
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
File: ihprqbt2zysN7jXqTP0vX_jAieM.mft (raw, json)
Hash identifier: m0UecmksNpUd61wba67H2YzEcPMm/6F1+VRE3DItR1w=
Subject key identifier: 3B:74:3A:37:69:EC:5D:52:A2:AE:72:00:33:41:6A:7B:30:A1:A1:CD
Authority key identifier: 8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3
Certificate issuer: /CN=A91C36EE/serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
Certificate serial: 0CAC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
Manifest number: 0CA3
Signing time: Fri 12 Jun 2026 18:31:55 +0000
Manifest this update: Fri 12 Jun 2026 18:31:54 +0000
Manifest next update: Fri 19 Jun 2026 18:31:54 +0000
Files and hashes: 1: ihprqbt2zysN7jXqTP0vX_jAieM.crl (hash: EcilmL4AZZgt9D65kwRxlfadpyPxgxU4t4Igoh8HnHk=)
2: 6FCF7FF2180411EA9AA70A57C4F9AE02.roa (hash: Jmt3gOA3SMMnVdNR/G0V8b2lUdwKqb+fxUhA4ydziJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl
rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3244 (0xcac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C36EE, serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
Validity
Not Before: Jun 12 18:31:54 2026 GMT
Not After : Jun 19 18:31:54 2026 GMT
Subject: CN=6a2c509a-26de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:56:39:15:5f:b3:ab:1e:b7:64:c6:8b:1b:70:
c7:05:2c:d7:db:17:33:f7:3c:a6:14:20:ef:90:69:
9c:b0:b8:8d:5c:0f:a9:c3:11:46:b9:f6:ce:66:7c:
23:5c:56:fa:ef:7f:16:fc:6c:fc:2a:17:31:62:9f:
44:e7:3f:fe:1f:3b:fc:37:83:b6:a8:b4:c9:1f:fa:
24:fe:3a:f5:2b:38:86:75:a6:86:dc:25:e0:03:2a:
7f:12:89:3f:6e:df:ee:73:01:18:e8:fb:b0:ef:d3:
69:00:c4:21:75:80:a4:91:13:93:01:22:2a:43:4d:
96:d3:ad:a6:ea:73:65:e3:d6:5c:bb:ee:29:04:ef:
44:e7:44:0a:de:d0:28:76:f7:d5:f0:3c:48:f3:5d:
9f:73:9d:dd:ca:d4:0d:72:c0:65:a7:c8:d6:0a:b7:
6e:11:58:b4:4b:30:b0:07:6a:e8:bf:b5:0c:ea:42:
3d:ad:31:88:61:00:63:5e:1a:5c:85:2e:42:c5:7b:
49:62:6d:1d:cf:6d:fd:e3:69:ea:46:55:30:6e:ff:
b0:7d:4b:e0:46:bb:4d:f4:c4:aa:40:0d:ac:84:64:
0b:f1:35:36:03:3c:20:7e:a8:15:58:a8:f8:7a:b3:
35:04:af:9c:6f:36:8c:a4:d4:f0:b6:55:15:9a:fc:
db:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:74:3A:37:69:EC:5D:52:A2:AE:72:00:33:41:6A:7B:30:A1:A1:CD
X509v3 Authority Key Identifier:
keyid:8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:61:4a:e6:e9:42:01:df:d3:18:06:6f:93:2d:32:a5:3a:a3:
1b:f6:e1:05:6d:5d:14:22:15:da:f0:1d:17:37:9c:ed:eb:5c:
54:11:ad:03:35:8a:f4:6a:ed:55:0e:f0:62:66:37:eb:01:1d:
45:04:9f:2f:70:05:c5:79:85:d5:4f:4e:a8:51:8f:8c:c9:1d:
15:4f:d0:18:b4:c2:f3:af:cc:59:cb:0f:05:9a:ad:65:72:74:
5c:9f:1d:a8:d9:26:48:f3:bb:c8:8c:57:67:d6:5e:c8:98:c9:
fd:6c:5d:0c:bf:e4:f9:5e:30:72:7f:36:3b:7c:4a:59:12:07:
5f:b1:ce:94:42:e0:a1:f0:e6:58:70:18:f2:78:03:98:59:dc:
59:37:f6:8d:9d:0b:d9:cb:19:9f:b7:24:8e:05:6d:75:9e:83:
af:e5:6c:69:86:f8:6e:56:6c:fd:f2:61:c2:f5:0a:6c:13:13:
36:86:79:ac:95:3d:76:e3:30:da:4b:7a:98:b1:07:7f:02:76:
31:75:d7:80:be:9b:30:9c:a3:62:43:d4:3f:8c:57:d9:1a:26:
32:6f:a3:50:c1:1f:e3:36:65:e8:ee:f7:42:58:0c:cc:eb:9c:
c0:5a:a1:08:00:1c:01:ff:af:cc:29:75:15:aa:bf:ce:55:13:
4d:6f:82:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:35:04 2026 by rpki-client