
$ rpki-client -vvf rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
File: I90ea4NEljsEULkpM3adRKcyUWs.mft (raw, json)
Hash identifier: L2u06F9FGaerLSgoQgY3AwnfFACti38SrGROa+UHyAQ=
Subject key identifier: D2:8E:E9:AF:9B:23:00:9F:0E:80:C4:B3:4D:BD:91:DA:11:26:F5:DA
Authority key identifier: 23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B
Certificate issuer: /CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B
Certificate serial: 0229
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
Manifest number: 021D
Signing time: Thu 23 Jul 2026 04:04:57 +0000
Manifest this update: Thu 23 Jul 2026 04:04:57 +0000
Manifest next update: Thu 30 Jul 2026 04:04:57 +0000
Files and hashes: 1: I90ea4NEljsEULkpM3adRKcyUWs.crl (hash: 7ynXPJzgHJdZcMkLe+4MZJOIuQ0cHpCExt05Gfqp1dA=)
2: 413CAD964D6011EE80905941C4F9AE02.roa (hash: 58pWdHGWJ/ggfr/u1qdz2+yvUUIbs/1dEuDaPVOcwn0=)
3: 229EA4AC57D811EEAB6EE280C4F9AE02.roa (hash: hnFKBBY108dazlRhnbTksklhF3iwtTcT7etyMAPxnIw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl
rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91437AC, serialNumber=23DD1E6B8344963B0450B92933769D44A732516B
Validity
Not Before: Jul 23 04:04:57 2026 GMT
Not After : Jul 30 04:04:57 2026 GMT
Subject: CN=6a6192e9-8ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:cf:8a:87:e7:53:19:35:c7:1a:ea:78:81:
b3:6d:23:71:2f:08:b7:fe:7c:22:34:4e:cc:48:95:
04:1e:15:44:41:58:b1:7b:2c:dd:1c:2d:9a:26:9c:
49:f7:d3:a1:7b:89:d0:64:7d:45:67:e2:0e:5d:c9:
d5:84:0e:31:ed:56:31:61:f8:13:e3:11:73:cc:a6:
99:f8:53:17:cd:09:79:29:13:17:69:d8:0b:5b:7f:
6d:e9:9c:9e:d3:0a:38:f6:65:09:42:a9:3e:8d:75:
ff:45:5b:ef:31:51:11:6c:2d:92:8e:27:63:d2:04:
3f:49:28:80:0b:c7:d9:b9:0e:68:d1:b4:2b:32:42:
de:29:11:46:7a:f8:9a:19:a6:e8:a9:d5:3c:a3:48:
c6:c5:72:77:1f:a1:c9:7f:ab:b8:aa:d6:f5:d9:2a:
fe:59:07:a4:06:ac:c8:55:65:cf:1d:e9:68:dc:14:
4c:e6:15:a9:ce:7d:10:b3:17:4a:07:ac:bd:d6:1b:
f5:8d:e5:ce:ef:fd:b6:cb:a8:5f:d6:31:3c:73:c3:
06:29:a0:65:93:9c:7b:36:87:ab:7b:6b:2b:22:ea:
6b:41:80:2b:df:3e:87:e2:50:5a:38:cd:df:24:61:
39:e8:e7:fb:8c:23:75:f9:f0:09:88:9e:a2:56:eb:
c7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8E:E9:AF:9B:23:00:9F:0E:80:C4:B3:4D:BD:91:DA:11:26:F5:DA
X509v3 Authority Key Identifier:
keyid:23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:62:df:a9:44:5f:c5:73:1d:b8:e2:82:04:c3:81:77:7e:75:
90:eb:07:b3:25:a2:fd:fa:91:3a:e9:4b:20:8b:c0:83:5c:fa:
69:01:82:a7:f4:e0:0f:6f:09:77:0b:b3:0e:1c:90:4b:f1:b8:
2f:ca:3d:21:bb:31:e7:a0:e7:a9:35:25:e4:25:95:8f:7f:71:
30:e3:c7:c1:ad:56:1f:0a:41:b2:7d:e6:38:64:d8:37:d0:07:
95:71:b6:08:9f:3a:83:1e:97:23:24:95:ae:1c:c0:c5:3b:15:
10:00:15:11:10:d9:72:35:2f:c1:64:d5:92:d7:25:1d:92:3a:
ec:bd:7a:1b:1d:f3:e3:ac:09:f1:c7:0b:2e:6e:de:45:5a:4c:
39:55:2a:4a:9a:88:fd:d8:53:bd:7a:99:f5:7a:72:2f:38:62:
f8:29:23:c4:c1:3e:97:e1:1b:bc:fb:90:d2:ba:fd:b2:15:39:
42:92:9e:69:69:7d:ca:4f:f5:8b:22:42:01:58:0d:04:a0:6b:
0f:e9:93:29:48:c3:88:e1:f1:6a:28:d9:09:eb:fd:5a:d0:ff:
31:d1:6b:84:96:5f:f3:8a:66:18:73:0b:30:30:f0:28:66:37:
37:e3:e3:61:d1:cf:32:44:12:0f:07:92:7d:be:1a:ee:63:02:
91:1c:06:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:32:03 2026 by rpki-client