
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft
File: ibqQy31EKoOHxquTBzjKIA4Te60.mft (raw, json)
Hash identifier: nmJDU7QWh/5JBrNCUmkUsTpIk933dzj4AjZlOf9nZOE=
Subject key identifier: 87:77:0D:43:CB:BF:2A:ED:2E:EB:66:A6:E1:DA:0C:43:15:65:83:78
Authority key identifier: 89:BA:90:CB:7D:44:2A:83:87:C6:AB:93:07:38:CA:20:0E:13:7B:AD
Certificate issuer: /CN=A91DD25E/serialNumber=89BA90CB7D442A8387C6AB930738CA200E137BAD
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft
Manifest number: 81
Signing time: Sat 13 Jun 2026 07:41:14 +0000
Manifest this update: Sat 13 Jun 2026 07:41:13 +0000
Manifest next update: Sat 20 Jun 2026 07:41:13 +0000
Files and hashes: 1: ibqQy31EKoOHxquTBzjKIA4Te60.crl (hash: yNfKVQHVfx56+zSRHIcI+WPVimNCiWg+RrJm6yYIoz4=)
2: 9CF6A89AA27B11F09D816A4BC4F9AE02.roa (hash: r2L+5zqyZ6IXeM2mIQAiI2PNwo+tejqOC0YJpkywEYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.crl
rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:41:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD25E, serialNumber=89BA90CB7D442A8387C6AB930738CA200E137BAD
Validity
Not Before: Jun 13 07:41:13 2026 GMT
Not After : Jun 20 07:41:13 2026 GMT
Subject: CN=6a2d099a-4995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5d:9b:67:8c:e9:86:0e:d7:61:07:7d:16:f2:
d6:ca:87:07:5d:64:11:93:66:04:51:89:c2:1c:60:
e8:60:e3:33:a7:40:8a:c0:ff:77:70:4b:cd:cc:e9:
e1:79:1f:ab:76:a6:25:fd:0a:78:d1:a6:67:a7:6b:
75:b1:74:98:1e:20:39:b8:49:9b:85:42:cf:0f:3e:
b3:9c:02:e4:26:e5:d8:f3:e1:71:f4:32:fa:a3:01:
1c:2f:e9:99:99:a5:36:f5:a5:b5:70:ab:6d:8e:68:
37:e3:97:c9:b0:aa:aa:d0:59:bd:dd:cf:05:eb:f1:
c9:83:f7:10:3e:4b:d7:5f:23:ab:0d:bb:da:a5:a8:
06:6d:46:5b:70:54:b1:7c:58:5f:f7:a5:fe:f3:ea:
a5:b0:b2:13:df:2b:dc:f9:d3:bd:84:a7:6a:f5:15:
3e:06:4d:56:35:25:b0:94:be:e3:50:04:c2:4e:71:
ca:ae:d5:61:e9:69:f2:1a:29:0f:28:82:c2:3a:08:
41:71:82:d7:de:f5:11:5a:32:6b:12:67:c6:31:73:
c5:23:0e:aa:d4:75:e0:1c:89:8e:87:56:cc:83:41:
87:a0:5c:98:05:65:e7:f6:3e:86:c8:dd:96:fa:c5:
b4:b9:40:e3:0e:94:a5:8a:59:39:ac:8b:d7:6c:a1:
e0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:77:0D:43:CB:BF:2A:ED:2E:EB:66:A6:E1:DA:0C:43:15:65:83:78
X509v3 Authority Key Identifier:
keyid:89:BA:90:CB:7D:44:2A:83:87:C6:AB:93:07:38:CA:20:0E:13:7B:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:46:c0:fe:16:ce:3c:45:c3:2b:a3:a5:48:28:0b:59:e2:12:
3f:2e:84:b9:d8:ba:9e:75:44:a4:75:59:76:91:19:7e:dd:80:
97:b1:52:3e:51:18:4c:0f:15:b3:08:d9:42:25:2e:44:ca:1a:
d6:cd:a7:7b:20:d3:32:56:66:eb:98:1f:85:c0:81:d0:99:29:
7e:38:ab:49:ae:ab:66:05:04:52:ba:04:2f:03:12:0c:3b:2d:
fa:87:8b:af:29:7b:b2:25:4c:6f:1b:8b:ec:48:50:c8:97:6d:
d7:b1:67:58:87:e3:ab:6a:1a:f8:27:f9:56:67:27:46:d6:95:
c8:80:95:c2:f1:f8:01:9a:d3:37:a6:65:b9:65:2b:c9:94:c0:
fd:2c:5d:49:00:92:5f:7d:ed:49:e4:bb:ee:82:5b:e6:d8:1a:
5d:03:ec:9d:d5:ef:dc:90:5a:b7:4b:a7:90:88:3f:54:05:4d:
09:cd:67:50:4d:c2:c8:51:8c:b5:f1:2e:a9:d5:b5:a0:13:92:
6f:91:2c:77:8b:56:7e:9e:6d:75:f2:38:d9:88:7a:63:da:8e:
22:cf:cd:29:98:d9:a4:b9:00:ca:aa:06:17:9f:4b:09:33:7e:
6e:bb:48:db:a2:8f:7b:c3:05:75:8a:af:b4:1b:eb:20:ca:2b:
2a:12:19:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:50:05 2026 by rpki-client