
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft
File: IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft (raw, json)
Hash identifier: jK37b0khf9XjIBigy6wKrXdyrrKFSN78PFeU4YFYSlI=
Subject key identifier: 4E:47:93:35:FA:68:9A:44:39:E1:FE:28:37:09:CB:EE:94:85:1C:AA
Authority key identifier: 22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89
Certificate issuer: /CN=A91CFFCB/serialNumber=2224294416B8465706554B52CBC56F449BC46C89
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft
Manifest number: F7
Signing time: Sat 19 Sep 2026 06:25:10 +0000
Manifest this update: Sat 19 Sep 2026 06:25:10 +0000
Manifest next update: Sat 26 Sep 2026 06:25:10 +0000
Files and hashes: 1: IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl (hash: kcfBuT7AaFC8+w1qhExQEW+KA7NV9kWO43l0WD31L14=)
2: BAEA3A3C497B11F096DCA14EC4F9AE02.roa (hash: +lH463qDPAwERrsUQl45+mVf4irW7NMTQzUVhbxqY6A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl
rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFCB, serialNumber=2224294416B8465706554B52CBC56F449BC46C89
Validity
Not Before: Sep 19 06:25:10 2026 GMT
Not After : Sep 26 06:25:10 2026 GMT
Subject: CN=6aae2ac6-0aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:14:ed:cf:07:41:1c:ec:5b:da:ff:54:14:
d7:18:8b:fc:55:47:7b:ce:03:f6:20:e2:fa:c6:93:
f7:78:7b:00:6c:c0:aa:e1:02:f1:6e:dd:02:99:18:
93:f0:4d:07:1d:db:96:0f:e0:d2:24:cb:f5:84:7e:
91:27:6a:5f:15:b1:d9:97:20:f9:fc:23:42:c6:03:
9b:95:99:07:a7:1c:18:44:c6:18:8c:6a:bd:28:84:
2b:5a:7d:5c:1a:a5:ea:18:e9:61:23:f6:aa:e6:c2:
56:64:50:72:66:fb:03:bd:8c:a5:25:f5:37:f4:d9:
72:ff:dd:84:f3:ed:af:a2:ad:bc:63:15:1f:f6:54:
81:20:bb:07:8f:34:e2:9d:bc:e3:83:22:eb:fd:f8:
79:e1:7e:19:65:53:51:2b:20:a5:3a:96:68:bc:f3:
9f:7e:75:29:b1:b6:ed:88:13:03:8e:2f:2e:71:d8:
bd:f7:ec:14:f2:39:45:38:e3:0e:30:97:93:cf:25:
99:8f:ec:91:63:bd:ab:8e:a7:50:0d:0d:bf:fa:98:
28:03:5f:2d:2a:c2:74:e0:96:57:a0:73:39:dc:e8:
ce:b2:73:b8:11:d9:9a:18:dc:e6:e0:b3:dc:6d:3b:
82:77:6b:04:c6:c9:21:a4:28:86:46:4f:ff:73:a1:
f5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:47:93:35:FA:68:9A:44:39:E1:FE:28:37:09:CB:EE:94:85:1C:AA
X509v3 Authority Key Identifier:
keyid:22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:25:e2:fb:05:ff:a6:0d:12:a6:a4:98:21:7c:79:57:26:35:
26:19:4b:7d:3d:85:c9:de:12:56:42:1d:58:84:11:0c:a7:0e:
49:17:c1:9c:36:29:3b:d4:97:a7:92:53:a0:53:15:22:9c:7e:
de:5d:1b:44:f7:6d:79:00:76:0e:64:54:5e:6d:3a:16:a4:8e:
bc:83:74:5f:0e:90:35:d7:fe:be:4f:2d:6e:cd:f2:b8:1e:52:
52:e1:6a:f6:37:86:1f:d8:cf:66:04:59:b8:48:70:7c:30:95:
cd:e3:99:c7:b2:da:df:fa:9d:86:7e:71:30:c1:77:6f:7b:cf:
60:f3:21:a8:9d:a7:01:c3:94:70:4a:97:5b:0c:7f:8c:95:f4:
8a:e0:35:45:c7:5c:05:43:69:32:b3:fc:75:48:7e:ab:30:f8:
2c:2f:80:1a:2b:8d:ed:d6:ab:b5:c5:e7:5e:c9:f0:41:02:40:
50:26:84:68:8b:70:6e:70:42:f0:be:c7:96:17:7e:0a:b3:d2:
5b:79:2e:6e:55:fc:20:b1:00:2b:f3:25:af:f3:89:3d:a0:28:
57:79:b2:29:1d:a4:c4:6c:50:0d:41:6d:d9:e6:36:86:91:1f:
31:db:ca:e8:df:79:d2:64:b9:e0:8d:d5:69:7d:92:60:fb:35:
27:f0:98:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:40:54 2026 by rpki-client