
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
File: iHgvgx82npb5eaJYXPJzyRbHtP0.mft (raw, json)
Hash identifier: LyOox5Zh67/jpIbBYPgXTLoEiC/94o2JebbfjPnKNvM=
Subject key identifier: 25:C3:DC:11:A3:89:FB:22:51:73:15:61:4A:C7:F4:FC:98:29:A5:24
Authority key identifier: 88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
Certificate issuer: /CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
Certificate serial: 0761
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
Manifest number: 0747
Signing time: Fri 12 Jun 2026 21:48:37 +0000
Manifest this update: Fri 12 Jun 2026 21:48:36 +0000
Manifest next update: Fri 19 Jun 2026 21:48:36 +0000
Files and hashes: 1: iHgvgx82npb5eaJYXPJzyRbHtP0.crl (hash: dCM65K5mJYYROkdHlhR3LjFqGFWczTIgpToOtx1+Sa0=)
2: 0F425E96346711EFA663CD51C4F9AE02.roa (hash: W7HbZgiurIous/dkOII7Zs+KL83NW7eUE5Qjtxcpxno=)
3: 2BC67A2A346711EF9EEB0F52C4F9AE02.roa (hash: QKYaxLpX/SQs5/c2F5OMS0OrA2VZBlIsKBf0LDbK85o=)
4: A0A96F80AD8511F08B0A1857C4F9AE02.roa (hash: E4mvIp0TY49n7Ku16oPaGsPeRK5kr/jdVq6qAjBUp9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl
rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1889 (0x761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B65E6, serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
Validity
Not Before: Jun 12 21:48:36 2026 GMT
Not After : Jun 19 21:48:36 2026 GMT
Subject: CN=6a2c7eb5-a8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:69:d2:f4:cf:eb:b1:e6:2a:16:2b:e8:90:a3:
c0:4e:ec:5f:99:c3:87:7a:23:7b:e9:f4:55:75:7d:
e6:84:7d:5b:d2:c2:a7:ee:27:48:a5:7f:17:81:c1:
69:2a:b0:78:e0:f5:f5:01:35:5d:f9:cb:04:9b:77:
f4:f6:6f:6b:02:46:38:a5:01:07:14:9e:cb:f3:4e:
e9:db:5a:59:70:b2:82:ee:92:21:51:69:ff:ff:e8:
c6:1b:2c:a4:ad:86:f1:af:48:1b:7a:5c:da:e7:c5:
fe:0d:a1:52:f5:58:63:7c:9a:0b:55:d7:cd:49:f8:
65:c8:1a:05:78:13:cc:50:b2:91:5f:bd:74:17:d6:
70:ec:56:d6:31:76:26:9a:a5:ed:09:e7:fd:77:34:
f1:be:e4:a8:4c:19:71:e5:e5:db:4b:94:f0:3a:21:
ff:03:89:a1:16:ac:3b:a9:d1:6b:dd:b2:1b:6e:93:
ff:5e:90:dc:d3:2d:33:ea:86:90:a7:10:8c:76:ed:
d6:1f:5a:8d:a5:e6:e0:ce:7b:92:19:b2:d2:a9:0e:
ba:63:e1:7a:85:29:6c:b6:41:81:ff:bd:29:2f:6a:
2d:d5:dc:5f:78:14:f3:c8:d9:ed:8d:51:d1:28:2d:
6c:bb:5e:58:be:3a:e4:96:39:6e:67:fa:35:82:27:
9a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C3:DC:11:A3:89:FB:22:51:73:15:61:4A:C7:F4:FC:98:29:A5:24
X509v3 Authority Key Identifier:
keyid:88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:c0:2a:7e:7d:af:fe:3b:df:e6:fb:72:6e:4f:da:a5:cc:c6:
38:d4:57:91:ec:78:8b:e8:6e:8b:fa:89:a5:f6:ef:75:bb:44:
01:eb:57:c1:48:84:3e:e3:4f:86:45:e4:ac:34:b5:2d:3f:33:
f5:10:75:f4:ba:c5:ba:36:a2:5c:28:53:57:89:7d:35:57:1f:
58:50:14:1f:46:50:fa:f1:36:d9:f0:95:18:f1:6d:5f:3b:8e:
0c:a9:70:d3:aa:37:22:98:fb:06:58:2b:10:a1:11:fb:17:70:
a0:d5:2a:8e:42:51:63:7a:7d:2f:8f:1a:b6:c1:a6:8f:b7:a8:
8f:96:e2:f0:08:3b:98:63:1a:33:95:32:1a:f4:0a:09:77:28:
53:e8:79:ba:8d:2a:30:15:e7:d6:ee:45:53:d1:18:f5:db:87:
3c:5f:a6:86:70:61:18:67:7a:45:bb:87:bd:30:b7:6c:a9:36:
3b:e7:15:14:37:62:dc:fe:3d:3e:72:23:10:44:11:76:f8:0b:
eb:13:d7:1b:53:fd:65:b0:38:2a:4b:de:10:bf:21:dd:81:ea:
01:1d:6d:54:2d:23:0d:59:ac:6b:6c:27:6c:69:4a:ea:36:34:
e1:15:39:8e:1c:51:ba:e2:4c:2a:00:02:64:1a:98:36:ae:9e:
ce:a9:5b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:48:38 2026 by rpki-client