
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft
File: iz8j61_ij1gF49J7lTe7r6fN-UY.mft (raw, json)
Hash identifier: hC16tKp82UHu4XQlOWURZVM/btWRe1iWYh2Gp5wfcIA=
Subject key identifier: 06:B5:4B:DB:0F:07:4D:4A:2F:41:34:28:EA:58:CF:F3:7A:95:49:32
Authority key identifier: 8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46
Certificate issuer: /CN=A91E6C2D/serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946
Certificate serial: 025F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft
Manifest number: 0256
Signing time: Mon 02 Mar 2026 01:20:47 +0000
Manifest this update: Mon 02 Mar 2026 01:20:46 +0000
Manifest next update: Mon 09 Mar 2026 01:20:46 +0000
Files and hashes: 1: iz8j61_ij1gF49J7lTe7r6fN-UY.crl (hash: /Fj2MybKnQr2Pz22UDzDDyZGygMchlvbBMpjlEVEwlo=)
2: E8F4B2C48A0911ED8FCEE137C4F9AE02.roa (hash: GPaqYcUqr0zbxlmQ0X0FP4TsXC+N0CSQMz7aMm/NDOs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl
rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6C2D, serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946
Validity
Not Before: Mar 2 01:20:46 2026 GMT
Not After : Mar 9 01:20:46 2026 GMT
Subject: CN=69a4e5ef-1587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:ed:65:ab:e0:52:7d:f0:13:15:fe:6a:f7:
30:79:14:41:a4:ac:6b:12:7d:b3:ba:6b:09:a2:0a:
35:8c:6b:ef:08:1a:38:d8:d0:45:06:a7:57:18:8f:
b4:6b:c8:b4:c8:c9:57:57:e6:66:f6:3f:48:05:f7:
88:b7:d4:72:c1:4d:9a:8b:cd:42:c8:c0:f7:6f:79:
4a:ed:8a:7f:bd:2b:69:eb:bf:a2:e4:5e:4c:ac:46:
b6:3c:18:a0:18:9e:13:21:9a:e1:87:2f:98:e6:81:
86:9f:4d:ae:d6:52:5a:e1:14:09:b3:dc:82:cc:2f:
82:6c:a1:f3:df:70:12:2f:2f:40:12:82:7e:90:e7:
6e:bb:1f:b8:12:79:e4:38:96:99:98:b9:25:6d:8f:
3d:94:13:20:31:fb:83:4a:bb:e3:58:28:94:a2:ad:
d5:73:f9:f8:14:39:c7:7d:6b:31:8b:8b:94:84:fc:
cd:7b:6a:f5:86:d0:c1:9d:72:41:77:8d:7f:4a:c2:
e9:2b:47:f9:86:6c:3b:bf:e7:ee:19:d9:3f:2d:5d:
8f:5d:26:34:99:b9:49:30:84:31:f4:d3:ce:27:ac:
52:87:59:d5:ab:48:a9:76:6c:98:d6:d5:c1:a5:23:
a3:44:d5:de:e6:0c:e6:14:d4:4e:43:8f:7c:dd:e4:
80:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B5:4B:DB:0F:07:4D:4A:2F:41:34:28:EA:58:CF:F3:7A:95:49:32
X509v3 Authority Key Identifier:
keyid:8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c6:e0:d9:1c:a3:4c:75:f9:30:64:ee:36:b1:2e:64:c4:31:
d8:10:ab:20:7c:18:64:c0:07:ed:62:03:bd:58:d5:4b:d0:b8:
14:ec:3f:89:ff:dd:bf:3f:91:1f:a1:f5:5a:42:f0:a5:7c:42:
ab:5b:d1:96:49:99:07:13:39:37:a2:05:a8:c1:26:5f:23:c8:
79:28:b3:9b:e3:46:ac:5b:ab:f9:cf:fa:95:92:34:2b:50:42:
c0:52:79:10:8d:d2:6e:1f:0f:16:e6:4c:63:a3:c8:d7:8d:49:
9c:36:65:aa:67:f7:1c:41:69:30:dc:7e:11:c5:c6:1c:e5:b1:
a8:62:9c:63:5c:a0:33:1b:54:9d:4f:6a:19:83:5c:32:6b:86:
95:f4:43:99:78:93:db:54:7c:fb:c2:28:b4:f3:eb:a4:0b:4a:
ca:9f:30:f9:bc:8e:7e:71:b4:fd:bd:ba:d6:c2:35:47:83:cc:
98:67:9f:1c:8b:32:f6:61:10:e2:42:d3:68:45:dc:4c:f3:dc:
81:74:29:a6:98:74:75:23:5c:38:7f:3f:05:41:21:3d:c4:8b:
6b:e3:5e:2b:59:3d:de:e2:6e:da:72:97:ef:97:2d:62:cf:c7:
62:41:56:5a:2e:0e:92:7a:ba:c4:fe:ab:40:ae:4a:e9:b8:a7:
bb:67:ab:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:20:33 2026 by rpki-client