
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json)
Hash identifier: CSVgIG5nqRGUbZHs/p87Qoe8/8Y+oWEHA1/Ix8CpANY=
Subject key identifier: 1D:B5:5D:81:60:74:18:82:4F:6B:7E:46:63:64:AD:EE:EF:1D:FB:DE
Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
Certificate serial: 0428
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
Manifest number: 0407
Signing time: Sat 13 Jun 2026 00:26:57 +0000
Manifest this update: Sat 13 Jun 2026 00:26:56 +0000
Manifest next update: Sat 20 Jun 2026 00:26:56 +0000
Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: bRcMy63S//yGUHcDsRzKOgaJzTzRnHnrxWlD/F9f6hw=)
2: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: rOANBQKPsfQ6Tk+3BJxQVcGQ9b8/ioqyWVW5xCF9Omw=)
3: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: RGbQplIoBoixh77E1ML8kaMqxyukkROuY8CpRD/mvKs=)
4: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: a/OjejWguoz8SOjUqilIOKY73TJSTeqh0jYpuVfKqTM=)
5: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: 3gy1qN11JcP8FRxi5dz6npPXSjCXwvC3iutXG65AMSI=)
6: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: s1eXFpPP1drLzWYFfSWX2mxgRfaTxGb5Di3eSFyUmzk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:26:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1064 (0x428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005
Validity
Not Before: Jun 13 00:26:56 2026 GMT
Not After : Jun 20 00:26:56 2026 GMT
Subject: CN=6a2ca3d1-11c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:84:cd:ac:f2:b7:0a:3a:33:58:3b:98:c1:d1:
c1:d3:b1:a1:f2:8f:73:98:25:eb:ee:69:db:5c:3c:
27:fe:cc:79:e7:d6:19:4b:2c:9c:49:e1:18:44:39:
62:57:50:de:67:63:34:80:fb:af:5a:fc:ff:76:a9:
8a:4a:7e:f6:08:27:80:11:eb:f8:a5:27:6d:75:3f:
69:ec:39:84:0c:fb:87:20:21:10:73:6f:07:bb:4a:
49:35:be:96:09:32:10:2c:f4:19:3f:fa:3f:45:37:
73:69:4e:d6:e5:c7:ac:f2:36:fa:22:78:d8:84:97:
bd:b2:d7:cc:e1:53:35:53:c6:51:92:0a:db:b8:35:
48:eb:51:3d:6f:24:7b:f6:19:1f:6d:9b:85:e4:a9:
84:eb:9e:bb:3e:53:52:f1:31:7f:be:d8:05:c8:66:
9b:b7:cf:57:85:51:03:3d:aa:ba:88:23:ec:89:dc:
13:2d:98:5a:60:71:e0:73:6c:3b:7a:24:b2:96:f1:
01:8d:33:ed:a3:90:57:96:40:04:05:0d:86:51:4a:
cb:d3:ae:dc:a7:6d:4e:9d:dc:0f:76:80:53:ac:1e:
86:8d:be:23:5a:2a:78:e1:a4:2d:62:94:1f:3b:f4:
00:a8:af:29:51:07:48:b8:18:3c:46:41:57:c1:3a:
36:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B5:5D:81:60:74:18:82:4F:6B:7E:46:63:64:AD:EE:EF:1D:FB:DE
X509v3 Authority Key Identifier:
keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:fa:e4:49:f0:ce:4d:66:99:49:b8:17:55:f2:e5:31:42:d2:
7d:71:b2:d6:64:04:37:42:32:b6:92:67:b8:1e:f8:b0:3d:93:
75:c2:bb:65:a8:22:cf:99:e1:08:82:6b:d5:8d:05:ad:3a:cf:
b2:8d:54:89:d1:95:29:e4:fa:54:4a:56:26:e4:48:c9:a4:0c:
0c:39:c9:9d:be:45:57:5c:b3:a4:64:70:6c:02:e6:c0:8b:e9:
ed:f3:a2:91:e5:a5:48:81:25:2c:af:d0:fa:47:19:7c:77:8e:
a3:ea:4c:6f:9c:f5:1a:99:42:fc:2a:5d:d2:2b:de:dc:09:57:
d9:89:d1:94:7d:7e:dd:d8:92:d0:01:d8:2e:27:2c:a9:2f:d8:
71:30:31:ab:e1:1f:e4:a2:a0:4a:57:1a:6a:5e:7a:f7:93:b1:
ad:c4:71:71:52:25:01:54:6f:95:8f:b7:b5:95:a4:a5:ef:5f:
ba:50:e9:b4:61:f8:23:f6:17:72:a7:24:4b:99:ef:d6:18:cb:
a6:3a:9c:d6:50:11:3e:25:68:ab:33:c0:31:52:70:46:67:69:
59:23:b4:51:67:64:4e:8c:e6:fe:96:03:61:81:7b:37:19:21:
2c:57:1b:c6:b6:5e:ba:ef:31:b3:27:9b:3b:c9:1b:3c:c5:bb:
a9:9e:8f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:14:27 2026 by rpki-client