
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft
File: IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft (raw, json)
Hash identifier: xf5sf5bLjGgAEioXEkHwPMyUBtCYdKBYzCVc/5slz/4=
Subject key identifier: CC:72:C0:6B:84:50:F1:C9:6C:A7:67:B4:62:6A:C2:A8:FA:01:9A:F0
Authority key identifier: 21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95
Certificate issuer: /CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195
Certificate serial: 0A68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft
Manifest number: 0A55
Signing time: Tue 28 Jul 2026 20:00:55 +0000
Manifest this update: Tue 28 Jul 2026 20:00:55 +0000
Manifest next update: Tue 04 Aug 2026 20:00:55 +0000
Files and hashes: 1: IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl (hash: 8UmxxJ7LEMXlGEXgsJu71b9iMaCP6XzJmzpvx8913yg=)
2: 371ADD3E9C9811EDA6AEF053C4F9AE02.roa (hash: 8KJdeJ1nwNs4LjppGEg0usy43brI/WoaqsTc6Du3z9Q=)
3: FE6C73289C9A11ED8123147BC4F9AE02.roa (hash: yPrHXW56u10NuXEptMs9yPazlowJhKqcgzRm+PPp5R0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl
rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2664 (0xa68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A91D2, serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195
Validity
Not Before: Jul 28 20:00:55 2026 GMT
Not After : Aug 4 20:00:55 2026 GMT
Subject: CN=6a690a77-f0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:35:47:19:d1:bb:7d:19:62:df:c7:3b:d6:b2:
97:d5:2c:6d:ad:73:5a:d3:62:98:b6:d4:40:46:4d:
17:fe:ac:54:9a:15:f9:78:16:63:77:6f:22:b9:a0:
f2:7a:26:25:ea:7e:ce:e1:03:17:80:f0:12:06:64:
1b:dd:0d:45:2a:b5:6e:61:f6:d5:6b:7a:22:01:f9:
36:f3:ee:02:b0:27:0c:4a:b1:a4:98:8e:d1:db:4e:
87:5e:f1:3d:02:96:99:5b:e2:65:cc:8a:96:da:b7:
ff:a2:b3:29:6f:55:05:36:fd:fb:94:3e:25:ed:63:
e0:3e:31:2e:3e:a6:92:3a:55:1f:5b:39:7c:3d:f4:
ab:51:ed:11:fa:74:fb:bf:ab:fb:3d:2f:0c:98:aa:
1b:07:fc:0a:47:56:03:ea:7b:92:6e:ed:14:77:f5:
1c:cd:71:09:d1:46:7c:df:c7:92:e3:f0:4c:df:e6:
fe:ee:8d:b4:36:20:8f:19:52:3a:3a:84:b9:b9:1b:
9e:71:c0:13:11:28:45:c4:07:d6:88:c4:7b:e8:fc:
04:61:76:91:7f:bb:8c:82:c0:f6:87:1e:9a:b1:5b:
34:f7:d4:e5:96:f6:fc:a6:e6:b2:54:fa:7a:67:a9:
52:c1:13:82:e1:9d:44:4e:84:cb:29:5e:dd:04:af:
e6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:72:C0:6B:84:50:F1:C9:6C:A7:67:B4:62:6A:C2:A8:FA:01:9A:F0
X509v3 Authority Key Identifier:
keyid:21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:2c:e6:cb:b3:c7:d5:75:0c:48:99:7c:6e:8d:44:b6:43:af:
23:88:fb:20:be:d2:86:5d:84:ad:23:a8:a0:52:83:ad:09:0b:
e0:c4:cd:38:ad:72:ea:13:98:0a:94:bb:87:cb:e7:98:d5:be:
15:af:2c:8f:49:8a:e7:d3:22:88:11:82:ce:62:db:37:7d:e6:
5b:0b:b4:f9:6c:46:a4:13:06:01:06:50:ce:86:c6:c9:ed:f5:
4d:e9:43:90:2b:8d:29:52:f9:88:09:74:f1:4a:59:3a:13:41:
d6:7c:2a:80:8f:db:86:21:ab:9a:ef:2f:d7:b2:c6:b8:f9:54:
26:2c:69:a5:a9:65:3c:dc:ed:5d:f7:99:d9:b4:23:0c:31:e2:
51:63:bc:4d:2a:96:2c:8b:0a:f6:97:2f:6f:5c:8d:d5:74:b7:
20:e0:54:3e:98:4a:65:ed:c2:89:3b:24:2b:11:b7:96:85:ea:
b4:af:9b:6f:cc:f1:f7:a0:4e:eb:a8:c1:1d:80:37:43:19:6a:
c1:bb:39:56:34:56:53:1c:b1:47:9c:44:bd:66:4c:12:b5:a8:
2e:3a:0e:4d:42:9b:16:2f:47:1a:a6:c6:9d:c2:9c:1b:1d:d7:
75:74:f5:f9:e1:16:72:14:6c:54:ae:5d:12:b5:e5:8a:65:73:
bd:9e:e9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:42:29 2026 by rpki-client