
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
File: iXCkAMzM8BCTPDMMN2Ch7F204K0.mft (raw, json)
Hash identifier: 5aZtqXoZN6jsZ/HXNjLSJGiYFguwf2nCpYjvwQaZCfs=
Subject key identifier: 52:F0:F1:9A:3F:6E:96:35:B8:4E:49:8D:FD:08:46:F7:32:D5:31:94
Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD
Certificate issuer: /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD
Certificate serial: 0621
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
Manifest number: 0611
Signing time: Tue 28 Jul 2026 23:27:29 +0000
Manifest this update: Tue 28 Jul 2026 23:27:28 +0000
Manifest next update: Tue 04 Aug 2026 23:27:28 +0000
Files and hashes: 1: iXCkAMzM8BCTPDMMN2Ch7F204K0.crl (hash: 2T2RgGYAISsbUzGR6m8y+HqCKt2Lgm8Q0IZVpxNtVFA=)
2: AD1469EC7A3911ECB5639D41C4F9AE02.roa (hash: 96gxdKQyCmuf4UCiLnFZLLSpfBwM2iUrQWCesjIYcd0=)
3: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (hash: Wnvaq8Ww3Bk3d2vemeHqavsME8uCxGuZGCjNCIrVG9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl
rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 23:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1569 (0x621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C92DC, serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD
Validity
Not Before: Jul 28 23:27:28 2026 GMT
Not After : Aug 4 23:27:28 2026 GMT
Subject: CN=6a693ae0-fce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2f:89:b7:ce:c4:4a:a5:cb:2a:39:85:9d:51:
c1:f2:c7:64:50:f0:9a:ae:35:f2:d6:77:d3:61:05:
3f:4e:3d:ac:ab:3a:49:8a:71:e0:4e:f4:e7:0e:ff:
77:ef:ed:59:32:bc:30:c3:6e:1f:44:af:5d:99:39:
16:b3:d4:d0:9f:ee:1b:77:f4:50:68:c8:43:48:7c:
85:8c:cd:3e:a1:bb:71:fe:0c:c7:89:30:e2:ba:ff:
15:c7:25:10:8e:06:2e:f1:28:2a:57:4a:39:d2:8a:
74:8c:31:d3:8d:b4:06:54:98:dc:76:89:49:e7:51:
9c:f9:75:8e:ff:7d:cf:15:78:7c:e8:96:33:42:27:
02:c7:49:c7:72:f9:31:74:ae:8a:42:39:c8:ba:27:
02:bb:85:da:ab:69:31:91:91:b4:7f:73:cb:b7:51:
f7:74:a3:4a:42:f3:31:41:04:a3:0c:1a:42:09:07:
f3:8e:d0:08:0a:0e:6c:2a:6d:80:3f:5b:77:65:ff:
9e:3d:59:72:24:ed:3e:2d:94:b0:b3:df:f3:20:85:
99:63:f6:ff:79:e3:0f:3d:be:5e:15:49:59:ea:f0:
e1:93:d5:d2:67:c1:19:d0:c2:27:2c:1f:b5:e8:43:
4c:0d:37:13:d6:98:d5:30:ba:97:f2:50:12:e4:e8:
43:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F0:F1:9A:3F:6E:96:35:B8:4E:49:8D:FD:08:46:F7:32:D5:31:94
X509v3 Authority Key Identifier:
keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:f0:35:2a:58:c3:eb:82:57:ce:33:af:a5:85:24:93:bf:d2:
71:e3:ca:1c:a6:1c:47:dd:2f:58:dd:56:03:a2:42:58:3e:60:
6c:b0:8f:db:60:14:57:29:32:4f:f8:30:3c:26:63:90:a6:1c:
cc:9e:b0:9b:ac:2a:74:0f:d2:a0:e8:75:84:88:3a:07:64:73:
e9:64:8d:e7:40:89:c5:30:00:88:a3:ff:83:ec:22:96:9d:69:
46:c0:e2:fa:d2:ee:8c:c2:ce:36:16:70:8d:23:8c:42:ba:d9:
58:72:f3:b7:62:e2:d2:10:28:37:72:ac:2d:37:75:c2:a4:fb:
2c:e0:03:1f:95:30:39:bf:60:f7:30:4f:a3:b9:2d:dd:30:3d:
f6:37:4d:b3:82:7a:93:ef:d6:ff:b8:ab:b8:89:72:17:2f:7f:
c3:b7:d1:ec:46:e1:86:d2:95:b2:a0:61:76:80:2e:cd:bb:3e:
33:89:5c:ae:ee:ba:20:79:36:47:dd:4a:ca:4c:f5:43:66:12:
e1:b9:9a:43:d6:73:39:57:30:e8:4a:79:0c:85:79:91:29:04:
79:b6:26:11:58:e1:fa:25:58:75:8e:41:fb:88:66:b9:d1:09:
04:8b:15:06:81:57:7e:b7:19:85:35:eb:ca:fd:67:eb:c4:43:
88:22:47:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:27:53 2026 by rpki-client