
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft
File: ibqQy31EKoOHxquTBzjKIA4Te60.mft (raw, json)
Hash identifier: GZv2zdPIMMyXcqPlar8yS1NkEcNt9dGLpzg+2FvQ4Vk=
Subject key identifier: DC:63:54:7A:49:08:46:F2:E1:35:33:66:2E:84:B0:F3:C8:BB:D1:E0
Authority key identifier: 89:BA:90:CB:7D:44:2A:83:87:C6:AB:93:07:38:CA:20:0E:13:7B:AD
Certificate issuer: /CN=A91DD25E/serialNumber=89BA90CB7D442A8387C6AB930738CA200E137BAD
Certificate serial: B9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft
Manifest number: B6
Signing time: Mon 21 Sep 2026 06:57:45 +0000
Manifest this update: Mon 21 Sep 2026 06:57:44 +0000
Manifest next update: Mon 28 Sep 2026 06:57:44 +0000
Files and hashes: 1: ibqQy31EKoOHxquTBzjKIA4Te60.crl (hash: x7NlMqMpobUoLKjlzrS5HqZIxsPZRuoOvIo248G+yvM=)
2: 9CF6A89AA27B11F09D816A4BC4F9AE02.roa (hash: +KgRGtvBsNKgJ1bmGzJ3c6UPRBi5OzU225sJX+Gg66A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.crl
rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:57:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD25E, serialNumber=89BA90CB7D442A8387C6AB930738CA200E137BAD
Validity
Not Before: Sep 21 06:57:44 2026 GMT
Not After : Sep 28 06:57:44 2026 GMT
Subject: CN=6ab0d569-a1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:da:74:17:b6:35:de:0f:89:84:04:eb:b8:
fe:4c:55:e4:5c:38:6e:97:36:15:9d:a0:c0:88:83:
e8:02:85:67:a0:7e:70:60:c8:2a:7d:77:85:ee:4e:
92:ad:b0:d0:32:03:1c:d4:5a:6d:03:a5:34:cd:1f:
b8:fa:96:af:41:d3:d1:de:a0:2d:be:25:be:9d:19:
c8:52:bc:fe:63:62:3f:fa:b3:1e:43:e7:20:a4:39:
51:7d:0b:a7:ca:01:42:dc:76:9d:82:b9:47:c0:f4:
05:ce:f8:91:62:af:d6:93:0c:07:f5:fe:2c:55:4e:
94:d0:37:5f:37:3b:fb:e9:68:1e:43:63:94:28:2f:
d5:d8:16:0d:cb:a6:b6:ee:17:50:1a:80:0a:4f:72:
0b:94:dc:7a:29:a9:4e:77:6e:2e:bb:9b:17:6b:b4:
f9:d1:e8:32:7e:59:da:b8:e9:83:6a:dd:86:5c:4a:
79:d8:04:a9:12:f4:1d:8e:b1:e2:00:fb:75:7f:f4:
7b:7a:98:0b:94:11:3e:5f:c2:bc:8b:f4:87:90:25:
1f:61:e9:d7:16:90:d4:cc:4f:bb:ea:d6:6b:cb:bc:
13:43:06:83:75:71:41:f8:24:04:0f:6c:eb:3a:c5:
3c:56:81:35:a9:56:bd:bc:54:5c:78:e2:3a:33:4f:
a2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:63:54:7A:49:08:46:F2:E1:35:33:66:2E:84:B0:F3:C8:BB:D1:E0
X509v3 Authority Key Identifier:
keyid:89:BA:90:CB:7D:44:2A:83:87:C6:AB:93:07:38:CA:20:0E:13:7B:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:d5:fb:d1:a4:6c:d8:12:76:0b:3c:e7:6d:65:6f:3d:ae:d9:
d7:9e:c9:cb:f1:54:e9:b4:0f:c3:1f:01:91:a6:8d:a1:25:73:
18:92:49:20:3d:fe:40:1f:7c:56:ad:46:7a:c0:29:be:c9:75:
7e:53:66:9d:d7:58:82:eb:ba:be:76:95:99:48:ea:fb:50:b5:
7f:2d:14:12:24:3d:79:5b:0b:7d:e2:8e:ef:d8:16:27:71:ac:
9c:04:e4:00:39:13:56:da:0f:73:26:63:3e:b6:34:39:d9:c7:
63:06:fa:9b:74:88:a0:03:f9:16:48:39:49:bd:4c:9e:cf:44:
bb:9d:a7:81:87:bf:2a:af:1c:6a:47:cf:a2:5e:46:c5:98:da:
aa:d7:cf:69:7a:63:f7:d8:47:9e:4f:28:32:0a:c4:bd:d0:b3:
29:d0:14:de:bf:d2:6c:6f:1a:78:b1:54:6a:c0:bc:a6:eb:ff:
3b:7f:68:de:a7:72:ba:ef:48:eb:6a:b2:49:08:ab:c8:48:50:
af:df:75:00:a1:5d:18:44:33:5a:af:30:c3:20:2a:1a:23:f8:
bd:d6:44:2c:94:3c:d2:3f:ee:13:75:71:76:70:af:75:45:f2:
66:c1:63:3c:b6:1e:47:04:32:be:df:f3:ed:c2:3a:e3:69:5e:
38:db:17:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:35:18 2026 by rpki-client