
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft
File: IipN0tbRTG-_SJJOZqD4y98SVRg.mft (raw, json)
Hash identifier: qykDF8jCKS2MWmMxZKdjdAekoZti8x231tXENVUtWIg=
Subject key identifier: 0C:1F:80:9A:8A:49:CE:44:DA:E1:E2:07:6C:BD:71:EB:49:F9:8D:77
Authority key identifier: 22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18
Certificate issuer: /CN=A91B9D33/serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518
Certificate serial: 079A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft
Manifest number: 078D
Signing time: Thu 16 Apr 2026 21:27:54 +0000
Manifest this update: Thu 16 Apr 2026 21:27:54 +0000
Manifest next update: Thu 23 Apr 2026 21:27:54 +0000
Files and hashes: 1: IipN0tbRTG-_SJJOZqD4y98SVRg.crl (hash: /0ch0yLoVwUgsFhChpEG1GzJgLcU/YEMzoerIgC6Nq4=)
2: 1B047818141E11EFB957692CC4F9AE02.roa (hash: ekCf+qkgQjsCTS/hD3kgERoIA8Bx5WAn9/u0BBY+k1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl
rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:27:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946 (0x79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9D33, serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518
Validity
Not Before: Apr 16 21:27:54 2026 GMT
Not After : Apr 23 21:27:54 2026 GMT
Subject: CN=69e1545a-66e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:6b:66:a5:4d:fe:cf:9f:b0:7a:1e:74:89:
31:b3:73:4f:7d:e3:17:ba:db:ab:2b:45:19:63:f9:
c9:ad:6d:9e:29:20:67:17:a1:e8:fa:77:11:72:a6:
59:39:1d:c1:53:22:3e:d7:71:96:ca:1e:cb:74:12:
15:24:b0:79:d0:17:2f:f1:8b:bd:f5:cf:c7:53:14:
06:25:fa:0d:ae:51:3a:d4:b6:e7:23:9b:04:63:17:
1b:e5:73:6f:af:09:3e:88:f3:a0:6f:71:7b:ac:45:
49:8b:36:07:78:5c:01:d9:61:e1:a0:e2:fb:98:b4:
f3:6e:42:eb:8c:43:9e:7e:e3:b1:d3:cc:de:21:e1:
79:b9:50:a4:f2:0b:69:01:d2:e1:ac:2c:ee:bc:97:
4a:8c:ab:88:14:4f:a6:21:fb:50:1f:c1:81:b5:71:
9f:86:60:2b:46:a9:1f:3c:f1:39:cc:a7:ab:59:13:
32:0c:ba:f6:a5:6b:74:02:bf:3f:a9:12:00:71:90:
9f:05:b7:75:5c:9d:2e:25:50:07:18:7b:0e:a8:40:
da:88:13:4a:5b:f9:92:a5:b6:de:d4:14:1e:49:4b:
d1:2e:b1:c1:5a:30:6c:81:86:fe:47:a4:e3:80:2d:
38:df:e8:18:45:bc:bc:56:02:42:80:15:ab:d0:3e:
f4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1F:80:9A:8A:49:CE:44:DA:E1:E2:07:6C:BD:71:EB:49:F9:8D:77
X509v3 Authority Key Identifier:
keyid:22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:3b:9a:fa:f6:f1:f6:ee:b8:e2:ef:77:dd:8f:a1:e6:c2:3e:
62:ef:5b:03:96:e6:32:2f:81:cb:b8:e1:8d:fc:17:5d:48:aa:
a1:b9:7f:4e:03:2e:a9:f2:82:14:85:3f:24:c9:62:f0:ae:49:
1b:ff:d0:4a:ee:85:0f:03:b3:fc:70:9e:7e:74:20:a7:2d:b2:
39:6e:b6:2f:ae:be:de:99:38:b1:56:42:18:48:db:96:be:b5:
40:b6:e4:6a:ce:c6:12:f9:fb:5a:38:a2:4e:33:ea:b5:c7:60:
5c:98:d3:a7:98:8f:9b:e2:88:fd:0e:d5:be:8c:bc:34:86:97:
7b:a6:ab:4d:7f:e6:54:5f:19:b3:76:bb:42:50:ff:39:b9:46:
f9:3e:6e:7a:cf:a2:15:82:e8:7e:54:8e:c7:da:3c:95:e1:55:
00:b1:82:ba:9c:e7:37:3b:44:4a:2d:d4:bf:02:12:0c:9f:71:
75:5c:76:12:7e:eb:c8:f9:f3:d7:fe:59:94:ec:74:22:d2:96:
8a:16:06:dd:d9:ce:ac:ad:66:e7:04:45:cd:f4:4b:03:64:ce:
21:26:ea:26:4c:6c:9d:c5:38:fd:f1:04:4b:e6:3a:80:d4:e2:
19:71:38:49:e1:c7:77:39:f3:57:81:b1:27:d3:03:e7:2f:4f:
10:5f:26:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:03:18 2026 by rpki-client