
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft
File: ijL6yit6Kieb3e2pT1iNAGddgKQ.mft (raw, json)
Hash identifier: uiK86ZL/mlBPmUD8ox3ikpX/N6c5nJQrb5tot3pmd5I=
Subject key identifier: 48:0C:67:B7:F4:B5:17:F1:45:DA:19:4F:3E:78:E7:AB:4A:44:9A:D2
Authority key identifier: 8A:32:FA:CA:2B:7A:2A:27:9B:DD:ED:A9:4F:58:8D:00:67:5D:80:A4
Certificate issuer: /CN=A91D6835/serialNumber=8A32FACA2B7A2A279BDDEDA94F588D00675D80A4
Certificate serial: 63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft
Manifest number: 60
Signing time: Mon 27 Jul 2026 10:25:45 +0000
Manifest this update: Mon 27 Jul 2026 10:25:45 +0000
Manifest next update: Mon 03 Aug 2026 10:25:45 +0000
Files and hashes: 1: ijL6yit6Kieb3e2pT1iNAGddgKQ.crl (hash: jJ+pPLZ/6v6YgGjdJaU8EyTaupP+bXlW8BufdSJgagw=)
2: 8F628C6C000E11F1B0B593243F6F56BC.roa (hash: +uCC4RxvvM2jLwWeFZZmtoCiHRrr+bxpylbILtMobiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.crl
rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6835, serialNumber=8A32FACA2B7A2A279BDDEDA94F588D00675D80A4
Validity
Not Before: Jul 27 10:25:45 2026 GMT
Not After : Aug 3 10:25:45 2026 GMT
Subject: CN=6a673229-85ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:ce:d9:88:10:c0:98:4e:7a:53:ef:18:ed:
85:de:ed:b3:3f:f8:d2:49:24:02:d3:31:89:74:ab:
18:d0:9c:ee:72:9e:21:12:e8:ef:12:af:bf:88:be:
3b:dc:41:31:af:95:4c:26:10:4e:71:13:0b:95:dc:
6f:75:fb:e1:a9:e1:da:6b:0c:be:e1:49:25:45:59:
d5:d7:aa:0d:74:9d:21:c3:d7:f8:01:a7:cd:eb:08:
fe:df:c9:e5:ba:de:3b:9e:5c:80:0e:0a:40:64:ac:
41:47:bb:9f:c0:5a:cc:1f:8e:2c:f9:46:03:86:61:
ff:70:5a:87:77:0a:28:bf:a6:b3:ae:c3:5f:9c:be:
a7:0c:ea:6b:81:0c:27:29:33:41:66:b7:78:7d:59:
5d:2a:5b:92:2b:83:ee:21:25:bf:44:a5:24:52:8a:
b6:45:71:98:49:fc:2f:f1:e8:6a:e4:2d:a1:ae:27:
75:f3:cb:06:0d:c8:05:10:08:f0:b6:99:e8:18:0e:
cd:92:c4:14:55:7e:67:fe:5c:64:37:b5:c9:81:20:
09:1b:4f:1a:3d:9a:a6:d2:8b:16:68:b3:49:6b:71:
d6:be:22:47:8c:f4:ce:38:65:29:46:75:3c:98:98:
7e:86:be:e3:63:60:59:ce:26:39:e7:96:6d:d7:63:
12:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0C:67:B7:F4:B5:17:F1:45:DA:19:4F:3E:78:E7:AB:4A:44:9A:D2
X509v3 Authority Key Identifier:
keyid:8A:32:FA:CA:2B:7A:2A:27:9B:DD:ED:A9:4F:58:8D:00:67:5D:80:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:74:e0:31:d6:d2:1a:93:90:3c:69:0a:fd:2a:ee:59:12:2d:
fe:20:87:76:97:af:b3:9f:48:9a:c7:64:0e:1c:08:f2:94:fc:
a9:4a:fd:33:e7:1c:2d:4b:79:91:b4:8d:9f:24:61:2d:60:2f:
a1:01:bb:b0:32:b5:ad:9c:9e:09:69:5a:93:85:c6:1e:c6:dd:
94:f6:a4:2d:86:e2:01:89:c3:60:50:69:ad:df:1a:0b:b9:eb:
ff:d4:3e:21:14:c3:b2:4d:e0:5c:57:2d:08:76:a6:70:38:f5:
cc:eb:b8:ae:38:c1:42:52:f5:f2:bf:50:c9:cf:e0:fd:b5:5e:
3b:3f:da:5e:7a:71:22:ac:59:3b:fd:34:91:e0:fb:ec:d9:87:
e7:6f:8e:8a:76:bd:81:77:b1:20:2c:04:c3:fd:48:e3:5b:56:
f7:7e:93:d7:40:08:e0:5b:e7:0f:b8:79:95:bd:88:dd:fa:16:
0f:05:ba:af:73:b5:8c:50:92:fe:1f:09:a8:59:af:34:0b:24:
45:a4:68:ad:36:e5:41:19:43:93:47:bd:e5:fc:0e:4a:57:7a:
77:4b:c5:e8:94:ea:17:d4:c6:a9:61:8a:a9:eb:8f:0f:a8:e4:
4b:c1:e8:b2:0c:51:68:f0:31:57:40:a5:60:b9:d3:37:85:f9:
10:70:ed:ab
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
NjgzNTExMC8GA1UEBRMoOEEzMkZBQ0EyQjdBMkEyNzlCRERFREE5NEY1ODhEMDA2
NzVEODBBNDAeFw0yNjA3MjcxMDI1NDVaFw0yNjA4MDMxMDI1NDVaMBgxFjAUBgNV
BAMTDTZhNjczMjI5LTg1Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6KM7ZiBDAmE56U+8Y7YXe7bM/+NJJJALTMYl0qxjQnO5yniES6O8Sr7+Ivjvc
QTGvlUwmEE5xEwuV3G91++Gp4dprDL7hSSVFWdXXqg10nSHD1/gBp83rCP7fyeW6
3jueXIAOCkBkrEFHu5/AWswfjiz5RgOGYf9wWod3Cii/prOuw1+cvqcM6muBDCcp
M0Fmt3h9WV0qW5Irg+4hJb9EpSRSirZFcZhJ/C/x6GrkLaGuJ3XzywYNyAUQCPC2
megYDs2SxBRVfmf+XGQ3tcmBIAkbTxo9mqbSixZos0lrcda+IkeM9M44ZSlGdTyY
mH6GvuNjYFnOJjnnlm3XYxIxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUSAxnt/S1
F/FF2hlPPnjnq0pEmtIwHwYDVR0jBBgwFoAUijL6yit6Kieb3e2pT1iNAGddgKQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2ODM1LzQ2NUNGNUEyMDAw
RTExRjFBNkIzMTQ4QjNFNkY1NkJDL2lqTDZ5aXQ2S2llYjNlMnBUMWlOQUdkZGdL
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaWpMNnlpdDZLaWViM2UycFQxaU5BR2RkZ0tRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2
ODM1LzQ2NUNGNUEyMDAwRTExRjFBNkIzMTQ4QjNFNkY1NkJDL2lqTDZ5aXQ2S2ll
YjNlMnBUMWlOQUdkZGdLUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA+dOAx1tIak5A8aQr9Ku5ZEi3+IId2l6+zn0iax2QOHAjylPypSv0z5xwtS3mR
tI2fJGEtYC+hAbuwMrWtnJ4JaVqThcYext2U9qQthuIBicNgUGmt3xoLuev/1D4h
FMOyTeBcVy0IdqZwOPXM67iuOMFCUvXyv1DJz+D9tV47P9peenEirFk7/TSR4Pvs
2Yfnb46Kdr2Bd7EgLATD/UjjW1b3fpPXQAjgW+cPuHmVvYjd+hYPBbqvc7WMUJL+
HwmoWa80CyRFpGitNuVBGUOTR73l/A5KV3p3S8XolOoX1MapYYqp648PqORLweiy
DFFo8DFXQKVgudM3hfkQcO2r
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:01:42 2026 by rpki-client