
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft
File: iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft (raw, json)
Hash identifier: oejqnEowckCBQvSR8ToEPviiKzXPcZJHr5HKIWSpL/o=
Subject key identifier: FE:50:BC:12:CB:35:D7:B5:29:D0:66:D3:79:B0:25:DB:CA:F8:71:99
Authority key identifier: 89:02:78:90:03:3D:5D:62:3B:D4:E4:39:86:E8:80:F6:AB:13:84:94
Certificate issuer: /CN=A91ECE62/serialNumber=89027890033D5D623BD4E43986E880F6AB138494
Certificate serial: 0236
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft
Manifest number: 0230
Signing time: Mon 27 Jul 2026 04:10:57 +0000
Manifest this update: Mon 27 Jul 2026 04:10:56 +0000
Manifest next update: Mon 03 Aug 2026 04:10:56 +0000
Files and hashes: 1: iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl (hash: wvPb0Xk8Xi1CsYKDAq/VL0Ry1WXuNhteQ0oXk3+1Dkw=)
2: 047E1E9C341C11EE84F4D52CC4F9AE02.roa (hash: EAtID2r50bcuRZVKtp+bEX8FvFjLB8tjThINGgwdwIA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl
rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:10:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 566 (0x236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ECE62, serialNumber=89027890033D5D623BD4E43986E880F6AB138494
Validity
Not Before: Jul 27 04:10:56 2026 GMT
Not After : Aug 3 04:10:56 2026 GMT
Subject: CN=6a66da51-b3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:60:79:2e:ea:75:1f:c1:b2:9f:b0:d8:78:
b1:d3:9c:b1:90:b4:fd:41:d5:5d:10:93:d5:4b:3a:
55:f6:90:5c:bb:8f:a3:d7:f4:2b:4e:98:24:04:c1:
77:ab:ce:03:8a:0f:df:b2:7d:00:bc:41:46:0a:c4:
41:4b:d1:69:77:4f:ca:3e:83:14:3c:5f:90:63:06:
e4:ae:56:d9:0e:bd:2f:51:ae:ae:ee:47:27:9e:34:
ac:86:b6:2b:f6:01:a4:e6:5b:86:53:28:85:9a:9b:
be:d1:6c:1f:d9:12:88:3c:21:d8:b6:42:d3:34:ef:
7e:97:52:a7:88:d1:8d:89:b1:34:a1:1c:e6:43:10:
f7:7a:ed:7d:2f:a7:86:ec:e5:5c:92:0c:7d:c6:a5:
41:da:aa:04:8f:fb:1a:a0:b2:60:e4:10:91:b0:f4:
d8:4c:1a:10:04:86:61:b2:f6:90:46:60:a3:0b:f8:
0d:af:8f:65:26:06:51:d0:ea:30:ff:60:a2:80:15:
0b:f4:08:cc:7f:11:06:96:c3:32:cc:c8:5d:41:96:
e7:9d:38:3a:d5:d0:53:71:92:93:09:ac:f6:41:b6:
3b:9a:42:25:11:9a:8f:26:16:5a:c7:a4:25:d9:d7:
2e:7d:de:63:f1:43:1c:3f:60:de:47:d8:12:47:d3:
9c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:50:BC:12:CB:35:D7:B5:29:D0:66:D3:79:B0:25:DB:CA:F8:71:99
X509v3 Authority Key Identifier:
keyid:89:02:78:90:03:3D:5D:62:3B:D4:E4:39:86:E8:80:F6:AB:13:84:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:e6:10:fa:95:f7:e4:1e:a5:2b:7d:82:85:b8:2f:00:68:52:
8c:11:03:12:89:58:fa:9b:be:d7:ff:3c:22:63:f4:a3:66:db:
49:0b:72:cb:11:fa:53:fc:6b:59:cc:74:82:0e:4f:52:d9:0e:
fd:ce:74:54:dd:26:ab:fc:41:0e:ab:ed:71:7a:46:9e:eb:58:
d0:55:91:66:1c:a3:e5:f9:2d:ac:91:79:ac:74:fc:ba:a9:ee:
e8:a6:c0:28:3e:0a:a1:19:6a:38:2b:81:15:0b:20:66:d1:5a:
e1:26:3d:fb:1a:82:9c:00:c2:b8:eb:96:36:db:1e:ce:83:07:
a1:b8:58:29:6b:b5:4c:86:08:8d:34:c7:82:89:4b:6d:58:7c:
f7:f1:56:ce:f4:3f:82:17:cf:ca:9c:26:5d:64:ba:94:be:3f:
e1:74:de:21:29:49:d8:1a:ac:7b:b5:75:e9:33:4b:a5:e2:13:
fb:00:1c:63:3e:6c:60:d2:12:51:40:fe:61:42:cc:31:c0:9e:
a0:a4:b3:d2:ea:aa:c9:e3:00:83:4e:2a:e8:c4:cb:7e:9a:80:
04:65:39:67:db:d0:55:b4:03:e9:8f:a7:34:ff:21:b7:38:cc:
a3:c5:b8:73:9c:1e:e0:14:1a:92:02:d7:99:ce:4f:9a:15:3a:
6e:08:f4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:45 2026 by rpki-client