
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
File: IcjytuAdCoLRPDUYjDyT5vUUupQ.mft (raw, json)
Hash identifier: sJiwYHSjStsTGCEXNJ2IVMLjONQJpJarUuVLAIZZ/7Y=
Subject key identifier: 52:34:25:8D:7A:1A:DB:D2:F8:99:10:14:8A:31:79:48:26:F7:23:74
Authority key identifier: 21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94
Certificate issuer: /CN=A91A9C62/serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94
Certificate serial: 8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
Manifest number: 8A
Signing time: Fri 17 Apr 2026 07:19:05 +0000
Manifest this update: Fri 17 Apr 2026 07:19:05 +0000
Manifest next update: Fri 24 Apr 2026 07:19:05 +0000
Files and hashes: 1: IcjytuAdCoLRPDUYjDyT5vUUupQ.crl (hash: uJFA9afi+dHx7Z3MB9ZUZxhRiphvtEDTgulTK8r2+qc=)
2: 08EAF5106C2111F0B46AAC57C4F9AE02.roa (hash: Z2FtvRw0zuR9Tn/KRZwJJwbzmRuiW6tEOkvTiYf9ZYY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl
rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9C62, serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94
Validity
Not Before: Apr 17 07:19:05 2026 GMT
Not After : Apr 24 07:19:05 2026 GMT
Subject: CN=69e1dee9-156e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c1:ac:a0:84:8d:04:5d:dc:8a:04:25:41:84:
26:c3:49:e3:6f:b8:6f:ac:2c:16:ce:54:11:b9:77:
6c:da:7f:15:ab:66:98:91:30:42:a0:b5:83:75:c9:
b2:8c:29:72:e5:19:af:09:1f:66:d1:e9:df:4c:e6:
1b:2b:7e:6d:23:80:7c:ad:13:29:5e:79:e3:6c:13:
d8:33:4c:7e:fe:b6:6d:c2:52:06:30:0c:08:d5:f9:
16:ea:38:60:72:c1:ea:f8:1e:ef:bf:1b:eb:62:9a:
6e:ef:9c:30:0c:90:93:9b:98:c4:e4:3e:fb:ce:95:
10:b1:15:9b:9f:68:21:13:bf:7c:3c:6b:4f:8f:a6:
0f:d9:ff:95:c0:e2:5b:2a:0f:38:25:5d:fe:36:14:
a5:e1:18:c5:eb:bd:0e:ad:48:e0:ce:ec:44:d5:bf:
f2:4a:42:b5:09:f3:ac:7e:76:71:48:a4:8b:14:1f:
c6:1b:c7:37:66:d4:68:8c:84:54:7c:59:a1:cb:c0:
c4:6f:84:fe:ce:8e:93:2d:dd:69:b2:94:4f:25:f4:
31:1e:3a:55:53:f3:22:d1:f0:c2:83:59:4b:7d:5f:
d7:33:7f:b5:74:95:6b:a6:6d:9c:bc:11:15:7e:43:
11:a0:fa:0d:4f:0d:94:86:66:77:fd:f2:c4:dd:b9:
23:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:34:25:8D:7A:1A:DB:D2:F8:99:10:14:8A:31:79:48:26:F7:23:74
X509v3 Authority Key Identifier:
keyid:21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:7c:c9:4e:7f:35:2e:58:6e:b5:d3:c4:7f:ec:95:97:37:6e:
84:b8:12:fc:9f:c6:05:9e:1a:8f:e1:d3:ba:a9:6d:d0:41:14:
a8:fd:31:6d:df:b2:f0:eb:d0:f4:dd:09:cb:dd:af:26:7f:15:
76:99:e5:37:6e:b9:9e:33:f5:6e:b5:a2:db:a2:6a:ef:6d:70:
3b:ed:5e:5d:6a:3f:9f:4a:25:e9:97:48:35:38:2b:1d:6b:31:
f5:f6:34:b6:09:c6:57:3a:c5:87:95:45:e9:cd:05:c4:03:81:
7a:bf:58:29:ec:a7:4e:f0:81:a0:ab:c1:49:16:68:8f:74:a0:
64:10:cd:e4:d5:eb:ac:6b:ca:c6:79:62:2d:bd:fc:ba:e4:3a:
30:7a:d9:7a:da:97:d6:80:62:f3:52:d8:4f:6c:20:b4:6b:67:
56:c2:0e:4e:75:0f:15:9c:1c:0c:f0:bd:08:4c:2a:c9:9c:22:
e0:bc:8c:1b:e4:a9:cc:3a:9d:3a:2f:72:f4:11:3b:5c:e8:60:
af:b9:1a:98:16:6c:93:1f:8a:11:8a:12:7e:0f:7f:6b:8c:ad:
62:d3:49:1a:50:ec:e4:a9:c7:3b:34:91:11:7f:51:8c:95:a8:
28:4e:24:09:42:5f:79:8a:d6:a2:dc:bf:1a:f5:73:da:ec:e0:
b6:f3:49:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:44:04 2026 by rpki-client