
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
File: iH554lttHTfvHzG8WgIy-OdlFUU.mft (raw, json)
Hash identifier: DnXEqqUGVCn7m6QGZgAu1zZo9EXNSypUEs3vzElDJtM=
Subject key identifier: 70:A7:17:19:25:89:1E:F6:78:80:BE:B3:D3:9C:80:F8:45:BE:33:54
Authority key identifier: 88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45
Certificate issuer: /CN=A91D9F5A/serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545
Certificate serial: B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
Manifest number: 08F6
Signing time: Fri 12 Jun 2026 20:57:43 +0000
Manifest this update: Fri 12 Jun 2026 20:57:42 +0000
Manifest next update: Fri 19 Jun 2026 20:57:42 +0000
Files and hashes: 1: iH554lttHTfvHzG8WgIy-OdlFUU.crl (hash: 8Yqw5oQ2n9tNaagjF32X4dwQTIj0rN51IOeLtarfGqQ=)
2: CEFEDAB26B3D11F0A0837D7FC4F9AE02.roa (hash: B8m2ePIUCgEMFkUqEdw865bj5KYfUZe6gW5FvbGFIPQ=)
3: CF6A89D86B3D11F0A0837D7FC4F9AE02.roa (hash: w4kX8b17fTC2s9BhESajxJlKj2QyQzvAORehV2EbPSs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl
rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179 (0xb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9F5A, serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545
Validity
Not Before: Jun 12 20:57:42 2026 GMT
Not After : Jun 19 20:57:42 2026 GMT
Subject: CN=6a2c72c7-840e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2b:99:b3:98:55:b5:7c:54:b2:cc:33:68:9e:
54:6a:9c:c2:a0:4f:bd:a1:0b:c0:d1:40:85:30:9b:
53:ca:e2:4b:e9:7c:b9:2d:30:46:cf:df:f8:73:2b:
43:42:17:8d:e5:bb:15:e7:ea:3f:b7:28:69:9f:ee:
e3:68:b3:b5:39:36:c3:cd:61:71:6e:1d:47:e9:4c:
3f:b8:fa:01:a7:55:7f:8c:81:ce:5d:07:e7:93:85:
1d:77:ad:31:7f:8a:f1:62:6c:b6:3a:c0:a0:07:e0:
fc:e9:23:b3:9d:4e:63:26:62:55:09:b1:4a:04:fd:
34:d1:6f:07:a8:b4:a9:ba:0c:88:39:53:ce:b5:3b:
3c:91:8b:88:57:e4:8b:c3:5c:8a:b7:93:40:65:21:
49:f7:58:43:bf:ac:91:cb:e2:31:16:90:49:0e:bb:
4c:8f:db:d1:24:02:88:3a:b8:70:77:a4:26:13:02:
7b:a2:05:a0:d8:95:b9:8b:6d:7c:c3:0f:3d:fd:8b:
eb:d9:3e:0d:57:aa:0d:d1:34:bf:e3:10:0f:c2:65:
87:f5:70:af:d8:c6:29:60:df:4c:47:72:80:1a:e6:
1e:2b:50:56:22:62:a3:c3:21:70:35:4d:96:24:13:
38:6f:68:e4:c6:72:23:3c:32:d7:da:0d:6e:a7:f9:
d2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A7:17:19:25:89:1E:F6:78:80:BE:B3:D3:9C:80:F8:45:BE:33:54
X509v3 Authority Key Identifier:
keyid:88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:86:b8:16:47:e8:05:cb:2e:7c:45:f9:a4:39:e9:5a:52:97:
4b:bb:51:3f:c5:19:46:3b:68:1b:2d:26:43:99:4c:2d:ff:94:
2e:f4:0c:c8:66:4e:30:88:bf:3c:36:d9:78:5c:91:69:5c:40:
56:fd:e2:8b:42:f9:9b:f1:f8:ca:59:34:e1:65:aa:e1:7e:88:
53:85:d1:88:9d:e3:fa:c6:48:08:c2:c8:e6:d1:55:da:72:eb:
bd:15:51:fe:18:1e:42:c3:48:cb:e8:2e:19:dd:2f:4e:c7:4e:
dc:b0:38:30:e2:a8:d7:99:0b:8c:a6:2c:c0:7a:4f:a2:12:25:
d9:2e:91:82:57:1e:35:5d:3d:e1:2b:f5:7e:23:d6:b0:a5:3a:
e4:4a:59:53:b3:b9:07:92:ef:30:49:14:f4:ad:13:00:6d:c7:
ec:a5:37:ed:00:a0:b0:4f:19:31:83:a3:50:b3:eb:0c:66:c5:
8e:9e:a9:ce:9d:c1:71:8e:fb:21:7c:d8:e3:0a:f7:95:07:2b:
b0:ef:8d:a2:58:2d:8a:a3:c1:ae:fb:e6:10:e2:92:5d:98:6a:
68:c2:a6:0c:a7:95:61:63:c8:11:a0:76:d3:33:5e:62:5a:48:
97:b2:2d:7d:cb:a5:b6:1f:05:fd:6e:bf:4f:cf:9d:8b:31:39:
a3:d8:bb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:02:43 2026 by rpki-client