
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft
File: ijL6yit6Kieb3e2pT1iNAGddgKQ.mft (raw, json)
Hash identifier: SI2MYW1EzM1XkKvVW4Rd1FRZI5d1xMnhLAEOG0+KkDs=
Subject key identifier: CF:94:9E:62:C5:F8:1F:7D:74:B8:2C:01:C4:4C:30:BD:5D:0E:B4:75
Authority key identifier: 8A:32:FA:CA:2B:7A:2A:27:9B:DD:ED:A9:4F:58:8D:00:67:5D:80:A4
Certificate issuer: /CN=A91D6835/serialNumber=8A32FACA2B7A2A279BDDEDA94F588D00675D80A4
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft
Manifest number: 11
Signing time: Sun 01 Mar 2026 10:32:40 +0000
Manifest this update: Sun 01 Mar 2026 10:32:39 +0000
Manifest next update: Sun 08 Mar 2026 10:32:39 +0000
Files and hashes: 1: ijL6yit6Kieb3e2pT1iNAGddgKQ.crl (hash: HTGNVOusAXc+kN9qGyh9HkTttk2oZXULGyc8cHCqdKY=)
2: 8F628C6C000E11F1B0B593243F6F56BC.roa (hash: jnb70Sn4O3fY3mmVpADs24ldKu4xAZRBnXiWXQmuBsg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.crl
rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6835, serialNumber=8A32FACA2B7A2A279BDDEDA94F588D00675D80A4
Validity
Not Before: Mar 1 10:32:39 2026 GMT
Not After : Mar 8 10:32:39 2026 GMT
Subject: CN=69a415c8-294c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:38:e4:87:f2:43:a2:27:f9:94:02:82:83:78:
aa:8f:81:df:f4:2d:f5:7f:84:22:34:00:d9:27:4b:
d8:ab:70:98:fe:17:ce:05:79:2c:be:06:c4:03:a0:
d1:32:8f:93:d7:f0:01:53:e9:cd:ef:a0:ab:41:6a:
c5:fc:3d:e5:3c:79:db:b1:67:e2:fd:0c:80:c7:9a:
3a:65:d2:38:55:57:78:83:56:f5:86:19:e8:3c:c3:
fb:e7:40:29:15:1e:9d:f1:b2:f3:fb:5a:a9:7b:8c:
73:ad:9c:21:76:c1:21:72:0f:07:eb:ef:62:b6:8b:
0d:88:b3:cf:2d:b9:cb:9c:8a:e3:b4:49:db:1b:f1:
eb:37:ff:89:bf:35:ee:8a:54:17:8b:2b:17:f9:08:
ee:af:6e:a0:bb:ad:79:b1:cb:e3:75:09:7a:1c:aa:
7f:1a:93:6d:b4:ba:8d:9a:53:de:31:bc:11:8e:53:
63:7b:0e:eb:78:68:48:f6:c5:2c:22:2d:d6:32:ef:
c8:cf:47:f8:05:73:ff:1e:be:bb:d1:a5:c3:5b:17:
ab:c2:cd:75:7e:6a:85:2e:a6:5b:e6:bb:d8:ea:c4:
b8:40:c9:1c:c7:f6:21:6f:c6:3c:91:81:23:ad:d8:
f0:82:27:d6:f9:e1:ce:16:af:f9:62:81:1f:9a:55:
a6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:94:9E:62:C5:F8:1F:7D:74:B8:2C:01:C4:4C:30:BD:5D:0E:B4:75
X509v3 Authority Key Identifier:
keyid:8A:32:FA:CA:2B:7A:2A:27:9B:DD:ED:A9:4F:58:8D:00:67:5D:80:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:88:30:17:c1:2f:a5:39:53:65:11:f8:6f:55:df:9f:66:11:
92:ef:0b:23:3b:cb:55:07:ae:0e:1c:35:41:1c:3c:3e:0f:e0:
83:d1:58:c1:ac:1d:6d:92:89:47:66:d9:00:5e:bc:d8:be:3e:
67:97:9b:7f:f7:40:61:60:a5:1a:09:de:e0:f3:9e:2e:bf:a0:
cd:9e:e4:80:3b:53:c3:bc:7f:30:f7:41:96:8b:01:58:87:d5:
51:6d:66:5e:91:72:dd:96:5e:66:d9:a4:44:65:2d:6b:4e:be:
75:66:c9:6e:85:5e:ce:2e:4c:e5:96:49:d2:84:81:4d:9c:fd:
5d:a7:13:30:af:02:93:e2:79:08:57:ce:db:c8:15:df:2a:6d:
d9:0c:f9:e7:3e:56:06:98:bd:80:b6:60:38:d1:f6:b3:2d:6f:
b4:19:07:07:b3:48:76:d4:60:dd:08:94:8d:af:8d:a2:d8:35:
e1:ef:0e:91:fb:eb:5d:3b:35:b5:b0:a7:f9:96:65:15:f7:8a:
31:da:75:1b:36:d5:21:75:1a:76:e5:6f:40:31:fa:5d:af:e2:
6c:94:a9:e9:8c:53:80:ec:d9:c8:13:00:73:d0:73:b3:25:89:
f8:4f:33:2d:cf:5a:c8:57:fd:88:02:89:14:66:0d:93:f9:13:
be:e4:f2:5a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
NjgzNTExMC8GA1UEBRMoOEEzMkZBQ0EyQjdBMkEyNzlCRERFREE5NEY1ODhEMDA2
NzVEODBBNDAeFw0yNjAzMDExMDMyMzlaFw0yNjAzMDgxMDMyMzlaMBgxFjAUBgNV
BAMTDTY5YTQxNWM4LTI5NGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCiOOSH8kOiJ/mUAoKDeKqPgd/0LfV/hCI0ANknS9ircJj+F84FeSy+BsQDoNEy
j5PX8AFT6c3voKtBasX8PeU8eduxZ+L9DIDHmjpl0jhVV3iDVvWGGeg8w/vnQCkV
Hp3xsvP7Wql7jHOtnCF2wSFyDwfr72K2iw2Is88tucuciuO0Sdsb8es3/4m/Ne6K
VBeLKxf5CO6vbqC7rXmxy+N1CXocqn8ak220uo2aU94xvBGOU2N7Dut4aEj2xSwi
LdYy78jPR/gFc/8evrvRpcNbF6vCzXV+aoUuplvmu9jqxLhAyRzH9iFvxjyRgSOt
2PCCJ9b54c4Wr/ligR+aVaYVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUz5SeYsX4
H310uCwBxEwwvV0OtHUwHwYDVR0jBBgwFoAUijL6yit6Kieb3e2pT1iNAGddgKQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2ODM1LzQ2NUNGNUEyMDAw
RTExRjFBNkIzMTQ4QjNFNkY1NkJDL2lqTDZ5aXQ2S2llYjNlMnBUMWlOQUdkZGdL
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaWpMNnlpdDZLaWViM2UycFQxaU5BR2RkZ0tRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2
ODM1LzQ2NUNGNUEyMDAwRTExRjFBNkIzMTQ4QjNFNkY1NkJDL2lqTDZ5aXQ2S2ll
YjNlMnBUMWlOQUdkZGdLUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCfiDAXwS+lOVNlEfhvVd+fZhGS7wsjO8tVB64OHDVBHDw+D+CD0VjBrB1tkolH
ZtkAXrzYvj5nl5t/90BhYKUaCd7g854uv6DNnuSAO1PDvH8w90GWiwFYh9VRbWZe
kXLdll5m2aREZS1rTr51ZsluhV7OLkzllknShIFNnP1dpxMwrwKT4nkIV87byBXf
Km3ZDPnnPlYGmL2AtmA40fazLW+0GQcHs0h21GDdCJSNr42i2DXh7w6R++tdOzW1
sKf5lmUV94ox2nUbNtUhdRp25W9AMfpdr+JslKnpjFOA7NnIEwBz0HOzJYn4TzMt
z1rIV/2IAokUZg2T+RO+5PJa
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:09:23 2026 by rpki-client