
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
File: IcjytuAdCoLRPDUYjDyT5vUUupQ.mft (raw, json)
Hash identifier: l3mMxNmBZVo6V9RRPkAQEtdOVkFp485I613Q8irU2sE=
Subject key identifier: B4:E5:8D:24:BE:C2:C6:25:E9:95:F0:BA:38:7E:07:10:3A:8A:0B:E8
Authority key identifier: 21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94
Certificate issuer: /CN=A91A9C62/serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
Manifest number: A8
Signing time: Sat 13 Jun 2026 07:20:58 +0000
Manifest this update: Sat 13 Jun 2026 07:20:58 +0000
Manifest next update: Sat 20 Jun 2026 07:20:58 +0000
Files and hashes: 1: IcjytuAdCoLRPDUYjDyT5vUUupQ.crl (hash: Dw1bU7M7LFrQO9jfhsnXjd4qZ461v5LDDw6/3z1QLrM=)
2: 08EAF5106C2111F0B46AAC57C4F9AE02.roa (hash: yNRoRcrSs2idnKKKQBvpZT7hGrIPyAJ/BqXKminAWZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl
rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9C62, serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94
Validity
Not Before: Jun 13 07:20:58 2026 GMT
Not After : Jun 20 07:20:58 2026 GMT
Subject: CN=6a2d04da-449b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c0:00:79:d6:df:84:f1:ed:e2:63:17:7c:b7:
df:b4:c2:b2:60:38:3f:b2:2f:df:f6:4f:5d:f5:8c:
ad:b1:af:4a:70:52:eb:94:4e:f6:f3:80:68:d0:00:
74:48:2b:64:66:4c:7c:01:4a:45:ab:d1:e6:24:89:
75:01:74:70:fa:aa:7a:0a:e9:b9:ba:d1:4e:cc:c2:
78:17:f9:99:aa:66:7d:c3:47:83:47:08:8f:95:51:
55:bd:10:93:6f:e0:36:33:ac:00:3d:e7:41:0e:d2:
f6:6e:64:60:0f:83:1a:73:d5:84:ec:b9:c0:62:fe:
9d:4b:30:39:4c:8c:79:f4:9f:29:65:38:50:90:d3:
8c:02:6c:2a:1e:0b:e6:7e:5b:c7:25:c7:89:84:c7:
c4:98:62:50:fa:5d:05:25:76:0a:c8:54:95:2b:b8:
bb:ab:43:b5:a6:c4:5c:c8:46:2d:4d:ea:a2:1e:0e:
16:a7:44:0a:19:81:02:fc:70:3a:b7:cb:ff:7e:c9:
5d:ef:33:8a:30:98:bb:8e:c0:7f:05:36:a6:9d:aa:
6d:00:2e:bb:fd:e9:22:cd:17:f8:0f:3a:89:3b:58:
37:ac:01:5f:c7:0f:32:7c:38:7d:3d:6c:68:87:4b:
e7:c3:f0:82:60:30:26:6d:a0:2f:99:2c:2e:f9:ba:
ac:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E5:8D:24:BE:C2:C6:25:E9:95:F0:BA:38:7E:07:10:3A:8A:0B:E8
X509v3 Authority Key Identifier:
keyid:21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8c:92:03:af:14:01:d9:dc:06:5e:6c:6d:95:88:3e:97:66:
dc:19:70:05:39:fb:2c:b2:84:37:82:a9:a4:11:18:ef:7b:ac:
1a:92:c1:81:67:1e:69:bc:eb:48:01:fb:28:b6:83:09:0b:9a:
05:77:89:b4:dc:52:2b:fe:25:87:a6:5c:1f:74:21:5d:dd:fb:
da:89:88:61:5e:92:b4:73:07:19:17:ba:05:b7:ea:0e:7b:4e:
1c:b7:24:67:d5:f0:ec:26:c5:91:3e:f2:ec:6b:97:75:cf:d2:
e1:01:71:69:52:fb:10:ed:ff:37:0b:4f:5b:ce:f9:d7:48:f7:
d5:25:e8:c4:da:e7:c5:ef:17:90:86:f3:5e:bc:3d:20:42:2d:
de:88:51:0e:c8:70:bd:a0:9e:b1:7f:03:72:34:cb:8c:0d:c8:
cc:9d:5a:89:3c:11:14:5c:cd:b8:b7:c5:92:0f:e2:af:35:3d:
fe:bb:ab:ca:69:a0:38:e4:7a:56:7c:2b:c3:69:b2:5d:03:c9:
b4:94:bf:09:e8:79:72:1c:d6:38:46:d1:76:f9:82:e4:06:61:
53:d6:a4:28:ed:a1:2e:ba:66:ae:ce:42:32:0e:8a:0a:6e:02:
2b:ea:60:0a:f1:b9:03:5c:ca:49:01:ce:e8:21:82:59:ae:c6:
c1:98:23:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:56:38 2026 by rpki-client