
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft
File: IX2ikIx1R129zapw42ubQNSRLt0.mft (raw, json)
Hash identifier: 8jVkHSTJpRR7/fVOunFT0A5kj4X+T/NR/X2PwYPb0cQ=
Subject key identifier: ED:C4:A4:45:A0:2F:65:0E:36:61:96:40:95:A2:40:6D:D5:C8:2E:85
Authority key identifier: 21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD
Certificate issuer: /CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD
Certificate serial: 0216
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft
Manifest number: 020A
Signing time: Mon 27 Jul 2026 04:37:38 +0000
Manifest this update: Mon 27 Jul 2026 04:37:38 +0000
Manifest next update: Mon 03 Aug 2026 04:37:38 +0000
Files and hashes: 1: IX2ikIx1R129zapw42ubQNSRLt0.crl (hash: nCRlMavg6LLXBkaotESoYTPKNIuDryVVmsFvlkeTy6o=)
2: E0E9B1966D8A11EEB33A1E83C4F9AE02.roa (hash: V3KGZPnIaGHG9fDhQyXWDDAGsT4VUgLiBOpTb4Gj+iY=)
3: 164B8B986D8B11EEAE28C283C4F9AE02.roa (hash: 8AGxFivuKAnKFN4TwTWYk8MHWZYUWT4PtexoYNpYMj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl
rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 534 (0x216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BABFD, serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD
Validity
Not Before: Jul 27 04:37:38 2026 GMT
Not After : Aug 3 04:37:38 2026 GMT
Subject: CN=6a66e092-7551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:20:e2:bc:32:2e:b7:28:1e:81:63:30:e7:
2f:94:21:68:aa:9e:18:eb:27:e5:6f:52:f5:4e:07:
e4:e6:85:f4:3d:3a:e0:67:66:19:52:89:9f:93:84:
7c:13:69:d8:7e:b2:ce:72:d7:18:54:60:62:dc:70:
cb:7b:d6:60:62:0e:fd:8d:bd:8f:5c:95:21:df:ae:
93:b7:2e:da:c4:f7:ec:12:b3:e9:a8:98:e5:f9:70:
c0:f4:e1:67:64:59:ce:7f:aa:59:67:7b:1b:30:40:
26:01:73:91:1a:b4:d9:ed:d6:51:ad:5b:fe:04:28:
fb:e1:f5:24:55:14:1c:a8:61:06:24:68:42:2d:05:
f5:de:4d:51:40:4a:ab:d0:3e:58:2b:0d:41:5c:36:
28:c3:d7:b0:5d:ac:f9:73:ed:56:3a:04:5d:5a:58:
52:21:ba:f2:7e:97:34:75:bd:ef:1a:dc:ad:d3:3e:
c0:18:f2:ce:5a:38:a7:09:b8:15:6f:6a:99:7f:54:
19:d9:fe:e4:3a:b0:f5:3a:50:48:6b:6b:53:ae:60:
92:2c:38:b6:b2:64:71:16:ed:05:81:80:4e:c8:e8:
e1:dd:f8:26:39:c3:4e:27:16:81:11:9e:27:5c:38:
1a:5e:8e:78:75:78:ff:3a:6b:0b:b4:39:6e:10:5a:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C4:A4:45:A0:2F:65:0E:36:61:96:40:95:A2:40:6D:D5:C8:2E:85
X509v3 Authority Key Identifier:
keyid:21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:e4:ab:6f:8f:04:03:74:a9:ff:c8:aa:a4:f9:9d:71:c4:5f:
9d:eb:40:e4:07:38:27:75:30:f7:ab:e4:02:c0:09:93:27:5a:
05:df:12:61:99:f0:41:1f:75:c5:59:de:5b:24:65:aa:6e:30:
20:78:86:65:7c:3f:fc:34:f8:72:9f:62:36:51:1a:f5:71:4d:
91:3b:0c:81:b4:39:5a:30:a6:48:79:8b:0b:95:7d:62:10:15:
30:97:d3:a0:33:5e:ca:3a:44:e3:19:4e:58:56:23:a0:91:a1:
3b:53:8f:61:48:df:20:0e:62:4a:5f:ad:29:b8:f7:41:a7:c8:
8f:72:73:0d:b9:e4:b5:0b:53:39:ed:ac:23:b9:cc:b4:e5:2b:
5f:43:d8:09:06:3a:3d:4d:4f:00:87:aa:77:7b:ba:a4:67:05:
34:e0:b7:df:10:a8:cc:fa:a3:65:85:63:cf:b3:66:eb:c0:11:
17:b6:f6:4c:c8:7d:d7:e6:be:ab:22:40:8c:ec:62:da:a8:a5:
06:fb:ab:11:7b:2d:20:4a:ef:c8:93:3c:3b:c0:03:07:9a:8f:
a4:50:d0:38:05:f2:74:74:0c:6e:0f:39:45:8b:b0:44:5e:89:
57:2d:0e:ca:8b:fa:6a:11:79:79:9d:8b:e7:4e:ef:54:0d:61:
4e:75:db:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:40:50 2026 by rpki-client