
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
File: Iln4cJbkCts8hBgOKLVsPogi9lE.mft (raw, json)
Hash identifier: p98rIFzcWY/mWrmAKWhQWh47Sm467Zeudz6e+YHPPdE=
Subject key identifier: 42:EC:F7:A1:02:A2:AD:D5:60:3C:62:73:7C:07:E1:A5:B6:47:E1:E1
Authority key identifier: 22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51
Certificate issuer: /CN=A91E9B89/serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651
Certificate serial: 018B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
Manifest number: 0182
Signing time: Wed 23 Sep 2026 04:27:25 +0000
Manifest this update: Wed 23 Sep 2026 04:27:25 +0000
Manifest next update: Wed 30 Sep 2026 04:27:25 +0000
Files and hashes: 1: Iln4cJbkCts8hBgOKLVsPogi9lE.crl (hash: MuDbV//uH4StH/pD4fs0vKY7HWPjoJ7k+ZSbvbZWjKg=)
2: CCFF219C6C1811EFA5619D0FC4F9AE02.roa (hash: UeyiJlQNs/MTLZbMqwrMTFTZWRhPtIvg9OJqOsVib0o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl
rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:27:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9B89, serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651
Validity
Not Before: Sep 23 04:27:25 2026 GMT
Not After : Sep 30 04:27:25 2026 GMT
Subject: CN=6ab3552d-04b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ee:bf:f1:8a:ba:f9:8c:5f:74:23:88:41:67:
2b:da:8c:09:03:95:6e:b8:4b:1e:7c:48:b8:bb:7f:
16:dc:a4:07:aa:34:c1:95:e8:d9:18:7c:04:8b:b1:
82:a0:13:84:47:87:94:3c:bf:41:67:87:52:f9:7e:
cf:47:76:85:8b:82:9e:1e:c5:86:96:26:f2:13:de:
5b:a4:0c:7a:2d:94:34:4b:ee:43:b2:5f:83:42:cb:
c5:a1:f1:e6:2b:fc:0c:69:a3:5d:37:c0:b1:da:9a:
ed:7e:0e:58:d5:0d:6d:61:8b:53:76:1b:8d:7a:46:
64:3b:2d:35:ba:a3:01:41:ed:11:ac:5d:d2:a0:e2:
b8:91:69:2f:69:e4:29:ec:c4:1a:e8:0c:be:a6:c8:
26:4d:38:a3:c0:96:7b:21:f1:d4:bb:c2:ec:38:d3:
ad:0e:2e:68:dd:e1:52:e7:b4:6d:b6:f3:83:99:09:
24:ef:5a:bf:77:d1:97:6d:ab:60:b9:fc:2d:6b:1d:
91:9a:9c:ce:74:45:ad:6a:5d:98:46:86:ab:a8:6c:
c8:44:b8:e8:88:f3:7e:0f:69:db:49:92:a2:99:17:
d3:74:b3:69:cf:e0:ff:d2:c1:51:52:76:06:e4:3b:
eb:65:d8:cc:67:01:b8:30:21:fd:81:32:8a:3d:71:
15:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EC:F7:A1:02:A2:AD:D5:60:3C:62:73:7C:07:E1:A5:B6:47:E1:E1
X509v3 Authority Key Identifier:
keyid:22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:49:50:ae:8d:5a:72:ca:54:0f:b2:1b:ec:f0:2b:fb:a4:fb:
ce:f0:d7:0c:a0:00:cd:9d:78:b1:c3:69:71:d5:28:83:9f:af:
e8:89:61:e6:de:3a:d7:70:7f:b0:8b:f9:6e:28:ef:17:ff:04:
00:43:d1:c3:1b:21:bd:33:f8:4d:d4:b1:38:81:a0:f2:34:1d:
22:e1:ab:e4:39:ed:02:46:6b:08:42:8e:d4:44:fb:bf:46:12:
95:b5:1c:ed:2f:f4:d1:8b:d8:07:86:39:ed:27:52:1e:ca:7b:
30:18:fe:15:55:89:44:41:73:11:b1:51:71:41:3a:66:d1:58:
d0:44:0e:f2:69:5e:5a:ae:bd:12:df:25:70:eb:29:cb:b9:06:
19:d1:4f:fd:e6:e1:e5:85:83:7d:fd:3a:68:71:4c:e1:01:34:
9a:02:ce:84:ff:f6:85:1e:ef:c8:c4:98:3a:9b:96:1a:06:5b:
14:f0:17:16:c3:31:7f:fe:ed:a3:fa:6c:d1:a9:ee:38:80:5c:
88:34:e2:fd:f1:2b:e2:c9:c6:4c:74:b1:7c:63:98:75:bc:0a:
f0:a7:5f:49:f2:58:5f:36:02:73:63:e1:d3:38:1e:ab:5d:99:
25:09:30:1f:46:78:88:8e:32:46:4f:9c:d0:0f:2b:52:2a:1a:
fd:e9:50:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:00:48 2026 by rpki-client