
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
File: IQlGzanedd75YJiV-_Ie2Exy9Oc.mft (raw, json)
Hash identifier: Tw9EOpBbJaNq0kGIM394yjKc+o2dHlMAxWVOPUOuSd4=
Subject key identifier: 04:79:C8:01:BB:12:27:BC:83:44:4B:2F:3C:88:0C:78:E4:E3:21:B0
Authority key identifier: 21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7
Certificate issuer: /CN=A91F7537/serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7
Certificate serial: 0161
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
Manifest number: 015D
Signing time: Mon 21 Sep 2026 05:06:55 +0000
Manifest this update: Mon 21 Sep 2026 05:06:54 +0000
Manifest next update: Mon 28 Sep 2026 05:06:54 +0000
Files and hashes: 1: IQlGzanedd75YJiV-_Ie2Exy9Oc.crl (hash: ygWdle3b4ugeZRE+BNC3mk76bJu8OtTbX9azefxRkOk=)
2: 6156C7F6A27311EFBF7D5E22C4F9AE02.roa (hash: vy7IODG07pz73pTj0pY/9n2zcuO8v2L2DLhKfTMR+yA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl
rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7537, serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7
Validity
Not Before: Sep 21 05:06:54 2026 GMT
Not After : Sep 28 05:06:54 2026 GMT
Subject: CN=6ab0bb6f-dba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:32:06:9b:4e:29:4d:c1:84:f2:fe:a4:80:
ef:01:b9:04:51:ac:4e:b8:35:9b:9a:80:7f:5b:bc:
23:ff:5d:6e:a1:d4:21:86:db:29:06:94:79:2e:3a:
3a:87:8d:29:b7:b2:26:d4:48:50:cf:11:8b:ef:8a:
02:5f:8d:48:43:5b:2b:53:e6:0c:db:ab:b6:9c:fa:
64:03:d4:14:45:ce:17:6f:27:18:32:42:0e:30:13:
69:3c:8c:3d:7c:ee:55:f9:06:d0:c9:c7:06:3f:a5:
88:8b:28:ff:3c:aa:d9:2f:50:dd:48:bb:9d:d5:dd:
72:33:30:8b:ba:9a:f3:00:c3:65:49:de:f6:37:aa:
77:24:45:64:dd:ea:33:01:b4:51:35:81:b0:47:0b:
9a:43:35:a5:33:f5:65:5d:ff:05:05:88:3f:a3:8b:
09:4a:f7:42:22:cf:d8:90:2b:5c:b5:87:2b:ea:d9:
23:f9:7b:02:63:ae:4c:22:4f:1f:ce:c1:bb:2c:11:
62:7d:a1:a2:b3:06:04:fa:08:e7:fd:22:aa:87:7e:
8f:7a:98:14:2f:e4:1a:74:43:d9:db:9e:af:18:d7:
ed:49:45:a2:8e:11:02:a4:85:7b:ca:2a:a5:09:52:
b2:6d:d7:a5:1f:87:db:a4:ab:2c:1a:7c:f3:d1:8c:
76:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:79:C8:01:BB:12:27:BC:83:44:4B:2F:3C:88:0C:78:E4:E3:21:B0
X509v3 Authority Key Identifier:
keyid:21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:43:3a:f8:da:32:13:45:b4:26:be:73:8f:99:03:ca:f0:9b:
09:ea:93:3c:d1:b1:d9:3e:19:64:75:69:f3:59:a6:ec:45:99:
4c:f6:7e:92:51:d2:1d:44:89:f8:89:f9:7b:ad:fa:56:19:01:
46:a8:ab:14:5b:fd:d5:b0:c4:b8:6e:aa:0f:d4:8c:b0:92:73:
08:09:f4:69:2a:c5:2f:8a:53:71:2c:4b:e8:4c:46:4f:4e:fd:
18:68:37:ea:12:33:79:46:68:6a:7b:4d:d9:24:ac:e5:92:2c:
35:1f:3b:94:46:c8:8d:a3:90:3e:5a:ff:85:f0:36:0e:8e:e4:
de:21:2a:6c:b0:ed:e9:5f:a6:f1:a0:67:a5:8b:d1:75:d7:fc:
eb:c1:4b:11:1c:08:37:3b:62:3a:d2:40:5e:55:c7:b5:8d:67:
a8:38:6a:c1:db:d7:e9:3c:37:8a:e7:04:ba:f7:da:34:4d:e3:
22:8d:80:15:6e:82:e2:59:bd:9e:db:a6:96:cb:93:07:86:ca:
6f:18:b8:14:d9:7e:6e:7a:e4:8f:0f:c2:0b:b5:cd:da:dc:c4:
9c:c8:34:d4:dd:6d:3b:9f:4d:6c:fb:9d:de:4e:40:1e:4b:9a:
6d:b0:30:31:0d:1b:15:cb:7d:5e:59:bb:03:70:46:93:80:0a:
40:f4:8e:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjc1MzcxMTAvBgNVBAUTKDIxMDk0NkNEQTlERTc1REVGOTYwOTg5NUZCRjIxRUQ4
NEM3MkY0RTcwHhcNMjYwOTIxMDUwNjU0WhcNMjYwOTI4MDUwNjU0WjAYMRYwFAYD
VQQDEw02YWIwYmI2Zi1kYmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvZYyBptOKU3BhPL+pIDvAbkEUaxOuDWbmoB/W7wj/11uodQhhtspBpR5Ljo6
h40pt7Im1EhQzxGL74oCX41IQ1srU+YM26u2nPpkA9QURc4XbycYMkIOMBNpPIw9
fO5V+QbQyccGP6WIiyj/PKrZL1DdSLud1d1yMzCLuprzAMNlSd72N6p3JEVk3eoz
AbRRNYGwRwuaQzWlM/VlXf8FBYg/o4sJSvdCIs/YkCtctYcr6tkj+XsCY65MIk8f
zsG7LBFifaGiswYE+gjn/SKqh36PepgUL+QadEPZ256vGNftSUWijhECpIV7yiql
CVKybdelH4fbpKssGnzz0Yx27QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAR5yAG7
Eie8g0RLLzyIDHjk4yGwMB8GA1UdIwQYMBaAFCEJRs2p3nXe+WCYlfvyHthMcvTn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUzNy84N0RENTQ4Q0Ey
NzExMUVGQTM5MkYwNzlDNEY5QUUwMi9JUWxHemFuZWRkNzVZSmlWLV9JZTJFeHk5
T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lRbEd6YW5lZGQ3NVlKaVYtX0llMkV4eTlPYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzUzNy84N0RENTQ4Q0EyNzExMUVGQTM5MkYwNzlDNEY5QUUwMi9JUWxHemFuZWRk
NzVZSmlWLV9JZTJFeHk5T2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALUM6+NoyE0W0Jr5zj5kDyvCbCeqTPNGx2T4ZZHVp81mm7EWZTPZ+klHSHUSJ
+In5e636VhkBRqirFFv91bDEuG6qD9SMsJJzCAn0aSrFL4pTcSxL6ExGT079GGg3
6hIzeUZoantN2SSs5ZIsNR87lEbIjaOQPlr/hfA2Do7k3iEqbLDt6V+m8aBnpYvR
ddf868FLERwINztiOtJAXlXHtY1nqDhqwdvX6Tw3iucEuvfaNE3jIo2AFW6C4lm9
ntumlsuTB4bKbxi4FNl+bnrkjw/CC7XN2tzEnMg01N1tO59NbPud3k5AHkuabbAw
MQ0bFct9Xlm7A3BGk4AKQPSONw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:43:23 2026 by rpki-client