
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
File: IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft (raw, json)
Hash identifier: +02CYaYQcekGuIwCw+h2BGGZ5rmoI8PcBwTXOr8sYgw=
Subject key identifier: 56:2D:1C:B0:15:13:37:C7:34:67:F2:D7:84:96:44:D4:AA:AE:70:B8
Authority key identifier: 21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6
Certificate issuer: /CN=A91159B7/serialNumber=21F20227559DB1F863849AB643233C3E935776A6
Certificate serial: 0E07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
Manifest number: 0DF7
Signing time: Thu 24 Sep 2026 17:49:07 +0000
Manifest this update: Thu 24 Sep 2026 17:49:07 +0000
Manifest next update: Thu 01 Oct 2026 17:49:07 +0000
Files and hashes: 1: IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl (hash: tSMe2tvGEXupaZ9eORxBuh/00Dxf/PSIM03TP7EcSbs=)
2: 7FC0801ED4EF11EC84AABC0CC4F9AE02.roa (hash: rkIEofZev6bDtd5nBARLbA+jCza/n/hXbR4AIclPFH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl
rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3591 (0xe07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91159B7, serialNumber=21F20227559DB1F863849AB643233C3E935776A6
Validity
Not Before: Sep 24 17:49:07 2026 GMT
Not After : Oct 1 17:49:07 2026 GMT
Subject: CN=6ab56293-710e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:18:d3:54:48:8e:ad:86:ff:f2:ec:be:c4:ad:
99:50:35:c4:20:4c:52:12:2c:56:b5:4d:a2:54:4d:
35:d1:46:8c:cb:ae:3d:78:24:80:27:31:ca:7a:3c:
96:76:40:40:e8:e1:e0:10:7c:f7:29:e6:3d:7d:6f:
33:c3:dc:65:af:ba:0a:2a:5d:fe:32:f5:9a:a1:c8:
0c:d2:1c:2a:7b:15:61:0e:57:d9:a5:2a:df:d8:d6:
a5:f9:78:d4:67:b2:aa:1b:6c:74:86:20:60:f1:cf:
dd:96:c4:41:e4:d2:1a:e0:bd:68:bc:17:37:8f:88:
02:14:c6:c5:c6:08:3b:7e:9d:df:06:5e:c0:9a:04:
95:f2:3a:bf:6c:92:7a:7d:11:3f:60:d3:4a:78:72:
4d:f6:11:b1:1a:26:d5:a1:75:93:1c:41:d8:70:49:
0c:76:ba:37:17:29:33:3e:b9:de:4d:2f:57:1c:6e:
01:8d:26:6d:89:2d:57:30:4e:00:95:43:39:5c:59:
48:d5:f4:21:09:15:0b:08:bb:08:7e:18:f1:f4:3f:
9f:d1:31:f4:bf:f3:31:16:e9:09:b0:00:06:bc:6c:
b6:9f:90:9e:65:2c:66:b0:f3:16:4d:7f:62:9b:94:
41:78:b4:a6:d4:88:6f:f6:dc:df:40:70:04:8b:f6:
26:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2D:1C:B0:15:13:37:C7:34:67:F2:D7:84:96:44:D4:AA:AE:70:B8
X509v3 Authority Key Identifier:
keyid:21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:66:7b:4c:1d:9e:6f:18:b0:d1:8b:25:5b:94:d5:da:66:d6:
93:ad:b1:72:70:87:e1:10:c9:39:ac:d1:24:c9:2c:ac:95:5f:
53:eb:00:a3:44:a4:f3:dd:0c:56:b9:e4:9b:ff:cd:54:2c:b6:
a8:f7:b2:a0:c0:e4:19:15:a6:c2:f7:6a:bc:f3:aa:9d:42:77:
dc:1c:3a:b6:85:c3:40:fb:06:19:a7:8a:b1:54:a6:ec:55:3e:
a5:b7:ec:39:8e:e0:36:81:27:66:a7:7f:39:d4:a9:fb:18:55:
9e:65:bb:d3:80:fc:53:d1:ad:c1:c3:87:32:05:b5:4f:e2:0e:
8d:7f:8b:77:60:eb:4b:17:87:8d:74:9e:d3:76:9d:9e:d0:45:
7e:73:b6:c8:48:a5:b6:bf:81:5a:9d:ed:43:ad:c1:d6:67:50:
a8:0c:e2:70:7b:9b:07:22:e2:48:6b:4c:21:18:20:6e:fd:ff:
68:20:8d:8c:1e:c9:7b:36:2b:cb:d4:7e:81:e4:a6:c2:0a:9a:
98:b0:36:0b:e3:a9:97:b3:c1:05:76:a5:28:b0:47:fb:5d:35:
ff:31:e4:4b:d0:05:46:94:b2:2b:33:6b:41:8e:e9:f6:d6:ee:
c3:a4:d4:97:1e:ae:f1:43:e9:81:4f:a1:23:92:e2:53:15:91:
2e:e5:f8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:53:15 2026 by rpki-client