
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft
File: iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft (raw, json)
Hash identifier: a1l0FZUF+rswlCWS7oW4b3P54RbHrdL6u6U5ftrRTIE=
Subject key identifier: 3B:98:A0:B4:41:97:6E:68:0C:25:59:5A:EB:5E:F9:DA:AA:41:4B:A1
Authority key identifier: 89:02:68:FD:25:C7:79:E3:6F:BB:87:2F:60:13:F3:04:15:FF:A2:DD
Certificate issuer: /CN=A91D2B9A/serialNumber=890268FD25C779E36FBB872F6013F30415FFA2DD
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft
Manifest number: 38
Signing time: Fri 17 Apr 2026 08:19:50 +0000
Manifest this update: Fri 17 Apr 2026 08:19:49 +0000
Manifest next update: Fri 24 Apr 2026 08:19:49 +0000
Files and hashes: 1: iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl (hash: DcjZQhPKGX9cm+c7X0tO+kAoHqSAVEMsTiPgeQtu360=)
2: 75431F44F12311F09E054F8D4F6F56BC.roa (hash: dSpl28NojgoPbGTH9IFDprulOgPwqOMWIzrfbBeiOaI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl
rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2B9A, serialNumber=890268FD25C779E36FBB872F6013F30415FFA2DD
Validity
Not Before: Apr 17 08:19:49 2026 GMT
Not After : Apr 24 08:19:49 2026 GMT
Subject: CN=69e1ed26-2191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:af:c7:75:4c:27:3e:4b:73:5e:94:a6:12:42:
27:c0:10:f1:c9:c6:73:8c:6a:49:51:83:31:40:11:
c8:03:73:bc:c4:a3:15:fe:dd:0f:88:8c:af:8b:90:
40:20:2c:eb:8e:cd:46:9b:6a:09:7e:62:f9:a7:62:
4b:50:e0:ac:a4:4a:0c:9a:0c:fe:1a:13:5e:e2:10:
0d:df:a2:b1:3e:09:10:e1:58:b0:90:56:e3:27:f6:
70:3b:e9:be:9f:b0:11:9f:fe:c1:c8:a4:27:65:28:
9a:dd:8b:6d:79:ed:3a:03:ff:9b:da:89:85:f8:a0:
62:b7:dc:bd:34:d0:e9:73:e6:5b:29:4e:41:9f:7d:
e4:e3:1a:e9:6a:52:0e:65:33:38:eb:25:89:c3:e6:
33:dd:fa:28:e7:fa:19:7e:0c:dd:af:40:df:f9:87:
4c:72:e3:b3:fe:73:ee:4c:99:07:57:75:72:50:3a:
4a:09:85:b7:ad:b4:c4:7a:b3:67:cb:6d:46:10:78:
12:cf:3f:8a:54:1a:ac:44:c3:3e:c6:70:b9:0c:93:
8c:81:e3:53:f3:00:71:ab:92:b6:97:c4:78:4a:67:
d6:6c:45:dc:b4:3d:95:3e:44:09:34:24:39:40:c6:
e3:3c:ed:92:77:38:64:55:b9:da:98:d2:4f:7d:b7:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:98:A0:B4:41:97:6E:68:0C:25:59:5A:EB:5E:F9:DA:AA:41:4B:A1
X509v3 Authority Key Identifier:
keyid:89:02:68:FD:25:C7:79:E3:6F:BB:87:2F:60:13:F3:04:15:FF:A2:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:ed:65:df:51:b4:1c:a1:35:df:29:87:a9:71:40:46:8c:71:
4d:8c:8f:08:2d:60:38:17:a3:8b:38:6a:27:a5:21:05:be:d4:
af:34:74:f6:80:3a:bb:32:f2:a8:05:a7:ef:f9:e7:37:57:a4:
9c:72:5e:0b:70:a4:65:a2:eb:94:ec:e3:6c:2a:69:2e:3d:d4:
d1:1e:3b:f7:8f:ee:a1:50:6f:60:c8:64:61:2c:24:4e:40:77:
b6:8d:6e:6e:53:90:65:39:02:dd:54:47:8c:01:2e:8b:c1:fc:
19:4e:f4:0c:65:18:f3:11:a1:30:ea:63:ce:2e:70:12:fe:87:
56:1c:24:fa:87:d9:3c:ca:44:ae:83:20:e1:b8:01:40:11:f2:
0e:16:d4:0b:42:1d:fc:ca:41:aa:19:7b:16:7a:3a:56:61:23:
d8:53:d8:44:1c:cb:fa:c4:df:30:7c:9f:30:2c:d5:54:06:07:
a6:94:f2:cb:c5:31:17:33:24:16:58:e1:d0:c7:3f:3f:88:5d:
0b:f9:55:05:3c:dd:54:da:ac:04:82:12:76:ff:68:73:c5:5e:
7a:af:32:5e:18:08:ac:f0:db:87:fd:1e:62:57:7e:ad:c3:8f:
b1:36:29:5f:d0:d8:66:06:23:c4:f3:21:a0:e8:af:d3:a6:87:
f7:32:7c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:48:16 2026 by rpki-client