
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft
File: iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft (raw, json)
Hash identifier: VIGuPbX5OUmToOpAeM863voiE9Wf0irLys88QMrRIyk=
Subject key identifier: 3C:16:6E:B1:22:99:91:70:A5:6A:70:EC:9F:CA:75:0D:77:A0:F5:E6
Authority key identifier: 8A:A8:78:65:26:85:23:46:83:93:72:63:1D:FB:09:98:4B:C3:00:5E
Certificate issuer: /CN=A91D4413/serialNumber=8AA8786526852346839372631DFB09984BC3005E
Certificate serial: 0B60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft
Manifest number: 2CF5
Signing time: Fri 12 Jun 2026 15:53:09 +0000
Manifest this update: Fri 12 Jun 2026 15:53:09 +0000
Manifest next update: Fri 19 Jun 2026 15:53:09 +0000
Files and hashes: 1: iqh4ZSaFI0aDk3JjHfsJmEvDAF4.crl (hash: Aed2JW4TQpI6F6HRcA2wEGinuVwBhedO0kEXOJq1p1k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.crl
rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:53:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2912 (0xb60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4413, serialNumber=8AA8786526852346839372631DFB09984BC3005E
Validity
Not Before: Jun 12 15:53:09 2026 GMT
Not After : Jun 19 15:53:09 2026 GMT
Subject: CN=6a2c2b65-99c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3e:ec:b8:7d:c6:6c:fb:f8:e5:a4:6e:a0:53:
b7:63:12:75:7e:d8:fc:d9:b2:76:cc:7e:1e:d0:0c:
9c:6b:1f:94:be:89:8f:78:96:b5:2a:10:86:30:05:
0e:b2:76:ac:93:2e:0f:7d:ba:02:d0:d6:1a:05:82:
08:32:65:43:eb:45:c5:6d:02:6e:bb:1b:7e:c3:a3:
1f:3a:53:1f:b4:5c:a5:5b:e2:fc:da:49:be:e5:20:
9a:b1:0a:0f:d4:9b:48:cb:73:a4:b0:fc:ba:bc:01:
df:af:ab:1d:bf:5d:52:1e:72:43:75:88:fc:88:a7:
c9:09:75:86:40:d2:2f:c2:1c:d3:f1:4e:d5:fd:fd:
de:82:ab:33:6c:3a:18:91:b9:ee:19:78:f5:b1:e4:
0a:43:d8:5b:3c:25:37:f1:2e:94:de:3f:0a:a9:b8:
70:08:3b:79:cb:89:42:32:4f:9f:08:14:76:8b:dd:
c1:93:4f:89:54:4c:a6:6a:ec:48:7c:02:cb:af:20:
3b:0f:20:4e:19:71:68:28:03:d1:26:33:1d:ba:74:
09:47:3f:bc:a7:28:8d:e1:5e:e4:29:b5:88:55:e1:
ea:a4:4b:ba:a5:5e:2b:6b:99:ce:d9:cb:75:9a:6b:
b0:85:af:08:68:d0:f3:42:df:65:aa:b8:9c:f6:42:
5b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:16:6E:B1:22:99:91:70:A5:6A:70:EC:9F:CA:75:0D:77:A0:F5:E6
X509v3 Authority Key Identifier:
keyid:8A:A8:78:65:26:85:23:46:83:93:72:63:1D:FB:09:98:4B:C3:00:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:1c:60:2e:67:ec:58:ce:59:59:df:54:34:8c:57:34:61:d0:
8f:dd:68:54:15:c9:a0:5e:d8:d3:64:f6:c8:e2:56:f5:10:22:
04:ae:ea:d4:3c:9b:64:20:3a:40:aa:64:1e:6a:79:cb:f3:08:
1f:1d:2d:4e:72:46:7c:9f:78:35:ec:af:69:dd:1c:e2:ac:a9:
3b:73:e0:19:8d:af:40:6d:f7:af:fe:62:9a:d4:63:c3:ec:c5:
86:a3:be:38:dd:b0:27:26:6d:6d:7e:2a:ac:98:9f:b8:b1:38:
b7:b3:f4:e1:28:59:e5:5e:dd:10:11:8b:03:d9:af:2a:11:b2:
a8:36:d5:b9:74:35:8f:0d:35:53:fd:6a:9b:e6:6c:ad:e9:25:
8a:40:85:0c:d1:52:b3:03:fa:55:c6:22:9b:ec:26:94:97:61:
ea:c2:9a:4e:30:b8:5f:63:9c:96:3b:b7:19:b0:c3:4d:73:d4:
ac:d3:1d:fc:f7:fb:17:67:77:75:f9:2d:3c:6f:bf:e0:2d:ad:
71:3c:ea:4b:61:fc:42:20:0a:bd:30:1d:71:86:ba:fb:ce:cc:
a3:79:9a:9a:c8:9b:e7:de:4a:3e:6c:f4:8c:44:cd:a7:e4:01:
13:fd:3d:b3:1a:65:ef:a5:b8:df:ca:0a:f1:6c:47:90:46:24:
01:ad:6e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:13:08 2026 by rpki-client