
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
File: iV-zzi-cLke5FLsqa2bHfVOXpAo.mft (raw, json)
Hash identifier: lTiVP5EnPZt28MjxkLHppXr5HkV50tOM1lZZyKetLXo=
Subject key identifier: 09:52:00:CF:2E:71:4A:F1:6E:82:47:1C:86:8D:DE:33:48:BC:6C:D2
Authority key identifier: 89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A
Certificate issuer: /CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A
Certificate serial: 029A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
Manifest number: 0292
Signing time: Fri 17 Apr 2026 01:29:00 +0000
Manifest this update: Fri 17 Apr 2026 01:28:59 +0000
Manifest next update: Fri 24 Apr 2026 01:28:59 +0000
Files and hashes: 1: iV-zzi-cLke5FLsqa2bHfVOXpAo.crl (hash: 6gpnvGOk0AcVcb892KJLKD8zC4K4GUqziOqbku39S1M=)
2: 38DEC3C04ED611ED84336740C4F9AE02.roa (hash: lsL1bzm7xgDwCWDuOlZQ/MIqVfUaWity48F6FNEzoq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl
rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:28:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 666 (0x29a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6419, serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A
Validity
Not Before: Apr 17 01:28:59 2026 GMT
Not After : Apr 24 01:28:59 2026 GMT
Subject: CN=69e18cdc-623b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:05:07:e8:26:c6:ee:57:be:aa:e9:fd:93:6e:
40:e5:1d:88:dd:d1:cb:08:5a:e2:ea:02:f9:b8:43:
a8:f9:1e:59:be:07:6f:bb:64:70:b3:d2:b4:0b:4f:
aa:c2:15:63:3d:dd:e8:12:cd:41:99:8f:56:39:a3:
79:a2:e6:6a:fa:22:70:46:29:52:01:66:38:fd:4c:
ac:9e:66:31:30:98:72:ff:50:14:60:75:41:3d:a1:
1a:d7:da:8d:f9:ce:0b:e8:0b:e2:43:cb:5d:14:18:
3c:5f:de:1a:9f:d4:54:a0:81:91:06:86:92:94:15:
ab:56:b0:25:bb:62:35:62:bc:f7:3f:0d:bf:30:44:
d6:93:c0:9a:9f:4c:ab:e7:d1:3d:30:4c:44:67:6b:
c9:67:3c:ac:aa:09:d0:14:8e:b2:45:49:fa:b4:a0:
4d:75:74:d3:a1:36:91:11:26:05:41:e2:1d:24:f9:
9f:9a:e0:a5:30:39:31:6a:f3:19:43:e7:b0:1f:e6:
11:69:be:e8:b4:f6:be:91:eb:cd:35:55:0b:7c:50:
b6:fa:2d:00:a6:d7:32:1d:7c:22:a9:07:0d:0e:6d:
c2:b3:67:8b:2d:ba:6c:17:8d:de:da:d2:41:26:26:
3c:41:9e:a6:2e:c6:50:5c:0e:f9:c1:5f:61:c2:79:
bd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:52:00:CF:2E:71:4A:F1:6E:82:47:1C:86:8D:DE:33:48:BC:6C:D2
X509v3 Authority Key Identifier:
keyid:89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:a2:dd:5c:75:e8:82:12:79:8b:29:29:54:f1:c6:92:2d:9a:
5a:97:71:fc:e9:74:36:7c:a7:93:69:02:1b:a4:0a:b4:02:b3:
39:fd:a0:a4:5f:e6:14:d9:98:a2:73:d3:57:df:f1:a3:64:8c:
24:97:54:dc:44:5d:a4:56:67:6e:bc:ac:42:ea:38:f4:5b:61:
71:d6:21:bd:18:8c:f8:4a:ff:e3:c1:5b:af:b0:d7:ea:34:ac:
39:c5:ac:87:47:61:cf:d4:70:c4:89:4a:e1:2d:95:dd:34:5e:
cf:a3:7a:63:2d:83:02:d6:03:03:29:4a:f6:d1:c4:bb:47:ef:
31:47:4e:d0:47:c1:73:6a:83:0e:84:2a:d2:31:1d:9b:e2:bd:
6c:7b:30:f1:37:64:27:e1:f1:98:4b:d5:5a:f0:d0:1a:77:05:
5a:bd:7f:74:82:43:a0:8e:51:39:06:65:ff:6d:c9:44:4f:f1:
3e:3e:9e:e1:4f:49:8b:78:1a:cd:6c:73:18:56:6e:45:45:e2:
b6:99:54:aa:33:eb:2c:2b:3d:f9:bb:8a:5f:6e:61:bd:45:32:
55:d2:d8:bf:0c:51:bf:1a:db:17:46:c2:1b:cd:7d:b2:64:88:
f6:a2:d1:26:7b:ae:55:2a:95:20:94:64:ee:73:e2:96:ff:24:
ce:28:a2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:11:51 2026 by rpki-client