
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
File: i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json)
Hash identifier: Pm/YhKSspqjJnuXcKCPZOYL9saWRYReaqIZl1/sKRPI=
Subject key identifier: 18:CC:AF:8D:56:6F:8D:9D:FC:19:BE:6F:C7:DD:EE:FE:E6:99:69:FD
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial: 082E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
Manifest number: 0787
Signing time: Thu 16 Apr 2026 21:59:13 +0000
Manifest this update: Thu 16 Apr 2026 21:59:13 +0000
Manifest next update: Thu 23 Apr 2026 21:59:13 +0000
Files and hashes: 1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: HpaZtrYdhvFPSzNVzEAocrEzW+7i8SYcrSxE0ziaeBU=)
2: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: y2QzsDAAMtUIeIRXNVIyp+738veR++Jv2+SSsvzATjs=)
3: 317095E0A28911ECBC355360C4F9AE02.roa (hash: ebFlaRUmZcQJUtMsrS9rZ+TKHMBWxmuEuoPHS8qzaoo=)
4: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: +RLs5CzvZXqI61CAHfurXr4hcnlLMlz6cCq54j5zw2Q=)
5: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: n0M+4sPO2I1QxTqzwDfkxMGQeXxQFFjm9haxwLReuy4=)
6: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: Q6rfj53pf8UB4FBvHHs00agRED73Fq/tWE6oYVaqkaw=)
7: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: Z0VkCYZ1R/4kbKogoS7s0rDtQor1LJugR/SNxu4FzT0=)
8: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: 23FlzfUUG2o+yV463/MzqJtyKQ1WBczJHj5IsGh6xFI=)
9: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: bkBhWlpijpoPZQCX/fri8xyFsJ4YVWckTUwmgGDvtWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2094 (0x82e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Validity
Not Before: Apr 16 21:59:13 2026 GMT
Not After : Apr 23 21:59:13 2026 GMT
Subject: CN=69e15bb1-8854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:d6:39:c9:af:81:0b:49:a7:d1:38:b8:4a:
c4:22:03:be:a8:c3:28:dc:54:c1:2f:56:ed:67:99:
f8:4e:82:7c:b9:26:52:22:e8:18:99:03:51:0b:48:
5d:01:41:b4:e0:22:f0:9c:12:36:64:b3:54:f2:9c:
3d:f6:11:b8:8b:67:5c:fc:8c:78:cd:b8:dd:b7:12:
7e:7c:70:81:2b:67:05:c9:ac:d9:11:69:c4:6f:41:
06:3c:19:42:4c:35:67:fe:81:7b:d0:c0:fa:6a:fc:
77:02:75:75:46:c8:9d:c1:7a:93:9a:7f:fe:73:e9:
ed:79:15:58:dc:f9:43:89:dd:c7:52:9e:05:13:e1:
8d:4d:17:f9:fb:95:c1:0a:60:17:07:fc:5f:ab:99:
51:56:ce:1a:89:36:0e:f1:66:f6:ee:05:9b:38:7e:
7b:a0:9f:fc:39:75:a9:49:b4:f9:fa:5d:f3:49:a5:
c0:b3:78:4b:ea:cc:45:2d:8f:59:9d:33:c9:68:db:
6b:8a:1c:bf:3b:af:06:d6:62:ff:71:6a:6a:13:15:
2a:2a:4c:1a:57:55:f2:5d:8b:8a:03:59:9f:07:06:
5d:26:e9:c0:07:2a:f9:37:53:61:1d:49:73:2d:6d:
98:03:01:54:14:01:76:62:6f:97:86:f8:17:9c:a2:
eb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CC:AF:8D:56:6F:8D:9D:FC:19:BE:6F:C7:DD:EE:FE:E6:99:69:FD
X509v3 Authority Key Identifier:
keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:37:b1:73:b7:9a:bb:8d:de:61:32:f7:6c:10:39:cd:83:59:
8d:fa:54:ea:cf:4f:f3:1f:54:28:13:cf:50:2d:19:1b:f1:4a:
71:c7:66:62:24:69:f0:22:12:56:fa:c8:f5:50:cd:a0:a9:65:
3e:7a:54:c9:f1:37:fa:e1:98:c1:4f:7c:4f:19:e6:f6:33:4a:
77:99:4c:65:e3:4d:6a:e2:c3:e8:74:be:74:e5:54:b2:83:d2:
fa:6f:15:e0:d5:90:1a:b8:f0:63:90:39:e9:e9:77:d2:19:85:
78:5b:da:d4:39:0d:60:73:59:21:02:98:a6:be:ea:0a:db:36:
08:d2:68:21:5c:8e:b5:94:62:d2:80:25:ad:b7:b5:ad:89:89:
33:5f:6f:56:66:ca:82:5e:89:6d:22:18:c4:bc:39:99:12:62:
42:b4:b8:e7:ae:05:f6:bd:82:32:a1:25:4d:b9:94:04:0d:2a:
e1:b9:a7:0e:13:ab:2a:33:d7:a2:5b:99:d6:78:6f:95:dc:d1:
dd:d7:8a:29:c4:68:a6:6f:c5:60:98:05:14:a9:22:97:8e:71:
9f:c3:eb:34:90:3d:2b:f3:8f:9f:4f:69:fe:da:78:ce:63:bb:
f4:4e:aa:e1:0f:82:13:c4:74:f1:1c:da:7d:82:af:86:2e:87:
3f:dc:c9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:56:39 2026 by rpki-client