
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
File: iX261kcCN4pu4YYw4Yv3Whcpgmk.mft (raw, json)
Hash identifier: HiqpORC1Gz1D0C8CQhouWrFrLy9/iMNrzz36L+DCEHk=
Subject key identifier: 9C:2A:54:06:1F:6D:BC:67:70:65:D8:9C:5B:7A:30:60:54:2C:6C:22
Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69
Certificate issuer: /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269
Certificate serial: 01E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
Manifest number: 01DB
Signing time: Mon 27 Jul 2026 05:18:38 +0000
Manifest this update: Mon 27 Jul 2026 05:18:38 +0000
Manifest next update: Mon 03 Aug 2026 05:18:38 +0000
Files and hashes: 1: iX261kcCN4pu4YYw4Yv3Whcpgmk.crl (hash: 72U1X8fHYohq2mqlIpvgc58VxyWReBSlhMdQNU7RdNw=)
2: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (hash: RzTaCvSWMhcAn1QVwJbuqA3HBhTH7/SoovljwgVLgeA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl
rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:18:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484 (0x1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8117, serialNumber=897DBAD64702378A6EE18630E18BF75A17298269
Validity
Not Before: Jul 27 05:18:38 2026 GMT
Not After : Aug 3 05:18:38 2026 GMT
Subject: CN=6a66ea2e-87f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:6d:a8:a2:08:5b:6d:7a:1b:63:6f:48:e3:
c2:28:01:62:8a:d7:0e:d9:6b:85:d1:f8:5a:1b:71:
86:f2:ef:56:2e:c0:32:d8:e7:24:3c:46:3e:f4:e5:
71:ed:56:e4:08:e5:53:9d:64:3a:42:f8:e8:f2:1e:
4d:75:06:0b:68:0c:f8:1c:1b:25:5d:8a:c8:96:82:
69:0c:da:62:82:2e:7f:c2:c6:fa:31:7b:0a:c7:74:
2a:a7:70:a5:ff:5d:6f:b6:12:ef:f6:0b:0f:50:41:
5d:8c:67:f8:d7:16:15:4d:f5:30:6e:49:a4:2b:27:
d2:42:bb:46:27:9d:24:54:f5:7a:10:8d:6b:1d:8d:
5c:cc:2c:ff:4d:c8:1b:16:04:fe:f6:06:05:41:52:
e1:ad:52:60:55:01:e3:da:4d:98:45:e2:8d:cf:be:
be:92:dc:b3:d9:98:c4:15:e7:21:2e:d3:4e:99:48:
43:90:98:45:42:11:0e:b6:92:91:e8:be:b0:c1:29:
2d:11:4e:88:ca:4a:66:58:40:59:48:50:fb:dd:06:
a4:f9:63:ab:65:28:69:b6:f0:4b:4c:58:b1:2a:76:
bb:f1:f9:fa:ed:29:23:33:b8:68:b7:51:57:3e:2a:
5f:13:1a:c7:dd:45:6c:63:67:52:3a:23:65:f7:8b:
65:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2A:54:06:1F:6D:BC:67:70:65:D8:9C:5B:7A:30:60:54:2C:6C:22
X509v3 Authority Key Identifier:
keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:7c:93:ce:d7:82:c7:df:4b:13:a0:04:70:d6:0c:9d:f7:97:
8a:e0:6b:9f:6e:ae:e7:7e:fb:ff:ca:23:e8:49:af:3b:12:5f:
42:65:3f:d5:b6:ae:38:b7:3c:4d:1c:2d:01:4d:5c:32:99:26:
ca:81:8e:c2:37:eb:02:1f:24:8e:70:32:cc:0b:45:bb:96:76:
08:3f:74:27:e7:12:d7:84:42:c7:e7:7c:f0:25:b7:ec:ae:b3:
bc:b6:cf:f0:e4:50:d5:55:8d:e2:bb:a5:b1:5f:63:5c:a9:e4:
8b:09:56:e3:98:6f:38:d7:b1:36:7d:8e:cc:29:6e:1c:01:3b:
29:be:43:2c:59:c2:a5:5f:b1:54:b6:4e:39:06:fd:56:9a:39:
23:d4:28:ab:1c:ec:a0:3e:f6:22:41:61:e8:c0:2b:c7:bc:90:
95:6f:ed:a4:ed:4a:60:24:0f:21:ca:3f:7b:86:f7:56:bd:47:
64:5c:47:2f:df:17:2a:0e:f0:3e:ed:85:58:28:3d:cd:22:8d:
49:a2:54:95:a8:49:7b:2a:44:14:a3:2a:bb:fb:17:f2:3e:92:
87:28:38:da:8b:09:d9:c2:53:28:55:9a:6d:29:4e:75:56:1e:
c8:cf:f9:0c:de:e4:39:65:42:a5:12:e7:f4:5d:1e:cf:5d:f5:
51:f3:17:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:08 2026 by rpki-client