
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
File: pIqTm2fbIrr3fgB7Id87dFtig5A.mft (raw, json)
Hash identifier: 89S8DDdeLF2NCxPusw02g1nJd68e3MwLiOqF5GrCf1g=
Subject key identifier: 26:FE:51:28:5E:E0:C9:CE:07:28:22:D8:11:36:1E:CA:E7:05:B8:2E
Authority key identifier: A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90
Certificate issuer: /CN=A91E1ED2/serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390
Certificate serial: 072A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
Manifest number: 0723
Signing time: Fri 12 Jun 2026 21:56:53 +0000
Manifest this update: Fri 12 Jun 2026 21:56:53 +0000
Manifest next update: Fri 19 Jun 2026 21:56:53 +0000
Files and hashes: 1: pIqTm2fbIrr3fgB7Id87dFtig5A.crl (hash: sk0d2Sbq7nK+2N4RC9beRC01k4fZqQKHRUCQszNR/Zk=)
2: A3AA461082BE11EB93A19A35C4F9AE02.roa (hash: FcPeshOBgwbO9rUWdVUpY9LSkh0o6hAVezvw+Vbo09o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl
rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:56:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1834 (0x72a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1ED2, serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390
Validity
Not Before: Jun 12 21:56:53 2026 GMT
Not After : Jun 19 21:56:53 2026 GMT
Subject: CN=6a2c80a5-ce24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:98:92:c7:eb:42:ec:08:98:db:99:fb:3c:88:
4d:85:b7:43:49:b8:fa:73:28:e6:d8:e3:cd:38:5f:
f6:a1:e2:3c:e9:05:54:71:ee:f7:6c:33:34:0b:dc:
f7:d7:fe:1e:e2:27:c6:51:c5:35:f0:ee:5d:48:df:
d2:bd:0b:a4:0b:24:ca:3c:89:ff:2a:1a:c6:1d:b0:
d6:c7:a1:8c:a5:73:84:49:fb:33:99:e8:f7:3f:91:
32:e9:90:b8:65:2b:38:2e:0e:32:90:56:c5:9e:0b:
fc:78:01:d6:96:cb:07:de:82:4f:9d:a9:27:76:cb:
84:2d:f5:9a:a8:a2:05:fe:ab:99:bf:57:dd:41:6a:
48:58:9a:c5:36:d6:fa:14:35:58:7d:65:6d:01:22:
3c:79:b0:60:6a:0c:9b:2b:55:ab:f5:77:49:61:40:
26:09:3a:5e:13:e5:dc:82:d2:a4:34:33:04:c5:d2:
a2:de:f8:af:6f:cb:0d:ce:ea:f1:56:b5:f3:7e:02:
80:eb:e3:07:c0:9d:30:27:2a:46:51:53:4e:c7:05:
e3:87:3a:6f:71:cc:de:7b:1b:59:ab:b5:6d:28:e2:
21:7a:9b:61:a5:10:d5:d7:fe:79:5d:27:13:22:03:
09:9f:a2:81:c9:40:9d:27:87:75:16:f6:d0:a7:00:
ea:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FE:51:28:5E:E0:C9:CE:07:28:22:D8:11:36:1E:CA:E7:05:B8:2E
X509v3 Authority Key Identifier:
keyid:A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:a7:7e:fa:b8:ab:10:56:dd:b0:b8:35:87:a1:82:49:e3:57:
da:77:e8:72:c7:46:31:35:6e:c6:3f:2a:7a:ae:e4:59:0d:9c:
ec:49:96:03:70:ad:41:6c:c5:3a:bd:a2:7b:78:38:20:d3:0e:
ca:06:fc:ce:63:cf:27:cb:3d:0c:04:95:96:90:55:f7:bb:59:
22:f9:80:91:6a:82:b8:10:ab:f5:50:9a:95:84:18:81:a9:53:
0e:ac:ed:22:1a:ba:84:6c:79:ba:9c:ee:89:c2:16:99:73:b7:
16:b6:52:7a:17:10:1d:bf:70:70:11:22:9b:0c:3d:b0:3f:64:
ca:39:94:dd:d8:48:e3:0e:ea:91:72:68:f2:63:34:d9:bd:3d:
7c:84:b9:d8:37:27:6d:22:a6:f0:f6:0a:15:f2:eb:8e:77:49:
7e:ea:fa:63:99:6d:f3:65:8e:71:93:ff:af:01:89:14:c0:1a:
5b:00:19:44:99:7b:d4:b0:b7:eb:c6:da:36:e3:b6:a5:69:8f:
79:c8:f3:d9:a6:98:df:26:94:82:c1:ca:40:f1:12:41:ef:7e:
72:9f:cf:6e:0c:08:ef:b7:00:cc:d9:90:ad:3c:f3:12:9c:c4:
b6:4f:91:df:13:bf:e7:00:dc:73:57:b8:e8:99:b2:70:6e:47:
f1:29:30:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:08:09 2026 by rpki-client