
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft
File: iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft (raw, json)
Hash identifier: KcNIkcmVh7ZzjllMlfYht4Rl//EjEjwWZ9aOaoVeNPI=
Subject key identifier: F7:5F:33:09:95:77:40:25:B7:30:40:B1:9A:B1:ED:7B:18:94:22:5A
Authority key identifier: 89:02:78:90:03:3D:5D:62:3B:D4:E4:39:86:E8:80:F6:AB:13:84:94
Certificate issuer: /CN=A91ECE62/serialNumber=89027890033D5D623BD4E43986E880F6AB138494
Certificate serial: 0220
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft
Manifest number: 021A
Signing time: Sat 13 Jun 2026 02:53:20 +0000
Manifest this update: Sat 13 Jun 2026 02:53:19 +0000
Manifest next update: Sat 20 Jun 2026 02:53:19 +0000
Files and hashes: 1: iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl (hash: S6gFXRi5D6ub/wVNpJJQ6rE5MuLRuUyJ7TeJWjmhBis=)
2: 047E1E9C341C11EE84F4D52CC4F9AE02.roa (hash: EAtID2r50bcuRZVKtp+bEX8FvFjLB8tjThINGgwdwIA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl
rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ECE62, serialNumber=89027890033D5D623BD4E43986E880F6AB138494
Validity
Not Before: Jun 13 02:53:19 2026 GMT
Not After : Jun 20 02:53:19 2026 GMT
Subject: CN=6a2cc620-182e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:49:78:24:d8:53:7c:56:9f:a2:7f:65:50:91:
ed:19:fb:5b:25:c0:d7:ee:15:7d:11:02:86:af:10:
0a:59:51:16:8c:94:6d:89:6e:e8:0d:a2:b4:e1:db:
d3:7d:1d:13:38:f8:09:44:1a:8e:8c:4f:98:35:bb:
13:23:fb:8f:cb:09:5b:63:15:04:85:d5:e9:5e:61:
5b:a0:a0:d4:3b:a4:b4:da:b0:c0:56:cf:55:08:86:
ba:4d:23:ef:b3:c9:ee:09:47:b1:84:4f:2a:ed:36:
ba:b7:3c:34:61:f4:e0:53:0f:72:88:9f:ed:05:a5:
28:b3:12:f6:8b:3d:d0:d2:38:ac:7c:71:04:c1:af:
27:70:6c:da:ff:0f:bf:6d:a6:bb:03:d7:c1:1b:73:
d4:30:b2:1b:cb:aa:24:b5:32:ee:ab:59:36:ff:16:
27:dc:05:36:68:52:79:e8:0d:1d:5c:40:f8:c6:e8:
5b:55:60:3b:ba:b5:73:32:da:1f:26:8d:71:67:da:
1a:72:c5:c2:d4:aa:74:f8:9f:3e:7a:ba:fe:04:30:
1f:bc:ef:23:41:44:a3:57:3c:ed:d2:11:e2:c6:53:
6b:31:88:a1:62:ee:c5:58:d2:45:15:70:82:9b:79:
b6:97:63:f7:c1:a6:3c:47:49:84:4c:73:66:de:3f:
bb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5F:33:09:95:77:40:25:B7:30:40:B1:9A:B1:ED:7B:18:94:22:5A
X509v3 Authority Key Identifier:
keyid:89:02:78:90:03:3D:5D:62:3B:D4:E4:39:86:E8:80:F6:AB:13:84:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:87:0c:6d:11:88:04:75:e9:43:f9:8a:c8:5a:fe:ff:b7:73:
d1:a0:68:ed:41:26:c3:87:78:3e:73:f7:48:5d:9c:8a:1e:bb:
40:f1:fc:35:80:f2:4f:79:18:ee:0a:6e:84:24:f4:28:89:c7:
c8:e9:9d:c9:d2:32:f4:ef:b4:b7:39:39:09:4d:ca:fc:ba:ef:
35:ae:21:7a:17:bc:ff:0c:f4:43:16:0a:d7:42:e9:d4:9d:0a:
40:e8:77:bd:d2:bc:24:04:0a:2c:d0:e0:53:b8:58:54:1f:ae:
db:d2:d6:e2:ab:82:3f:86:b7:1d:86:bd:28:9b:de:b9:3c:ad:
33:80:a3:41:c9:d0:17:45:fe:e0:30:71:c5:8b:46:bf:74:2a:
e7:19:40:61:65:1d:1a:de:b3:c6:58:f9:50:31:c5:a9:5e:07:
fe:61:82:d6:19:b3:32:bc:2f:59:f3:09:5b:74:0d:af:bb:04:
02:eb:5e:4e:06:72:bc:87:97:8e:38:8f:d1:14:ec:b1:9f:24:
48:09:29:42:5a:f5:74:60:7c:b8:7f:2d:62:97:eb:6a:be:f9:
77:3b:97:b4:84:cd:c9:38:4e:cc:a7:25:a1:ba:59:0b:aa:1f:
fa:35:60:40:6b:0f:1c:33:ae:24:9c:35:d4:24:05:30:f1:4b:
64:6c:5d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:04:32 2026 by rpki-client