
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
File: ixqAZb6Iqmwbo_7bVOCH59KttN4.mft (raw, json)
Hash identifier: VqW5Ubgm4d7MQd1X5s2V4tUiwE4iRfk52COGPPik8Z4=
Subject key identifier: C7:D3:28:75:8E:FB:66:E3:8F:2A:7D:02:22:C6:66:D8:9F:6D:67:68
Authority key identifier: 8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE
Certificate issuer: /CN=A91DC068/serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE
Certificate serial: 01BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
Manifest number: 01AF
Signing time: Sat 13 Jun 2026 04:04:02 +0000
Manifest this update: Sat 13 Jun 2026 04:04:01 +0000
Manifest next update: Sat 20 Jun 2026 04:04:01 +0000
Files and hashes: 1: ixqAZb6Iqmwbo_7bVOCH59KttN4.crl (hash: et5ZBQX1qiqcaPwbh8eU5ZSM/hPKfUeMGxO9h4Ob32s=)
2: 4D69D2D2D5DD11EEA5B1C711C4F9AE02.roa (hash: KXSh6prRPhPWK5BnqXhTsFwQImo2BvM4I7HOo4Rrn/M=)
3: 4DDA8A18D5DD11EEA5B1C711C4F9AE02.roa (hash: m02khT/jg2hbvP72RR7nK1qweNEQkqkW4mCPiNuzwrw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl
rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443 (0x1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC068, serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE
Validity
Not Before: Jun 13 04:04:01 2026 GMT
Not After : Jun 20 04:04:01 2026 GMT
Subject: CN=6a2cd6b2-cb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:34:73:ee:3f:94:0c:d8:b3:0d:06:f0:65:da:
1c:98:ef:d2:15:c9:e9:23:2f:89:ad:53:78:e8:0a:
2d:9d:28:44:b1:82:64:d1:b2:8e:0d:af:1a:48:66:
a1:8e:22:fc:8c:a3:ed:de:19:61:12:01:4e:1b:83:
f6:b7:3e:33:73:32:e5:e0:19:d3:30:26:54:87:2a:
ae:e9:24:12:31:45:99:6e:98:7a:b9:11:ed:fa:33:
a6:84:99:6e:a3:ef:c8:17:53:69:bb:b7:f9:3d:ac:
d4:6b:08:d0:22:c6:d7:77:9b:8a:57:22:91:29:dc:
ff:8f:b2:59:53:42:86:3c:36:4a:51:f2:68:2a:fc:
93:2b:43:24:3c:39:28:10:e6:93:fa:85:73:70:94:
64:68:09:6d:3c:9c:20:36:14:76:0a:a5:35:19:b6:
d3:5d:96:99:39:1c:ae:58:f8:0e:e0:58:03:b3:de:
97:1d:dc:0d:fb:13:e7:f3:1c:a5:1a:06:76:b8:7c:
68:94:18:d9:9f:35:76:c4:1e:f3:d7:cf:e7:12:50:
3f:3b:5f:89:99:d0:a1:9e:06:eb:df:39:60:87:1e:
98:e9:5e:73:90:79:51:30:e2:49:70:42:f0:8e:ca:
92:bb:1a:74:37:4c:c0:0e:c8:44:2d:f8:73:bc:a2:
be:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D3:28:75:8E:FB:66:E3:8F:2A:7D:02:22:C6:66:D8:9F:6D:67:68
X509v3 Authority Key Identifier:
keyid:8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e2:ba:24:f2:68:a1:52:41:07:20:97:d4:ba:3c:69:ed:fb:
d3:a2:f7:ff:a2:60:00:e3:5f:09:58:99:b5:7f:55:86:26:de:
5c:f6:9e:9c:3d:b1:41:70:6b:86:66:0c:1c:58:79:7f:12:08:
01:e8:a8:50:5a:70:e1:94:76:e4:12:07:65:24:26:94:5e:e1:
02:f6:90:87:7f:9a:96:8c:3e:b0:26:84:58:7e:f7:4b:7a:82:
da:cb:b4:df:5c:24:2d:5b:ee:e4:dd:7e:fb:0f:5e:f0:21:34:
7d:86:68:ac:37:04:ea:3e:2c:83:51:c8:cf:8b:16:66:e7:4b:
60:d8:31:37:ce:3b:23:ea:bf:3e:3e:70:42:cf:2c:23:de:68:
ff:41:36:91:07:fa:3f:b5:bc:45:b9:b3:22:14:35:22:31:01:
8c:a9:cc:d0:4a:b5:4a:fb:40:a9:aa:91:22:f7:86:02:f4:e3:
58:66:05:60:ce:14:58:05:80:96:ea:bc:4a:1c:c9:12:1d:9f:
29:54:c5:b5:0e:35:ea:89:9f:82:b2:77:aa:8f:3a:cc:33:d7:
ea:51:38:c8:cf:fc:d3:b7:a8:cc:d3:a0:62:d8:09:d7:8d:c3:
e7:3b:15:9b:3d:39:1d:c3:5f:02:3d:e2:50:7e:0f:70:9e:83:
df:ee:60:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMwNjgxMTAvBgNVBAUTKDhCMUE4MDY1QkU4OEFBNkMxQkEzRkVEQjU0RTA4N0U3
RDJBREI0REUwHhcNMjYwNjEzMDQwNDAxWhcNMjYwNjIwMDQwNDAxWjAYMRYwFAYD
VQQDEw02YTJjZDZiMi1jYjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmDRz7j+UDNizDQbwZdocmO/SFcnpIy+JrVN46AotnShEsYJk0bKODa8aSGah
jiL8jKPt3hlhEgFOG4P2tz4zczLl4BnTMCZUhyqu6SQSMUWZbph6uRHt+jOmhJlu
o+/IF1Npu7f5PazUawjQIsbXd5uKVyKRKdz/j7JZU0KGPDZKUfJoKvyTK0MkPDko
EOaT+oVzcJRkaAltPJwgNhR2CqU1GbbTXZaZORyuWPgO4FgDs96XHdwN+xPn8xyl
GgZ2uHxolBjZnzV2xB7z18/nElA/O1+JmdChngbr3zlghx6Y6V5zkHlRMOJJcELw
jsqSuxp0N0zADshELfhzvKK+ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMfTKHWO
+2bjjyp9AiLGZtifbWdoMB8GA1UdIwQYMBaAFIsagGW+iKpsG6P+21Tgh+fSrbTe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC9ENzdCOUQ2NkQ1
QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFtd2JvXzdiVk9DSDU5S3R0
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2l4cUFaYjZJcW13Ym9fN2JWT0NINTlLdHRONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzA2OC9ENzdCOUQ2NkQ1QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFt
d2JvXzdiVk9DSDU5S3R0TjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnuK6JPJooVJBByCX1Lo8ae3706L3/6JgAONfCViZtX9VhibeXPaenD2xQXBr
hmYMHFh5fxIIAeioUFpw4ZR25BIHZSQmlF7hAvaQh3+alow+sCaEWH73S3qC2su0
31wkLVvu5N1++w9e8CE0fYZorDcE6j4sg1HIz4sWZudLYNgxN847I+q/Pj5wQs8s
I95o/0E2kQf6P7W8RbmzIhQ1IjEBjKnM0Eq1SvtAqaqRIveGAvTjWGYFYM4UWAWA
luq8ShzJEh2fKVTFtQ416omfgrJ3qo86zDPX6lE4yM/807eozNOgYtgJ143D5zsV
mz05HcNfAj3iUH4PcJ6D3+5g5g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:38:42 2026 by rpki-client