
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json)
Hash identifier: PVTu57ZwrHuc1Wk4AOyTxxkEUeImW7G7TMxFEFjx4qI=
Subject key identifier: E4:FF:5C:90:5B:4B:C6:61:BE:A8:13:3F:25:E9:CC:6E:FF:AC:BA:F6
Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63
Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63
Certificate serial: 02AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
Manifest number: 0297
Signing time: Sat 13 Jun 2026 01:42:39 +0000
Manifest this update: Sat 13 Jun 2026 01:42:39 +0000
Manifest next update: Sat 20 Jun 2026 01:42:38 +0000
Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: i6g0/OWf2sNaq3DVa+Jl9gJWcAGK6oNs8xkisE3rd94=)
2: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: FAsv4u0lMC/I3QYc2qVpW+Zdc9wxgYJL7HZ2HtRyWFE=)
3: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: Pu3HSh7UAJem3mpQag6OD//H7HzHFiNKKj+xFn4gXBM=)
4: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: A7VcLCIr/FcjJaPxb9fLesSTHqaiYIJD5WUKTmg4W9Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl
rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:42:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 683 (0x2ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63
Validity
Not Before: Jun 13 01:42:39 2026 GMT
Not After : Jun 20 01:42:38 2026 GMT
Subject: CN=6a2cb58f-ea5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:2d:a4:e0:d1:50:3c:01:08:1e:94:91:8a:
6e:ce:1e:d5:c2:45:ea:58:1c:1c:cc:a7:fe:29:4f:
52:81:a4:1e:bb:28:f7:36:8d:9d:10:bd:55:85:09:
01:08:42:9b:b1:45:3b:32:37:36:00:dc:cc:11:33:
5f:08:40:2e:2c:79:ac:39:fa:c8:c4:2d:21:d4:08:
77:3b:99:e2:e5:df:ea:ff:03:29:76:2c:48:d5:bd:
6f:ff:8e:00:8b:60:64:40:2f:a7:3b:1e:7b:58:16:
cb:6a:3c:c8:48:d9:99:a1:f6:6a:e7:14:a7:53:33:
e6:b0:72:4c:0f:0d:b2:6e:99:e3:70:33:d4:f0:c2:
b0:18:49:6f:f8:0e:f2:80:bb:5b:8a:61:c1:22:8f:
08:f9:9e:f2:f9:0d:cb:43:af:2d:c5:38:8f:a5:6b:
da:b3:63:79:07:b9:73:29:79:82:47:fe:34:be:41:
43:4f:2c:7a:40:d4:b9:bc:4e:c0:58:1d:f7:20:24:
be:a7:12:82:d3:28:26:31:26:cf:b5:56:b9:3b:4c:
58:94:4d:08:7c:be:a5:e6:ed:96:f7:87:9d:b4:9c:
90:a3:bf:6b:ae:5c:48:c2:8a:b4:5e:c9:bb:a9:93:
d9:5d:72:22:fc:4b:4a:a2:38:a1:3e:82:c6:d0:52:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FF:5C:90:5B:4B:C6:61:BE:A8:13:3F:25:E9:CC:6E:FF:AC:BA:F6
X509v3 Authority Key Identifier:
keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:92:67:f9:1f:e9:e5:6f:63:95:65:81:1d:50:00:43:22:aa:
cf:20:e9:19:c0:2c:f8:40:f5:69:6a:4e:4b:39:3c:57:13:f5:
ee:c1:d1:a8:25:48:73:de:67:3d:77:9a:07:ea:4e:72:f7:f1:
2e:4d:24:28:14:17:d2:6e:4e:f0:b0:54:46:ec:4f:4b:d7:92:
d1:ce:40:72:98:30:31:99:99:26:d7:1f:fc:dd:de:ef:23:46:
cf:19:f8:f0:41:65:2e:be:26:c8:0b:94:10:da:95:97:5a:8b:
7d:f9:bb:dc:0f:d9:ef:96:e0:95:a1:2e:e7:2f:71:4f:df:ad:
ab:67:72:18:bf:1a:3a:0e:f3:07:e8:8a:ac:bd:69:1f:62:40:
4a:da:b1:e4:c9:33:4c:aa:7f:48:4d:09:66:ce:e8:df:8c:63:
1d:05:c4:7c:a9:15:1c:a4:77:18:e4:e3:b9:5c:02:c5:40:63:
cf:aa:01:6f:ce:4e:60:8e:43:c1:be:e9:a6:52:c9:de:aa:26:
e5:a3:d6:89:6e:53:08:db:a0:f8:11:25:bd:34:86:fa:8c:28:
e8:43:07:c8:d1:5a:f9:e8:a3:3b:b3:10:ca:83:21:4d:b9:68:
08:04:ce:d1:b3:38:1f:bd:43:b1:a3:dc:51:81:42:c3:a3:fa:
e7:e1:69:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:37:07 2026 by rpki-client