
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft
File: ItyTZY3G6XAwereu8eJV3j1D9bc.mft (raw, json)
Hash identifier: 3GElDP2QYbjOeTwcNNsnm4rbjKiXmoISX5twWWlARME=
Subject key identifier: EB:59:D6:1E:38:F3:3F:0C:C4:BD:8D:4D:F0:17:17:2B:06:F3:4D:B7
Authority key identifier: 22:DC:93:65:8D:C6:E9:70:30:7A:B7:AE:F1:E2:55:DE:3D:43:F5:B7
Certificate issuer: /CN=A91F0C45/serialNumber=22DC93658DC6E970307AB7AEF1E255DE3D43F5B7
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft
Manifest number: 7D
Signing time: Wed 15 Apr 2026 07:21:31 +0000
Manifest this update: Wed 15 Apr 2026 07:21:31 +0000
Manifest next update: Wed 22 Apr 2026 07:21:31 +0000
Files and hashes: 1: ItyTZY3G6XAwereu8eJV3j1D9bc.crl (hash: tGxAFe7ioGS40HaXgR7y9iRZjxocSUNaQ6W8FDYNcLA=)
2: 96AF1D609A0F11F09F475111C4F9AE02.roa (hash: lCi752ligH/UO1OJEHoof5FIfLu807frgAct0rFSMSY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.crl
rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 07:21:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0C45, serialNumber=22DC93658DC6E970307AB7AEF1E255DE3D43F5B7
Validity
Not Before: Apr 15 07:21:31 2026 GMT
Not After : Apr 22 07:21:31 2026 GMT
Subject: CN=69df3c7b-cfbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:06:26:0d:e2:b8:07:54:d0:6e:c8:7e:2f:
eb:6d:23:dc:fe:38:b9:c7:31:57:bc:e5:0d:ee:77:
38:98:71:f5:e4:7d:66:22:c5:7f:aa:bc:e5:7d:c1:
53:25:89:7e:16:ad:9e:a3:30:be:80:91:b9:38:fe:
76:f7:38:1e:60:c9:b9:fb:24:3c:69:79:da:1b:09:
37:0c:67:ae:83:0d:7e:9d:44:5e:5a:d6:65:a4:97:
10:a2:eb:f7:0b:b0:87:f0:d9:a9:ed:da:10:ea:f3:
0a:29:ae:63:07:fc:3f:d1:77:08:a5:74:78:b4:5e:
4f:98:5d:da:54:1d:e3:84:2a:66:60:59:78:33:69:
31:26:46:b0:d3:7f:cf:57:3a:68:c8:36:46:ff:10:
cc:00:25:02:bd:22:9e:f2:90:01:b8:dd:ed:3e:14:
b7:64:ff:9d:5e:5b:2a:23:c1:f2:20:8b:90:d5:cc:
27:ed:28:9b:a6:9a:ad:a5:7b:06:88:e3:a2:25:46:
da:5c:97:75:ef:ed:d6:6d:68:32:65:74:de:dc:69:
e0:99:84:b3:95:8b:db:e6:8c:09:9e:91:7f:24:7e:
f2:70:65:44:27:a1:60:7b:ca:62:26:7e:d1:d3:3c:
c6:e0:1d:2c:53:9d:5d:ef:16:9c:7c:e4:96:ad:58:
d8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:59:D6:1E:38:F3:3F:0C:C4:BD:8D:4D:F0:17:17:2B:06:F3:4D:B7
X509v3 Authority Key Identifier:
keyid:22:DC:93:65:8D:C6:E9:70:30:7A:B7:AE:F1:E2:55:DE:3D:43:F5:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:b9:f6:8a:93:23:93:c8:82:71:d9:5f:08:c9:e8:a6:4b:89:
f5:6f:92:1d:5c:1b:f3:4e:9c:06:64:b6:e5:2d:2a:ae:49:1e:
93:72:6c:e8:9c:fe:d6:b6:27:12:4c:70:5b:29:66:52:b5:a8:
71:1a:c6:b2:e5:ab:fb:13:a3:17:3b:03:64:61:92:20:55:1c:
fd:4c:c4:a0:da:84:fb:4b:05:9c:46:5b:a8:9c:5e:f2:0f:1d:
0c:44:81:f7:73:a2:de:a1:8c:b0:09:9c:52:33:f4:16:58:e6:
a2:fb:08:54:25:6b:98:54:bf:26:0f:10:8b:d4:28:37:10:d6:
74:3e:ef:38:de:42:41:3d:34:bd:e5:86:9d:a0:58:57:e3:45:
3c:22:73:9a:42:c5:15:3e:03:df:e6:c4:a9:66:03:fb:3d:73:
c6:90:b9:fa:f8:e3:57:af:02:b9:ab:31:50:14:a9:bd:81:82:
3e:6c:12:1a:50:85:ba:37:de:b6:eb:bf:78:a9:be:c8:1c:1d:
f3:6a:e6:e0:79:db:a7:3d:a4:fa:b2:70:5f:1b:91:bd:c4:04:
8b:8e:cf:31:49:b8:3f:32:04:2a:56:f9:2a:5b:d8:f8:62:50:
07:dc:0e:98:16:d2:03:23:9a:01:36:b5:96:ee:a2:f5:65:38:
3b:01:6e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:12:10 2026 by rpki-client