
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
File: ihprqbt2zysN7jXqTP0vX_jAieM.mft (raw, json)
Hash identifier: fwKM5HbhFYgxne6f4Mb4iVr2/37OoIDZr6RUIYEKvL4=
Subject key identifier: 92:3A:EB:A8:79:22:BA:12:8B:3F:09:D6:38:18:F5:6D:DB:65:F5:48
Authority key identifier: 8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3
Certificate issuer: /CN=A91C36EE/serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
Certificate serial: 0C8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
Manifest number: 0C86
Signing time: Thu 16 Apr 2026 18:29:09 +0000
Manifest this update: Thu 16 Apr 2026 18:29:09 +0000
Manifest next update: Thu 23 Apr 2026 18:29:09 +0000
Files and hashes: 1: ihprqbt2zysN7jXqTP0vX_jAieM.crl (hash: ZVjSr4VVLvh7GGp19tW4jkHl6ZSvHpuU5sRLG4VgWfw=)
2: 6FCF7FF2180411EA9AA70A57C4F9AE02.roa (hash: Jmt3gOA3SMMnVdNR/G0V8b2lUdwKqb+fxUhA4ydziJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl
rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3215 (0xc8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C36EE, serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
Validity
Not Before: Apr 16 18:29:09 2026 GMT
Not After : Apr 23 18:29:09 2026 GMT
Subject: CN=69e12a75-a9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:a5:a0:1e:5f:5d:34:39:39:ad:83:d0:d8:
ad:0e:5a:3c:da:aa:49:98:57:99:3b:40:40:3d:ba:
be:8d:09:ee:c7:f8:b0:aa:c9:8f:fc:aa:77:a4:f4:
ee:01:5d:3b:a0:b5:9d:66:a9:4a:ed:e8:92:5c:d7:
b8:a3:02:64:dd:60:77:a6:fa:c4:b7:d0:c0:09:5e:
1f:e8:ce:7b:a8:30:22:21:a2:03:b4:f6:dd:e0:8c:
f4:81:18:16:ad:f5:b6:92:3a:fa:3d:8a:9f:10:36:
36:5e:86:e5:56:d4:55:75:89:86:a2:fa:25:79:0f:
32:74:81:6f:42:74:ce:0c:b8:5b:f8:0f:10:83:1d:
98:22:f2:ca:4a:cc:a7:14:12:d0:b9:65:c9:61:7c:
de:08:74:64:c5:c8:18:cb:d5:70:73:bf:b1:ed:54:
51:be:b0:4c:e2:c8:37:41:84:36:95:cd:89:5f:61:
22:10:92:07:55:f4:13:c5:b9:8a:b6:f5:a0:26:f9:
36:f5:d4:d0:93:ab:17:6f:c4:42:ab:85:18:da:82:
59:d6:44:7b:f5:f8:e6:15:fd:73:b7:a4:6b:6e:76:
f4:da:32:21:fe:83:17:dc:16:3f:4f:a9:b3:ec:16:
d3:e6:02:50:0d:5d:a6:6b:dc:40:c9:43:82:e8:64:
a2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3A:EB:A8:79:22:BA:12:8B:3F:09:D6:38:18:F5:6D:DB:65:F5:48
X509v3 Authority Key Identifier:
keyid:8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:26:88:77:ec:91:66:ec:b5:41:16:ed:13:fd:38:af:53:7e:
5d:19:3a:6a:b2:f6:6b:76:7d:96:fc:0f:df:61:7e:b2:47:5d:
46:2f:5d:67:2b:63:9c:90:70:80:5e:e2:5b:5c:de:b7:20:9b:
ae:98:76:35:64:14:0b:42:8d:60:4b:b8:8a:e5:f0:03:c9:c8:
9d:ad:4f:65:70:9e:f7:a5:ab:b6:c8:c2:79:22:43:62:c6:e3:
06:64:27:9a:c7:f8:5b:88:da:82:fe:49:84:a6:d0:be:eb:54:
4e:01:11:66:f1:c2:5e:e7:74:f0:d9:bb:3e:38:95:cc:68:3c:
ea:22:0e:e5:bd:04:88:de:b2:76:81:ac:08:b7:f6:bf:d6:7e:
75:ed:36:a9:5e:37:f4:9b:6f:be:8b:56:dc:72:78:18:23:d7:
5d:06:d8:bd:a5:5d:e6:19:6f:61:68:66:46:b3:04:18:58:73:
0a:35:e1:3f:6c:87:9e:5b:4e:db:51:fc:02:53:92:b0:2d:e1:
81:61:e2:eb:89:64:8d:d6:f7:0e:1c:9e:3a:26:ba:b9:31:1b:
32:b2:4a:70:23:5a:4a:2e:49:da:f1:78:c0:d9:62:60:3f:27:
31:6f:3b:ca:40:2f:d4:5b:be:59:4f:67:2a:b0:e7:4a:ef:eb:
02:fe:1f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:06:38 2026 by rpki-client