
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft
File: iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft (raw, json)
Hash identifier: CcuSNnJIq6nGFIO4gQI6GCMhROXCinf/5W7AYrHdh70=
Subject key identifier: F8:0A:3A:CC:7E:0A:3E:3C:6C:2F:E3:AE:57:1B:4A:F4:51:60:EB:53
Authority key identifier: 89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE
Certificate issuer: /CN=A91F40E0/serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft
Manifest number: 87
Signing time: Fri 17 Apr 2026 07:24:03 +0000
Manifest this update: Fri 17 Apr 2026 07:24:02 +0000
Manifest next update: Fri 24 Apr 2026 07:24:02 +0000
Files and hashes: 1: iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl (hash: Htr08oWN7m3ILBKCynwA65OgNWvqgi0G2+D4qB9JelU=)
2: 399480C4ACD011F08828DD7BC4F9AE02.roa (hash: faAWxuL02WBDF7lhFM/mV+aG3ZsWz2hDnEoq4EKfApA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl
rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F40E0, serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE
Validity
Not Before: Apr 17 07:24:02 2026 GMT
Not After : Apr 24 07:24:02 2026 GMT
Subject: CN=69e1e013-afbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:83:a7:ad:7a:09:4a:91:a5:a3:53:8d:07:
28:e7:b0:92:06:c4:41:25:d1:c1:f6:34:92:80:01:
05:bd:3e:55:31:7e:fd:1d:0f:80:d1:be:d6:8c:c9:
c5:f0:3e:b2:44:19:c2:8b:b8:c0:e6:63:32:ca:20:
a5:80:39:40:e9:a4:d0:7e:91:78:01:64:c5:87:30:
6b:59:88:90:e2:76:1b:83:8c:34:03:9f:9b:70:66:
e3:c3:36:83:98:8f:da:e6:8e:d9:07:23:49:79:2c:
c3:d3:53:b4:b2:09:58:c4:45:9a:f5:e9:0b:2a:23:
7f:5a:93:fb:0b:38:7a:f1:88:05:2f:a2:02:b5:c0:
f5:ec:28:d4:c0:56:91:0b:ab:5e:5f:78:d0:c8:39:
64:ac:54:e8:4c:f3:1c:c5:fa:d7:6f:89:a8:81:dd:
c6:48:8c:98:0b:d4:02:ae:01:76:1b:ca:2d:5d:6b:
6c:c2:55:dc:48:ab:c1:3b:10:c7:8c:7c:de:9d:97:
52:5f:87:cd:eb:ba:13:17:ab:82:77:a0:1c:49:93:
39:c0:9c:ca:2e:36:bc:de:a9:0f:c9:72:54:85:52:
43:69:68:f6:d5:3b:56:ef:23:40:49:78:81:e6:d0:
ad:d5:f2:d6:02:a0:2f:6e:13:b9:9e:b0:74:3a:90:
25:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0A:3A:CC:7E:0A:3E:3C:6C:2F:E3:AE:57:1B:4A:F4:51:60:EB:53
X509v3 Authority Key Identifier:
keyid:89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:49:20:0d:0c:72:b3:d9:e9:9f:06:78:e9:5e:79:a6:ea:5c:
8c:46:79:6d:7a:b9:6d:42:ce:0a:f4:81:7f:55:53:ee:7e:0a:
05:6f:3d:92:3f:a8:33:59:b8:a6:df:ea:0c:16:bf:69:f1:49:
29:13:d1:81:a4:a9:e0:90:61:f9:6c:5d:1c:63:f1:ed:4d:cf:
73:d1:31:9e:a6:f4:f6:1a:c0:ec:64:7a:11:8f:a6:a6:c9:ce:
55:e9:e6:60:33:7a:02:59:e5:15:6e:36:be:1a:5a:96:17:e9:
e8:c0:f9:2e:a3:af:91:3b:a5:9b:17:a3:bd:2c:6d:93:0e:08:
f1:80:27:e1:2a:1b:68:48:4b:4a:17:d4:cb:43:70:a8:de:59:
e3:74:e8:fe:ef:b6:8e:9b:bd:a0:b2:c3:0e:8f:98:8a:90:ba:
89:4c:61:fa:a7:7b:fe:cb:13:95:7b:db:85:90:ef:73:a6:fb:
75:0d:ec:53:10:bf:39:ce:a7:45:63:ff:ce:41:81:e5:27:aa:
3c:7c:11:a8:90:1a:6a:60:8d:e0:2e:51:cb:6f:4d:42:92:34:
3b:d0:31:50:05:74:92:72:b4:7e:18:50:14:40:3b:09:4f:20:
0c:77:58:d8:d7:0c:83:d8:35:7b:60:2c:f3:6c:a9:28:99:5f:
b0:96:2b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:09:03 2026 by rpki-client