
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json)
Hash identifier: PPy77ZzlE1UjzWBL1hORl8JzVdo/8of/Rz+yVQ32sIw=
Subject key identifier: 38:B6:9C:1E:A9:C0:0D:99:1D:DB:3B:4D:45:1C:4B:F8:62:53:96:65
Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63
Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63
Certificate serial: 026F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
Manifest number: 0261
Signing time: Sun 01 Mar 2026 02:46:17 +0000
Manifest this update: Sun 01 Mar 2026 02:46:16 +0000
Manifest next update: Sun 08 Mar 2026 02:46:16 +0000
Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: /Qq3Io6Bdk9w2J5i0x8L+PYhP7pJ1eP1VoO3CQ+tut0=)
2: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: Ecx2uEYsiUTMI1pp2hzwrKj0DYLLvVQ4KuzNnfcJWcM=)
3: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: vCKD+CzoArcalyziR+d7Ov1DlN61zdE8Qt99sD5HF3I=)
4: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: Z3Pgsl7gnEpPUpQRogkAmZeZ95NlxutDljfa11ERFDo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl
rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:46:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63
Validity
Not Before: Mar 1 02:46:16 2026 GMT
Not After : Mar 8 02:46:16 2026 GMT
Subject: CN=69a3a878-1147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d7:d9:2a:b8:44:f0:33:e1:c4:48:65:54:d4:
43:46:67:5e:7e:e0:5c:8a:22:56:6d:90:23:b5:70:
0e:1e:04:de:4b:1a:a7:0c:81:7a:1c:1a:aa:78:e6:
79:91:89:70:89:3b:7c:45:11:df:9f:1c:dc:15:94:
26:10:22:dd:b4:67:a4:4e:00:ba:53:85:3b:88:4c:
e0:f5:e7:14:7c:b6:23:8a:5d:a6:7c:1b:38:59:2a:
99:80:dc:80:47:03:3a:3c:f7:99:5e:0b:81:37:2e:
a2:29:bb:b1:61:35:f8:42:0f:4a:ba:fa:2a:a7:de:
71:12:02:d4:a6:35:86:cf:5d:b6:ab:0e:58:3a:d1:
5a:3a:14:ab:e5:6c:32:0a:93:e5:08:57:d5:3c:f6:
5b:23:15:3d:85:58:ad:50:fd:4d:07:d5:a5:e3:44:
39:96:ed:31:e6:fe:5c:44:38:47:bc:65:c6:dc:9a:
52:a9:9f:ca:d1:90:b5:cd:da:24:79:5a:09:d7:5f:
fb:40:26:f7:68:40:7d:d7:34:c3:7d:52:e0:4c:5d:
76:af:88:14:c3:4b:0f:30:df:26:56:31:bc:4f:64:
c1:66:58:e5:2c:66:b2:8f:18:9b:4d:cc:be:59:6d:
47:2a:54:2d:ec:13:17:72:71:04:c5:07:53:e7:e7:
0b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B6:9C:1E:A9:C0:0D:99:1D:DB:3B:4D:45:1C:4B:F8:62:53:96:65
X509v3 Authority Key Identifier:
keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:05:49:e3:0a:5c:1c:6c:43:9e:e3:28:fc:d1:98:66:c5:15:
4e:10:25:73:a3:aa:61:70:06:7c:ad:7e:45:55:ff:a7:b3:f3:
ce:c5:ba:04:a2:1f:80:7b:6f:73:46:ea:fe:ca:ec:2c:8c:bc:
5b:73:8d:d0:60:32:f9:af:43:26:dc:24:5c:36:75:7b:22:b2:
17:48:78:a9:d3:0f:dc:c2:58:e0:9f:0b:97:12:0b:bb:b4:16:
a1:e5:09:53:6d:b5:4a:49:79:c4:3c:10:26:38:49:9a:08:2b:
c0:c5:cc:f6:e1:6f:f1:f4:41:98:a6:a1:5f:f8:0e:d0:09:74:
9c:11:fa:64:b5:b5:c9:02:a9:9a:43:18:65:a2:16:a5:10:d4:
f0:57:c1:92:87:be:63:36:38:d8:b3:6a:45:1f:09:76:3a:d3:
7b:57:9b:b6:8c:df:ae:bc:b9:16:c4:c0:e8:eb:29:50:36:01:
9b:30:24:18:d0:85:e7:d1:ba:91:e8:ce:e4:8a:eb:97:73:17:
6e:62:6d:f1:89:b4:44:a3:7e:73:08:ff:aa:bd:bf:6a:3e:f3:
50:60:86:80:c7:08:a7:43:93:fb:81:c1:a9:43:2b:01:c9:a8:
a7:94:71:69:22:14:84:40:51:79:76:84:27:dc:9b:c3:cc:a7:
6c:17:30:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1
QjA4RDZCNjMwHhcNMjYwMzAxMDI0NjE2WhcNMjYwMzA4MDI0NjE2WjAYMRYwFAYD
VQQDDA02OWEzYTg3OC0xMTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAndfZKrhE8DPhxEhlVNRDRmdefuBciiJWbZAjtXAOHgTeSxqnDIF6HBqqeOZ5
kYlwiTt8RRHfnxzcFZQmECLdtGekTgC6U4U7iEzg9ecUfLYjil2mfBs4WSqZgNyA
RwM6PPeZXguBNy6iKbuxYTX4Qg9Kuvoqp95xEgLUpjWGz122qw5YOtFaOhSr5Wwy
CpPlCFfVPPZbIxU9hVitUP1NB9Wl40Q5lu0x5v5cRDhHvGXG3JpSqZ/K0ZC1zdok
eVoJ11/7QCb3aEB91zTDfVLgTF12r4gUw0sPMN8mVjG8T2TBZljlLGayjxibTcy+
WW1HKlQt7BMXcnEExQdT5+cLsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDi2nB6p
wA2ZHds7TUUcS/hiU5ZlMB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy
MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h
Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjE3Mi9CQTU0QzEzNDcyMkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1
Njh6dk9aaDVEajliQ05hMk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnwVJ4wpcHGxDnuMo/NGYZsUVThAlc6OqYXAGfK1+RVX/p7PzzsW6BKIfgHtv
c0bq/srsLIy8W3ON0GAy+a9DJtwkXDZ1eyKyF0h4qdMP3MJY4J8LlxILu7QWoeUJ
U221Skl5xDwQJjhJmggrwMXM9uFv8fRBmKahX/gO0Al0nBH6ZLW1yQKpmkMYZaIW
pRDU8FfBkoe+YzY42LNqRR8JdjrTe1ebtozfrry5FsTA6OspUDYBmzAkGNCF59G6
kejO5Irrl3MXbmJt8Ym0RKN+cwj/qr2/aj7zUGCGgMcIp0OT+4HBqUMrAcmop5Rx
aSIUhEBReXaEJ9ybw8ynbBcwtw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:28:30 2026 by rpki-client