
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft
File: IlPgspHkNQSp2iaP28xaDjF-bME.mft (raw, json)
Hash identifier: BqgN6O6qWgPPEn2x8Q2/tDbA/2qHI2TK60GMn44Aff8=
Subject key identifier: C7:7B:78:D8:75:4D:9B:26:69:63:85:86:EB:E9:FE:DF:CE:9A:0B:1E
Authority key identifier: 22:53:E0:B2:91:E4:35:04:A9:DA:26:8F:DB:CC:5A:0E:31:7E:6C:C1
Certificate issuer: /CN=A91D1FD2/serialNumber=2253E0B291E43504A9DA268FDBCC5A0E317E6CC1
Certificate serial: 51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft
Manifest number: 4E
Signing time: Tue 13 Oct 2026 09:07:10 +0000
Manifest this update: Tue 13 Oct 2026 09:07:10 +0000
Manifest next update: Tue 20 Oct 2026 09:07:10 +0000
Files and hashes: 1: IlPgspHkNQSp2iaP28xaDjF-bME.crl (hash: qKgmrdVKMn5xzh7UUUIDj9TZ6TcJoHn66gl3m8RIkh4=)
2: A213FF8E535211F184FC032898833773.roa (hash: /sb5ONI+bRGD73MyIUMkM893RApQNOS9VkRgEjeAKps=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.crl
rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 09:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1FD2, serialNumber=2253E0B291E43504A9DA268FDBCC5A0E317E6CC1
Validity
Not Before: Oct 13 09:07:10 2026 GMT
Not After : Oct 20 09:07:10 2026 GMT
Subject: CN=6acdf4be-3664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:4a:e7:df:9f:7f:b9:f0:1e:e6:fa:48:c2:
db:fe:b3:75:46:28:c4:e5:e7:ce:44:90:95:b8:1b:
a1:98:6c:23:9e:53:b0:3d:ea:30:86:36:65:17:f4:
f4:f4:f1:16:e3:98:1b:67:49:88:28:82:27:22:a4:
3b:9d:84:6a:29:45:3b:4f:31:be:bf:81:7e:b6:cc:
57:79:17:ab:64:9a:37:3e:1b:b4:72:d5:81:d4:b2:
25:15:29:8d:06:b4:10:e8:5c:c7:ee:57:46:ed:29:
65:bf:7b:ab:da:38:63:dd:09:b8:99:5e:4c:3e:3f:
93:05:9e:23:57:4f:89:63:0b:eb:be:3a:1c:53:c0:
3d:94:11:04:2c:82:47:97:15:1a:e0:ac:7f:bc:08:
5f:3f:60:81:2d:25:d2:31:32:60:37:5c:1b:df:f2:
a4:10:5d:67:6b:dd:6d:a8:6f:11:9d:8a:e7:9f:56:
d1:da:91:c4:72:cb:ba:7b:cc:6c:64:c8:c8:88:68:
18:ac:ab:ad:19:c4:ee:6c:bc:ec:71:ca:19:15:b2:
45:1a:01:77:bb:e1:cf:5b:78:ab:96:be:90:7e:59:
98:c7:36:9e:28:2b:9e:c3:b2:0b:7a:b6:73:eb:67:
dc:ea:14:72:4e:2d:29:a3:fc:60:d5:f3:c5:ba:9b:
00:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7B:78:D8:75:4D:9B:26:69:63:85:86:EB:E9:FE:DF:CE:9A:0B:1E
X509v3 Authority Key Identifier:
keyid:22:53:E0:B2:91:E4:35:04:A9:DA:26:8F:DB:CC:5A:0E:31:7E:6C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:6a:5d:5d:11:a8:20:aa:62:11:d2:99:1a:bf:e8:a8:da:21:
09:0b:34:fa:95:6a:6a:6a:de:39:67:21:27:b8:d0:d7:60:43:
75:41:b0:7d:2f:9b:22:64:15:3e:15:8e:e6:cb:8d:52:69:b9:
89:a0:7d:ef:a3:9f:73:8a:97:ab:f2:6f:d1:17:c0:b3:86:d9:
aa:90:6d:4b:e6:83:22:2e:b5:1b:3f:9b:83:94:9e:fe:48:fb:
1a:48:b5:2a:1e:a8:df:b8:d0:77:2c:27:8c:94:34:0d:da:16:
db:fe:e0:bf:c8:1b:cf:a7:f8:c6:38:c6:b4:66:cb:41:57:88:
9f:8d:38:ea:fa:99:e9:41:2b:1b:f6:24:f8:7d:7f:c7:1f:cd:
84:12:8c:70:0c:c4:2f:50:ef:3e:f0:b7:8d:87:35:d6:be:85:
99:83:c4:79:e3:c2:62:94:90:29:e0:e8:0c:92:ee:0e:0a:f4:
e5:93:d1:e2:74:71:b5:de:d5:75:83:b2:b3:f3:f2:1a:11:69:
6a:de:fb:45:1c:88:0d:52:c4:fa:b5:e5:9a:1b:80:71:26:29:
f1:29:44:15:c6:57:84:82:ec:86:e7:68:4a:9a:a3:77:24:93:
41:fd:55:b7:d3:ce:37:c7:6f:8c:dc:53:d7:9c:f1:d0:18:cd:
55:a5:07:e6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MUZEMjExMC8GA1UEBRMoMjI1M0UwQjI5MUU0MzUwNEE5REEyNjhGREJDQzVBMEUz
MTdFNkNDMTAeFw0yNjEwMTMwOTA3MTBaFw0yNjEwMjAwOTA3MTBaMBgxFjAUBgNV
BAMTDTZhY2RmNGJlLTM2NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmyErn359/ufAe5vpIwtv+s3VGKMTl585EkJW4G6GYbCOeU7A96jCGNmUX9PT0
8RbjmBtnSYgogicipDudhGopRTtPMb6/gX62zFd5F6tkmjc+G7Ry1YHUsiUVKY0G
tBDoXMfuV0btKWW/e6vaOGPdCbiZXkw+P5MFniNXT4ljC+u+OhxTwD2UEQQsgkeX
FRrgrH+8CF8/YIEtJdIxMmA3XBvf8qQQXWdr3W2obxGdiuefVtHakcRyy7p7zGxk
yMiIaBisq60ZxO5svOxxyhkVskUaAXe74c9beKuWvpB+WZjHNp4oK57Dsgt6tnPr
Z9zqFHJOLSmj/GDV88W6mwDRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUx3t42HVN
myZpY4WG6+n+386aCx4wHwYDVR0jBBgwFoAUIlPgspHkNQSp2iaP28xaDjF+bMEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQxRkQyLzAzQTM2RjMyNTM0
RTExRjE4OERGNjg1OTk1ODMzNzczL0lsUGdzcEhrTlFTcDJpYVAyOHhhRGpGLWJN
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSWxQZ3NwSGtOUVNwMmlhUDI4eGFEakYtYk1FLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQx
RkQyLzAzQTM2RjMyNTM0RTExRjE4OERGNjg1OTk1ODMzNzczL0lsUGdzcEhrTlFT
cDJpYVAyOHhhRGpGLWJNRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB5al1dEaggqmIR0pkav+io2iEJCzT6lWpqat45ZyEnuNDXYEN1QbB9L5siZBU+
FY7my41SabmJoH3vo59ziper8m/RF8CzhtmqkG1L5oMiLrUbP5uDlJ7+SPsaSLUq
HqjfuNB3LCeMlDQN2hbb/uC/yBvPp/jGOMa0ZstBV4ifjTjq+pnpQSsb9iT4fX/H
H82EEoxwDMQvUO8+8LeNhzXWvoWZg8R548JilJAp4OgMku4OCvTlk9HidHG13tV1
g7Kz8/IaEWlq3vtFHIgNUsT6teWaG4BxJinxKUQVxleEguyG52hKmqN3JJNB/VW3
0843x2+M3FPXnPHQGM1VpQfm
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:35:16 2026 by rpki-client