
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
File: iXCkAMzM8BCTPDMMN2Ch7F204K0.mft (raw, json)
Hash identifier: 3BKjTIgsN3k+B2x18JiYcT1q9o98A7/mb+rLc4bu+lU=
Subject key identifier: BA:7A:CA:5B:E1:C6:2B:4E:9B:8B:FB:5D:12:DF:E5:67:B3:86:F9:1E
Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD
Certificate issuer: /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD
Certificate serial: 05E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
Manifest number: 05DB
Signing time: Thu 16 Apr 2026 22:54:20 +0000
Manifest this update: Thu 16 Apr 2026 22:54:20 +0000
Manifest next update: Thu 23 Apr 2026 22:54:20 +0000
Files and hashes: 1: iXCkAMzM8BCTPDMMN2Ch7F204K0.crl (hash: Q9/0TKJHf9JGI0vQRd8Y6GnbOk2KENziK2oC1SQv6MU=)
2: AD1469EC7A3911ECB5639D41C4F9AE02.roa (hash: A+KmJdUugPsA3jAkxWcxLu/k5vPqJeyn3ew/1Ms3MTQ=)
3: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (hash: d8MrH6JxdvkZ8bmYCUsbjAAgnFmtKv67lKs9/PuVhBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl
rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:54:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1513 (0x5e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C92DC, serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD
Validity
Not Before: Apr 16 22:54:20 2026 GMT
Not After : Apr 23 22:54:20 2026 GMT
Subject: CN=69e1689c-cd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:87:66:f7:47:1e:0b:5d:ca:25:27:67:d0:cf:
67:7e:24:e9:64:9b:80:7f:a7:2d:bb:dd:a9:b0:8b:
74:68:de:76:8b:b7:fe:00:89:34:bd:b0:30:e7:f4:
bd:f1:1b:1b:5b:59:60:99:22:43:46:50:1f:e3:f8:
6a:8a:dc:f7:56:af:5d:9b:d0:9d:17:d7:dc:a5:9d:
e8:9a:cf:63:c0:b0:95:50:ff:df:fd:82:fd:cb:c5:
64:5b:d5:93:72:5b:ed:27:c7:0a:27:30:f7:22:77:
46:97:f4:54:b4:1c:f3:11:bb:d1:b1:f7:d0:21:76:
12:e9:7b:4f:67:b6:00:45:65:2a:f0:df:bb:3e:8a:
81:db:0d:c1:3c:9b:6d:fa:80:b0:2b:fc:63:f6:ec:
f7:1a:e9:1d:80:c3:81:15:7b:fc:a9:18:92:53:49:
23:7d:02:5a:62:9a:18:1e:1d:39:4d:66:3d:91:20:
e8:9b:71:fe:8f:da:05:03:ba:41:92:ff:25:f9:f1:
b9:2b:79:2b:6d:6b:5c:46:72:2d:ac:f7:e1:e5:16:
11:70:a8:d9:3b:a9:f0:2c:60:b4:1d:94:9c:9a:90:
14:19:66:65:7d:f9:23:85:2f:4b:f5:0b:42:62:88:
af:65:cc:1a:50:16:77:c4:f0:63:e2:58:d9:a6:1f:
67:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7A:CA:5B:E1:C6:2B:4E:9B:8B:FB:5D:12:DF:E5:67:B3:86:F9:1E
X509v3 Authority Key Identifier:
keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:55:e0:44:80:ec:72:6f:ca:ba:88:9e:b1:eb:68:57:fd:99:
b5:21:93:30:ea:1c:99:95:6e:f1:05:69:3b:24:7b:0e:7b:bb:
1b:95:3f:40:39:87:15:8b:34:d5:ed:0a:83:24:af:66:08:5e:
cf:6e:e8:f8:bf:98:76:25:c7:c0:9f:45:a8:16:93:5a:52:c0:
be:4d:47:f0:06:b7:89:25:16:40:50:2f:f7:72:3a:5f:4c:f4:
32:06:3d:09:ba:65:a0:88:3a:e3:60:c7:2b:92:a5:92:ca:ac:
04:5f:21:3f:7b:ee:77:48:26:49:3d:2d:ef:44:ec:60:46:5b:
f2:b6:02:0f:42:51:b2:68:1e:ad:d6:7f:0d:8a:da:6a:58:c4:
6a:5b:9f:02:76:18:6c:82:c5:d6:e5:2c:19:a6:e6:06:8d:90:
1c:91:58:2d:86:9b:30:54:be:c5:b9:40:22:ee:77:c4:ae:01:
75:04:3c:1c:9b:a6:0e:62:13:33:2a:61:96:52:04:0f:2c:ab:
fb:f0:4e:d9:13:89:ab:ef:78:46:cc:39:d0:fb:cf:2f:1d:42:
4b:bd:95:fa:34:5b:03:bb:0a:db:86:85:5d:c3:91:a4:a7:23:
f6:88:14:41:8c:65:8a:55:d5:b6:21:cc:3a:2c:42:cf:68:25:
d9:2f:23:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:16:41 2026 by rpki-client