
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft
File: Ikchh2oR4tOkuYshvIT3jmT-yEY.mft (raw, json)
Hash identifier: wgF9V4hN2nKlKU86GMrJJg578fCbHF25ITUv0pU+w4Y=
Subject key identifier: 84:80:5B:CE:7C:C1:8C:F9:99:0F:D9:8D:3E:96:65:D7:C3:14:EC:32
Authority key identifier: 22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46
Certificate issuer: /CN=A91CEE6D/serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft
Manifest number: 88
Signing time: Sat 13 Jun 2026 07:36:26 +0000
Manifest this update: Sat 13 Jun 2026 07:36:26 +0000
Manifest next update: Sat 20 Jun 2026 07:36:26 +0000
Files and hashes: 1: Ikchh2oR4tOkuYshvIT3jmT-yEY.crl (hash: Nlqk+jsrDC7nRlOvAQ5GhsOhsO6IYM/y2CXfXHFSkmY=)
2: 09F2A296A02E11F08BC71221C4F9AE02.roa (hash: SOUc2IXOvl/L1pMPWSJBgclEArQVhHSL8F26Jssjy60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl
rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEE6D, serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846
Validity
Not Before: Jun 13 07:36:26 2026 GMT
Not After : Jun 20 07:36:26 2026 GMT
Subject: CN=6a2d087a-7d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:a7:78:5e:4a:4c:66:28:86:74:66:17:4d:
09:be:8a:b7:60:90:e6:ba:50:f0:9d:fb:03:d0:fa:
b2:ab:63:0a:04:1f:bd:4b:9f:07:97:60:2a:78:4a:
56:32:b3:fd:5d:1c:31:23:39:a8:7a:67:81:9c:5c:
79:67:67:35:01:c7:8d:0a:ad:25:5e:fc:d5:3f:ff:
d0:2a:be:7d:56:8d:bb:08:33:ae:c7:1b:2c:cc:cc:
7e:fb:da:98:9d:16:bf:c2:fb:46:17:31:3e:45:6b:
1a:aa:9b:d8:79:81:31:1b:99:2c:84:b0:64:61:98:
81:da:50:54:0c:0d:88:eb:ab:90:82:61:d6:2f:05:
61:b9:b7:50:26:1b:b1:ca:be:95:84:cc:0b:db:58:
1b:8d:35:07:8a:3a:c9:af:1d:30:61:57:89:30:c4:
d4:c6:92:df:f7:b8:54:b5:22:4f:e1:0f:a4:09:fc:
6c:0c:f7:26:6a:f1:33:fa:93:5a:6b:e6:ab:78:2f:
c8:d0:2f:c9:5b:ce:8f:c5:9e:0c:03:57:03:3d:f7:
53:f5:18:1d:ac:e7:99:19:ea:0d:31:fb:63:45:2b:
72:3f:ee:c2:aa:86:c7:3c:59:b7:1d:23:9e:8f:24:
a3:c9:d4:d8:09:8c:f7:45:b2:24:4e:2d:a7:3f:a1:
01:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:80:5B:CE:7C:C1:8C:F9:99:0F:D9:8D:3E:96:65:D7:C3:14:EC:32
X509v3 Authority Key Identifier:
keyid:22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:56:5f:f6:ef:40:50:4d:8b:ef:ae:2b:47:48:23:f5:10:cc:
48:45:24:27:bb:f0:b8:a4:78:dd:13:ab:94:63:16:04:8e:76:
9e:ce:7b:15:2c:6b:dc:c7:d5:9d:1b:52:77:b7:50:ad:f9:b8:
cf:b4:d4:1b:9f:15:af:6d:31:26:90:d2:5a:57:92:3f:e9:9a:
5f:7b:6b:f6:69:37:6b:03:2a:d7:59:21:71:fa:df:87:26:ca:
77:ff:f5:67:15:75:b2:09:89:1b:40:29:4f:6b:62:a7:2c:6f:
ae:ed:8c:ae:ea:1e:eb:ca:9f:a3:9e:d4:f4:02:56:c3:73:97:
89:bd:8c:69:10:fa:ed:c3:23:c0:a4:05:10:18:1c:c3:2e:73:
f8:4d:af:41:57:99:ff:a3:aa:77:37:4e:d1:80:0c:80:34:07:
61:0c:19:73:49:7d:f5:91:eb:b1:ae:bc:5b:c1:e9:44:a1:bf:
6e:f8:7c:95:23:f2:ed:19:a6:b3:b6:1a:79:4d:b8:18:2d:9a:
e7:29:b3:4d:64:62:92:4d:bc:86:4e:dd:8c:d1:04:81:63:42:
11:a9:f7:c2:c2:e3:c3:46:2a:76:eb:d7:1c:2b:44:4e:9b:a6:
cc:f1:3a:b1:e3:b7:4f:81:f7:45:ba:a6:da:0b:e7:eb:3b:8e:
6f:87:4e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:08:32 2026 by rpki-client