
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
File: -iKAHFKuKl_EkbfL6-aO_KLI0dk.mft (raw, json)
Hash identifier: o21fdHwd27Ph8O0N2zOGUDcz9RnczHkuHhPC6yGEaBc=
Subject key identifier: 7E:3B:84:82:30:FA:94:45:5C:55:10:28:59:DE:9A:EE:F1:1C:A2:3F
Authority key identifier: FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9
Certificate issuer: /CN=A91D837B/serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9
Certificate serial: 0136
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
Manifest number: 0132
Signing time: Mon 27 Jul 2026 07:36:23 +0000
Manifest this update: Mon 27 Jul 2026 07:36:22 +0000
Manifest next update: Mon 03 Aug 2026 07:36:22 +0000
Files and hashes: 1: -iKAHFKuKl_EkbfL6-aO_KLI0dk.crl (hash: 0Luo9P2UYAXMeQ5qv897je6CGUTIt6FaZ0ndhVqUarE=)
2: 8F7DFE66C96E11EF98B64E15C4F9AE02.roa (hash: 0O2Y56VE28BDUyW/y7K+tvSZF089IWlNTSJ1ih9VrPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl
rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D837B, serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9
Validity
Not Before: Jul 27 07:36:22 2026 GMT
Not After : Aug 3 07:36:22 2026 GMT
Subject: CN=6a670a76-1862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:89:37:61:57:ee:2e:53:ce:82:06:e1:3e:
2f:ad:d9:20:81:24:38:e8:5a:53:c6:6c:5b:a5:af:
55:19:f2:27:42:02:7e:a9:5a:38:5e:b7:5c:d3:37:
91:94:19:5f:c3:14:ac:f0:2d:cd:4a:cd:96:da:17:
10:70:a4:50:1a:10:c0:7b:8e:1f:66:f9:98:db:62:
a8:93:7a:45:56:51:39:04:f4:6a:1c:12:31:9c:ed:
f7:64:02:9d:c4:e4:6f:0e:f9:d3:bb:36:7d:b8:0a:
19:b7:8d:d9:12:8e:3b:9d:e4:49:2e:06:af:db:ad:
74:3c:a5:7b:86:5c:9c:d0:b1:2c:17:36:13:b5:5a:
46:a2:fd:30:f9:b2:f7:44:d3:38:a8:5c:eb:12:d7:
83:43:29:b8:2e:69:ea:31:fa:1d:46:10:8c:bf:13:
9b:84:75:e8:e2:99:97:2a:ba:03:82:74:2a:7f:06:
ff:0c:19:88:fb:51:1f:44:e1:b9:69:12:37:90:4a:
13:ac:4a:62:01:71:08:94:6b:64:71:7f:da:4e:cb:
d0:b0:41:c7:34:fb:fe:5b:02:2e:9b:6f:48:79:d8:
eb:e2:22:4b:85:df:d8:f5:ea:1d:bd:ef:87:ae:e4:
8d:ed:59:df:54:22:a5:46:0c:ed:74:24:02:ea:c1:
7a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3B:84:82:30:FA:94:45:5C:55:10:28:59:DE:9A:EE:F1:1C:A2:3F
X509v3 Authority Key Identifier:
keyid:FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ec:ac:28:bd:33:23:40:65:af:5d:43:b2:65:91:16:7d:ab:
37:3d:09:c5:b7:d1:76:ca:64:ed:50:40:20:f8:60:3b:04:f0:
e1:d2:12:6e:6d:6b:30:16:4a:ec:c6:25:ef:3d:de:c8:74:82:
79:74:a2:9c:bd:38:65:3f:8e:36:ea:c7:e4:7f:de:36:06:a5:
87:5b:ad:10:5e:4b:94:2b:ff:3f:0e:91:61:ed:52:07:89:d9:
38:c0:3a:44:56:4c:0d:06:8a:2f:73:d9:db:e8:84:82:ac:df:
20:f6:2c:f5:3a:6a:9b:ed:0e:4b:24:f4:b4:65:3e:e1:cb:65:
d6:54:8f:4d:05:9e:8c:b0:79:dd:42:55:1c:f4:b0:21:1e:ff:
a2:a8:47:0c:7b:06:e6:5e:1b:a0:ba:bf:04:06:d6:b9:41:d8:
12:ab:9e:b4:06:8e:8a:ce:d5:55:84:f0:a7:41:ba:3f:d4:df:
9c:dc:05:c1:1f:e6:42:bb:0b:d5:f8:6d:59:1d:61:ec:c7:40:
58:3d:00:55:2a:3a:2f:5f:88:67:9f:9d:9a:86:59:22:f4:d1:
29:16:2a:c0:e5:8b:6b:5a:4d:e7:e6:aa:b2:b3:73:ab:33:c3:
e8:89:1e:d7:3b:60:4c:b1:8c:b4:95:c9:04:27:95:97:66:4f:
53:06:3c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:29:23 2026 by rpki-client