:49:d4:80:ac:cf:fa:3e:6b:d5:89:0a:26:b4:7c:9a:
d5:26:f5:a2:c9:84:73:80:db:39:34:d0:e1:d4:94:84:2b:e8:
51:bd:0f:8c:36:67:cc:ce:1c:11:2b:23:6e:aa:b7:7b:b8:35:
9e:25:db:ee:93:ac:e8:95:c3:7e:1a:37:32:2b:46:e5:53:ed:
ad:be:9b:97:ab:99:3b:5c:d1:50:43:4c:b1:31:99:a9:8e:d7:
03:f9:47:1f:ca:d2:f6:c4:2c:b6:69:32:a1:17:95:23:11:39:
e0:ea:e9:ba:67:b4:14:98:4e:80:0f:be:5a:68:5d:87:82:cf:
4a:2e:88:2b:1a:c0:01:23:91:5a:5b:6e:80:25:ab:3f:e9:a3:
e3:e4:23:28:f1:03:f7:e3:11:f2:93:2a:ac:7e:c3:dc:66:d9:
83:f6:09:86:f5:4f:f7:74:2c:e4:a3:ca:f1:21:2a:b9:b6:04:
56:6f:73:d0:5f:43:c3:49:a7:87:d8:11:a6:1a:e6:7c:55:b0:
a6:70:28:3e:08:da:0c:09:d6:13:9c:e5:af:c2:76:a9:11:33:
6d:e2:87:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:15 2026 by rpki-client