
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft
File: IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft (raw, json)
Hash identifier: tBkQCXkNi7v8TI7EPvI2vI5fg2yvo9/R1KRjNkkAGPg=
Subject key identifier: 00:61:8B:FB:B8:34:5D:B8:9A:24:AD:62:C4:DB:E9:EC:A3:3A:E8:23
Authority key identifier: 21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07
Certificate issuer: /CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107
Certificate serial: 0582
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft
Manifest number: 0579
Signing time: Mon 02 Mar 2026 00:16:01 +0000
Manifest this update: Mon 02 Mar 2026 00:15:57 +0000
Manifest next update: Mon 09 Mar 2026 00:15:57 +0000
Files and hashes: 1: IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl (hash: uANSgO2ojy+vv/Ayuvdjuw+kQjtFPlWKlQoscO/XSZ8=)
2: 6084E4F217E811EC8A22700DC4F9AE02.roa (hash: 4+PTFdgl3/Y2zZl8cZ4hou7wKPwTyGH/S+rTxQnvDys=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl
rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:15:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1410 (0x582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8B44, serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107
Validity
Not Before: Mar 2 00:15:57 2026 GMT
Not After : Mar 9 00:15:57 2026 GMT
Subject: CN=69a4d6c0-d246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:78:33:34:53:12:7c:70:0d:a4:00:f5:42:40:
8f:70:d2:d4:64:78:7b:6a:b9:c5:ee:b2:49:3c:93:
04:fe:ee:ab:3f:8f:95:e2:47:88:aa:05:80:73:e5:
bf:e0:44:1c:5c:21:0e:99:9d:55:2d:fd:a9:f2:09:
62:32:92:ad:35:6c:2f:86:f8:8b:7e:9e:1e:98:59:
7b:fc:8f:d7:52:30:6e:ac:79:e1:39:17:e0:a0:51:
71:14:ff:9c:e1:6b:39:bc:1a:ce:12:1c:3a:8c:28:
ab:cd:0b:a6:d8:d6:97:98:dd:7c:f2:eb:22:2a:04:
76:15:13:d6:98:07:19:b5:7b:9d:0c:65:db:8e:08:
bd:b1:b6:cb:1c:9f:87:0e:01:60:c9:93:6b:40:04:
d9:b8:bb:e0:05:d9:47:a4:20:4f:68:3f:a0:b1:3c:
81:c2:a9:66:69:5a:03:d4:b6:cb:41:ec:97:37:59:
47:d4:08:fd:2c:e8:c5:0f:73:b7:38:19:d5:b4:b3:
0e:7e:9f:d3:f9:49:dc:a4:c8:46:12:66:1c:54:a3:
13:25:97:70:d6:64:53:1f:11:ac:ee:65:07:87:d8:
6e:2e:cf:fa:7b:f1:d7:59:83:11:03:9f:40:6e:6a:
c5:2f:65:c7:20:da:66:50:f7:8a:f4:f2:b4:50:4b:
0c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:61:8B:FB:B8:34:5D:B8:9A:24:AD:62:C4:DB:E9:EC:A3:3A:E8:23
X509v3 Authority Key Identifier:
keyid:21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:76:05:87:b9:90:56:fb:0c:9b:e9:e5:e5:e0:db:c1:b4:08:
d4:1a:5a:c6:e9:6e:e8:11:af:75:ec:7e:eb:7c:de:14:4d:9f:
e9:44:46:ec:59:99:a5:cf:62:48:82:a6:8f:b4:95:39:b7:8b:
59:c2:67:61:c1:8d:d3:fb:e6:a2:18:ec:23:3a:cc:62:55:e7:
17:63:1d:ed:43:31:6e:03:b1:ec:03:bb:0a:ea:ec:e6:9a:5b:
90:fa:30:24:2f:21:c4:61:47:1f:ea:af:9b:32:75:84:dc:96:
96:41:dd:24:87:4d:bb:fb:81:34:c9:2c:b8:30:7d:c0:b6:91:
52:ce:1d:e5:ee:ba:c0:38:3a:9a:3e:e0:49:17:16:86:19:fc:
80:4e:7c:32:c4:5a:55:ff:08:cc:6b:91:34:9f:2f:18:de:83:
dc:d4:ba:88:4f:25:a2:6b:3c:98:f0:0b:2b:7d:82:4d:db:39:
4d:bd:20:56:c2:29:0e:91:2b:6b:6a:81:ee:d1:37:d1:2f:f0:
5a:b2:93:33:16:b2:c8:39:fc:03:c6:96:49:36:35:b0:d4:14:
11:58:1c:e7:86:e8:e7:69:9d:f1:f8:b8:0c:f1:a5:78:d7:0b:
0d:55:5f:59:d5:d2:a4:8f:38:e5:35:9f:e0:16:2e:45:b8:24:
2a:06:a8:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThCNDQxMTAvBgNVBAUTKDIxRjcxM0M4MDhCQ0QxNEJGQ0JDQ0ZENDYyNzNDMjBF
RDA3QjQxMDcwHhcNMjYwMzAyMDAxNTU3WhcNMjYwMzA5MDAxNTU3WjAYMRYwFAYD
VQQDEw02OWE0ZDZjMC1kMjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8ngzNFMSfHANpAD1QkCPcNLUZHh7arnF7rJJPJME/u6rP4+V4keIqgWAc+W/
4EQcXCEOmZ1VLf2p8gliMpKtNWwvhviLfp4emFl7/I/XUjBurHnhORfgoFFxFP+c
4Ws5vBrOEhw6jCirzQum2NaXmN188usiKgR2FRPWmAcZtXudDGXbjgi9sbbLHJ+H
DgFgyZNrQATZuLvgBdlHpCBPaD+gsTyBwqlmaVoD1LbLQeyXN1lH1Aj9LOjFD3O3
OBnVtLMOfp/T+UncpMhGEmYcVKMTJZdw1mRTHxGs7mUHh9huLs/6e/HXWYMRA59A
bmrFL2XHINpmUPeK9PK0UEsMkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABhi/u4
NF24miStYsTb6eyjOugjMB8GA1UdIwQYMBaAFCH3E8gIvNFL/LzP1GJzwg7Qe0EH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEI0NC9GM0IxNjRBQzE3
RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBVdjh2TV9VWW5QQ0R0QjdR
UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lmY1R5QWk4MFV2OHZNX1VZblBDRHRCN1FRYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEI0NC9GM0IxNjRBQzE3RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBV
djh2TV9VWW5QQ0R0QjdRUWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHXYFh7mQVvsMm+nl5eDbwbQI1Bpaxulu6BGvdex+63zeFE2f6URG7FmZpc9i
SIKmj7SVObeLWcJnYcGN0/vmohjsIzrMYlXnF2Md7UMxbgOx7AO7Curs5ppbkPow
JC8hxGFHH+qvmzJ1hNyWlkHdJIdNu/uBNMksuDB9wLaRUs4d5e66wDg6mj7gSRcW
hhn8gE58MsRaVf8IzGuRNJ8vGN6D3NS6iE8loms8mPALK32CTds5Tb0gVsIpDpEr
a2qB7tE30S/wWrKTMxayyDn8A8aWSTY1sNQUEVgc54bo52md8fi4DPGleNcLDVVf
WdXSpI845TWf4BYuRbgkKgaoDw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:26 2026 by rpki-client