
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
File: ihprqbt2zysN7jXqTP0vX_jAieM.mft (raw, json)
Hash identifier: dBm1YtZn3okelaCjuYL1rvIfyJ0bWOHsaEB0r1Q/fuw=
Subject key identifier: 89:10:D8:EC:5F:13:E6:77:0F:5C:94:80:37:F8:4A:3A:BD:B3:67:DD
Authority key identifier: 8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3
Certificate issuer: /CN=A91C36EE/serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
Certificate serial: 0C77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
Manifest number: 0C6E
Signing time: Mon 02 Mar 2026 01:10:51 +0000
Manifest this update: Mon 02 Mar 2026 01:10:50 +0000
Manifest next update: Mon 09 Mar 2026 01:10:50 +0000
Files and hashes: 1: ihprqbt2zysN7jXqTP0vX_jAieM.crl (hash: JPra8SZ9HC+Azimzg3VHnDAJiDTsrg47MPeDrf7zKMw=)
2: 6FCF7FF2180411EA9AA70A57C4F9AE02.roa (hash: Jmt3gOA3SMMnVdNR/G0V8b2lUdwKqb+fxUhA4ydziJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl
rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:10:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3191 (0xc77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C36EE, serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
Validity
Not Before: Mar 2 01:10:50 2026 GMT
Not After : Mar 9 01:10:50 2026 GMT
Subject: CN=69a4e39b-9e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a4:0d:fe:e9:8a:b7:ec:26:31:9e:9f:95:e7:
bd:ee:d6:71:3b:4b:2e:d1:54:2e:12:5a:07:fb:b8:
f9:cf:12:69:e1:03:5a:16:96:49:00:fd:52:a6:dc:
97:4a:8e:5c:07:ee:31:c8:e3:13:0d:31:4c:e1:3d:
9b:d0:e1:ff:3b:da:6f:a3:eb:ea:06:86:4b:68:c9:
dc:39:5c:8f:51:ef:60:14:ab:67:f4:c4:08:3a:2f:
4c:53:40:2f:91:c5:e8:03:b7:0f:3f:1a:81:27:8c:
37:38:22:74:36:bc:86:4d:06:16:7b:a5:84:f2:7f:
7e:ec:38:5b:d3:b1:0d:db:41:30:12:a1:a6:d7:fa:
77:d2:8f:0d:0e:50:3a:b8:e5:3f:35:60:8b:27:80:
77:4a:60:92:b2:87:2b:44:d6:e6:6f:c5:2b:9d:c9:
3a:e3:07:78:26:07:2f:98:60:52:50:c6:39:a3:07:
d0:97:74:05:5a:56:a3:55:59:d7:da:b1:17:f7:8d:
b8:45:5c:5b:13:0c:49:ab:99:4d:1d:53:bf:61:3b:
7e:6c:71:4a:f1:63:f6:82:f0:40:6a:ce:5a:5a:08:
81:8d:2c:0b:6b:01:66:ed:a7:48:45:34:5a:a1:ad:
48:63:58:52:f5:89:70:c1:79:62:2c:19:3d:d3:6c:
f5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:10:D8:EC:5F:13:E6:77:0F:5C:94:80:37:F8:4A:3A:BD:B3:67:DD
X509v3 Authority Key Identifier:
keyid:8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:5b:70:f3:cc:8c:b3:e6:1a:97:ab:bc:7e:f7:aa:bc:ba:f0:
8b:9a:b9:ef:6c:49:0f:4a:06:1e:ac:91:61:35:a2:c5:7e:34:
9a:99:63:29:df:69:af:28:61:65:0f:a3:52:55:be:44:36:d7:
cc:87:38:bb:18:78:5a:6c:d1:16:e8:25:32:24:29:0d:e9:7b:
8e:c6:76:81:40:c0:1b:f1:31:9e:e5:1c:67:16:5b:d4:6c:7a:
8f:a5:33:81:cb:00:f2:4d:1b:6b:8a:d3:21:39:74:e6:15:5d:
51:20:ca:54:7f:81:d4:d8:e1:b4:d2:4d:d0:4c:09:9a:b9:6a:
27:8a:b4:6a:21:3e:19:bf:f8:64:4c:a7:3c:63:86:62:6b:ab:
88:04:d1:54:06:22:70:46:4d:11:a4:7f:b4:4e:bf:f4:a7:e6:
f5:0f:a3:da:af:64:80:47:0e:09:61:c9:4c:32:81:df:e7:5a:
c3:a2:ab:f0:0c:d8:f2:36:bc:14:80:a1:41:91:8f:06:73:14:
3a:89:34:a4:37:06:3e:0a:19:b1:f7:7c:79:6d:f5:56:35:74:
18:f9:d3:68:9b:77:50:e1:65:4a:51:34:b6:7e:ef:52:a2:7b:
8f:9c:40:01:7e:36:1d:ad:0e:9d:dd:28:7a:8f:58:f8:85:07:
41:63:3b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:07:00 2026 by rpki-client