
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
File: i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft (raw, json)
Hash identifier: ZnYssl5O7C9qpq6yC73Jzuu+X7jmV3bnnBZXEABhG2U=
Subject key identifier: 5A:51:78:45:5A:93:29:4B:6E:25:A6:F5:D2:6B:F6:9F:84:93:BF:6B
Authority key identifier: 8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C
Certificate issuer: /CN=A91C0EDF/serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C
Certificate serial: 01D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
Manifest number: 01C9
Signing time: Mon 27 Jul 2026 05:28:13 +0000
Manifest this update: Mon 27 Jul 2026 05:28:13 +0000
Manifest next update: Mon 03 Aug 2026 05:28:13 +0000
Files and hashes: 1: i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl (hash: GXilzw7qs+wPD+ZPgbwx8a65wgKBm0pENRX2gkYFLks=)
2: 52333EB4CFAE11EEB928CD25C4F9AE02.roa (hash: 3wRVfI1zpk+cbpoO3lK5QYCwvSabow1kgGaBDb4LpII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl
rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:28:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467 (0x1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0EDF, serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C
Validity
Not Before: Jul 27 05:28:13 2026 GMT
Not After : Aug 3 05:28:13 2026 GMT
Subject: CN=6a66ec6d-d333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:d0:c0:b8:38:2e:27:38:9b:2a:ec:03:8a:
cd:56:2a:ad:41:ae:d7:40:06:9d:2d:66:47:24:30:
13:35:bf:cb:97:a3:b2:ce:a8:0d:b2:c3:75:a4:c1:
26:a6:c5:14:20:e1:17:33:85:c1:f1:a1:04:79:2f:
a1:30:97:0a:64:d0:8f:10:5e:66:f7:78:d1:0f:fe:
a1:bb:9e:d3:0e:e4:12:cf:21:7f:08:c6:27:94:71:
3f:8e:9f:b2:de:14:42:95:b7:25:c6:ae:af:a7:2e:
4d:d5:43:ec:4a:2d:ff:91:e1:ae:1c:93:e7:f6:a6:
ba:4e:bc:03:fe:03:0e:67:17:1e:87:03:f2:5d:26:
91:db:d2:36:75:6b:09:9d:8d:b4:d0:de:7b:e7:fd:
dc:c7:55:f2:60:f6:0b:a9:cb:5d:7e:98:f3:8c:b6:
fe:fe:cb:5c:d0:05:78:1c:67:f2:4a:88:83:86:2a:
bb:6e:53:72:b6:2d:28:f4:fd:48:63:35:c2:8a:2f:
63:22:af:4a:ed:82:d7:15:77:75:26:1d:d9:a5:e1:
77:d6:26:b9:40:01:2d:6f:f3:56:d4:6a:50:57:04:
f2:a4:39:f4:0e:e5:ba:d3:34:0a:82:7b:86:cc:ad:
e7:2d:30:b7:6c:3b:a1:95:49:f0:28:72:48:61:2f:
66:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:51:78:45:5A:93:29:4B:6E:25:A6:F5:D2:6B:F6:9F:84:93:BF:6B
X509v3 Authority Key Identifier:
keyid:8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:e8:86:fb:98:ae:11:fa:b4:e8:e9:fe:37:2d:6d:0c:bd:92:
da:6e:0b:0e:53:02:d0:78:d1:dc:b2:5e:ea:ad:bd:80:78:c7:
b3:06:9f:bc:74:a2:31:52:81:7d:a0:18:9e:f1:63:d3:67:ed:
8b:24:65:35:08:c6:73:3e:31:48:36:50:b2:6a:94:63:41:0f:
d2:b9:89:80:5f:2f:2d:fe:58:bb:eb:3e:b1:ba:92:b7:f3:fd:
1b:b2:31:6a:1a:14:94:95:85:89:42:db:d4:0f:37:b7:11:39:
c9:2b:b0:44:b3:60:50:87:3b:50:d2:28:b8:d2:f1:fd:d6:76:
85:62:f1:10:9d:82:d0:38:fe:80:13:21:55:37:a1:27:e3:4e:
e3:6e:d6:b4:1f:78:28:9b:4a:92:32:9b:80:53:59:5c:3f:33:
48:1d:39:d1:68:3e:0f:4c:be:b6:b5:99:f7:4a:b8:de:ac:84:
5c:ab:74:4a:99:71:83:7a:54:97:8d:d8:d0:b2:15:24:e0:bc:
94:ae:ef:83:0e:02:af:f4:f9:b8:72:e7:a6:2c:74:05:39:e4:
b3:5b:7f:0b:08:34:d9:91:d6:1d:1a:f6:ca:02:a6:d7:38:b6:
e5:31:fc:f3:76:51:0e:60:28:07:b9:c1:26:e3:e4:d4:87:81:
58:35:dc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:06:42 2026 by rpki-client