
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
File: 9IjcYHyL28iy8lnlOSk-EQeDPa0.mft (raw, json)
Hash identifier: h7XnrKHoxQxsYyZMDPOh2Fd2e3fmDrbsB9iyh/JkDN4=
Subject key identifier: 5A:5E:47:07:C3:63:88:1C:1A:DD:9D:EF:9A:04:67:50:D0:AC:72:93
Authority key identifier: F4:88:DC:60:7C:8B:DB:C8:B2:F2:59:E5:39:29:3E:11:07:83:3D:AD
Certificate issuer: /CN=A91DDB11/serialNumber=F488DC607C8BDBC8B2F259E539293E1107833DAD
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
Manifest number: 2B
Signing time: Mon 27 Jul 2026 11:10:53 +0000
Manifest this update: Mon 27 Jul 2026 11:10:52 +0000
Manifest next update: Mon 03 Aug 2026 11:10:52 +0000
Files and hashes: 1: 9IjcYHyL28iy8lnlOSk-EQeDPa0.crl (hash: 1xZU8YzwFdJgp1O7SVJu+cpbrR826y3xSlrQnNwBSMw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.crl
rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:10:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDB11, serialNumber=F488DC607C8BDBC8B2F259E539293E1107833DAD
Validity
Not Before: Jul 27 11:10:52 2026 GMT
Not After : Aug 3 11:10:52 2026 GMT
Subject: CN=6a673cbd-877c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:b0:ac:35:df:7b:04:6e:b7:55:6c:14:24:
74:1f:9d:66:12:c1:7e:5d:cb:db:d7:77:30:5a:84:
1f:13:e1:2e:ba:48:81:85:47:56:88:ae:a8:13:76:
6c:c9:b2:a6:c1:08:9b:9b:38:89:0a:b8:1a:c5:f7:
e4:52:ac:76:ec:85:4e:8e:93:12:7a:1a:45:04:b5:
19:a3:82:00:b1:f7:6d:37:5c:41:4c:a3:8b:53:55:
01:b0:9e:35:e4:92:69:c9:79:ee:f6:ce:d5:a6:9d:
df:85:12:52:5f:a0:3e:18:d7:7d:e4:e7:b1:b5:e3:
58:ca:42:24:5a:7d:73:eb:a4:8f:2e:c9:25:9b:33:
51:20:9e:9a:e6:43:54:67:53:3d:b0:d7:3c:81:51:
b9:4b:35:1c:a0:c7:4c:ba:11:05:c8:f8:e8:4c:3c:
81:8e:8a:81:95:e3:4e:f8:d9:2d:a4:f5:e0:ca:d6:
d4:4b:d2:d8:84:67:e1:bd:50:9f:ca:d6:31:f6:4a:
de:9d:58:bd:52:39:c6:81:e1:13:e5:2d:be:7b:2c:
ad:dc:e6:34:20:7b:2c:5c:e4:14:c8:ad:95:5c:ed:
96:72:cd:33:06:b9:94:93:99:f9:93:07:a2:c1:d6:
91:3d:73:83:97:5b:12:eb:0d:f9:e5:83:e3:19:dc:
cb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5E:47:07:C3:63:88:1C:1A:DD:9D:EF:9A:04:67:50:D0:AC:72:93
X509v3 Authority Key Identifier:
keyid:F4:88:DC:60:7C:8B:DB:C8:B2:F2:59:E5:39:29:3E:11:07:83:3D:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:cd:8c:c9:e2:a0:09:d4:5a:0c:88:52:45:64:a3:15:58:7a:
c7:e4:b0:dd:86:95:11:47:10:39:d2:6e:2c:4f:d7:a4:f0:b9:
62:3d:6a:41:bd:d7:97:34:99:bd:e3:df:ae:35:0d:bf:14:81:
28:e8:59:84:98:0c:a3:eb:86:9c:d6:b2:55:1d:bd:92:7a:f1:
c3:12:d4:77:70:19:cd:9d:6f:d4:7a:ef:da:a4:01:8c:6c:fe:
34:3d:17:56:c9:7a:1c:91:26:14:53:f5:0d:f7:a2:e8:cc:2f:
64:78:06:29:f5:60:ac:aa:2a:e0:38:d2:83:8f:80:22:46:f8:
95:3e:5b:99:35:31:a3:fc:da:2f:48:3b:2d:59:4f:ae:a4:7f:
48:7e:18:dd:d7:96:f7:57:59:03:e8:03:26:3f:9f:fb:34:d5:
ca:af:ea:bc:9b:75:28:89:e8:c7:3b:14:d7:7c:15:e4:f9:49:
bf:3f:d1:73:fa:67:c4:6a:05:2a:74:4c:f0:08:03:d1:8f:72:
89:cf:ee:15:6a:70:26:e8:76:fa:07:2b:5c:e6:16:b9:8d:3f:
19:88:cc:a1:2b:79:cd:9a:69:b8:9a:7b:da:4a:d9:06:36:b4:
8d:77:79:ef:20:f0:76:f1:d2:d4:0e:37:25:28:45:aa:0d:3e:
c2:88:ce:32
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
REIxMTExMC8GA1UEBRMoRjQ4OERDNjA3QzhCREJDOEIyRjI1OUU1MzkyOTNFMTEw
NzgzM0RBRDAeFw0yNjA3MjcxMTEwNTJaFw0yNjA4MDMxMTEwNTJaMBgxFjAUBgNV
BAMTDTZhNjczY2JkLTg3N2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC88LCsNd97BG63VWwUJHQfnWYSwX5dy9vXdzBahB8T4S66SIGFR1aIrqgTdmzJ
sqbBCJubOIkKuBrF9+RSrHbshU6OkxJ6GkUEtRmjggCx9203XEFMo4tTVQGwnjXk
kmnJee72ztWmnd+FElJfoD4Y133k57G141jKQiRafXPrpI8uySWbM1EgnprmQ1Rn
Uz2w1zyBUblLNRygx0y6EQXI+OhMPIGOioGV40742S2k9eDK1tRL0tiEZ+G9UJ/K
1jH2St6dWL1SOcaB4RPlLb57LK3c5jQgeyxc5BTIrZVc7ZZyzTMGuZSTmfmTB6LB
1pE9c4OXWxLrDfnlg+MZ3Ms5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWl5HB8Nj
iBwa3Z3vmgRnUNCscpMwHwYDVR0jBBgwFoAU9IjcYHyL28iy8lnlOSk+EQeDPa0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREQjExL0JDNTU4QjIwNEUw
NjExRjFBNjRCNjI5QUM5ODMzNzczLzlJamNZSHlMMjhpeThsbmxPU2stRVFlRFBh
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOUlqY1lIeUwyOGl5OGxubE9Tay1FUWVEUGEwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE
QjExL0JDNTU4QjIwNEUwNjExRjFBNjRCNjI5QUM5ODMzNzczLzlJamNZSHlMMjhp
eThsbmxPU2stRVFlRFBhMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAhzYzJ4qAJ1FoMiFJFZKMVWHrH5LDdhpURRxA50m4sT9ek8LliPWpBvdeXNJm9
49+uNQ2/FIEo6FmEmAyj64ac1rJVHb2SevHDEtR3cBnNnW/Ueu/apAGMbP40PRdW
yXockSYUU/UN96LozC9keAYp9WCsqirgONKDj4AiRviVPluZNTGj/NovSDstWU+u
pH9Ifhjd15b3V1kD6AMmP5/7NNXKr+q8m3UoiejHOxTXfBXk+Um/P9Fz+mfEagUq
dEzwCAPRj3KJz+4VanAm6Hb6Bytc5ha5jT8ZiMyhK3nNmmm4mnvaStkGNrSNd3nv
IPB28dLUDjclKEWqDT7CiM4y
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:52:04 2026 by rpki-client