
$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft
File: IohtF2pzwL483ViJwqizI-O5QSw.mft (raw, json)
Hash identifier: VtH0skYvnQY1PDAkdDu8MRM4WTelBMhM/kyQHLOPSGY=
Subject key identifier: 6B:8D:04:8C:FB:15:51:32:AC:37:19:54:EA:61:6A:25:AD:3C:35:FA
Authority key identifier: 22:88:6D:17:6A:73:C0:BE:3C:DD:58:89:C2:A8:B3:23:E3:B9:41:2C
Certificate issuer: /CN=A91658EF/serialNumber=22886D176A73C0BE3CDD5889C2A8B323E3B9412C
Certificate serial: 15C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft
Manifest number: 2DB3
Signing time: Tue 12 May 2026 16:45:19 +0000
Manifest this update: Tue 12 May 2026 16:45:19 +0000
Manifest next update: Tue 19 May 2026 16:45:19 +0000
Files and hashes: 1: IohtF2pzwL483ViJwqizI-O5QSw.crl (hash: /6hkwn2KutU4jnTjZWEK1oGPLYeajWLDE4K//eOj8og=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.crl
rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5569 (0x15c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91658EF, serialNumber=22886D176A73C0BE3CDD5889C2A8B323E3B9412C
Validity
Not Before: May 12 16:45:19 2026 GMT
Not After : May 19 16:45:19 2026 GMT
Subject: CN=6a03591f-70f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:75:9b:cf:c4:2a:42:7b:c4:60:a9:ce:cc:c4:
6c:00:ea:a5:1d:24:d1:05:17:ce:f9:07:ba:2e:4e:
e0:26:ac:f3:ac:7e:5d:79:bc:26:65:7e:38:12:40:
96:d5:fa:0d:1b:70:1e:3d:2e:dd:57:12:c3:80:e5:
e1:9b:71:02:0b:c8:4c:76:02:68:ac:f8:63:99:54:
cb:9e:47:84:35:2f:b1:80:f7:e9:7d:0d:2e:c4:8f:
57:b8:43:de:92:35:38:64:64:6f:cc:b4:45:ad:c9:
2b:e6:d2:fb:08:b2:6d:07:15:60:b2:f3:e9:dc:ab:
8d:82:61:73:77:7e:87:21:5b:47:22:4f:8c:dc:ce:
01:43:ce:21:13:ff:ca:93:3c:52:85:47:27:98:d8:
6d:a1:d5:59:47:a9:e9:3b:31:e6:f4:a0:7d:0d:ea:
93:a8:52:b9:70:37:60:3c:38:81:65:5a:39:06:b0:
b3:43:4a:bd:19:d7:48:fc:c9:e5:3a:4f:ae:57:dd:
74:bb:b9:00:e5:3c:a5:6f:bc:36:a9:76:6f:bc:9c:
a5:50:8a:97:8b:29:5a:a4:50:eb:19:98:27:fd:d6:
f1:2b:55:af:5f:7b:84:19:54:bf:a1:56:34:39:50:
54:5b:a7:05:b7:6e:0a:ce:64:df:b3:4a:53:88:22:
21:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8D:04:8C:FB:15:51:32:AC:37:19:54:EA:61:6A:25:AD:3C:35:FA
X509v3 Authority Key Identifier:
keyid:22:88:6D:17:6A:73:C0:BE:3C:DD:58:89:C2:A8:B3:23:E3:B9:41:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:0b:ab:59:00:54:a9:79:39:fc:ac:75:00:0b:4a:cf:95:d5:
1c:75:0a:bc:d0:3e:e6:93:ff:c2:a0:d2:00:d2:6a:e9:d5:05:
97:99:62:ee:1d:b4:6c:c9:af:af:c6:2e:7d:94:4e:c1:96:00:
fa:a5:16:11:f2:a4:24:0f:37:63:42:f1:02:bd:c8:e3:fa:22:
f3:9d:1d:96:f0:37:6b:d9:25:58:02:a4:93:c7:43:e2:9c:c1:
53:ea:05:cd:03:0b:6c:5d:46:4b:dc:a3:d3:7b:88:33:50:20:
ef:ec:68:46:d5:e0:f9:cc:72:cc:1c:59:97:c1:04:92:e6:71:
b9:85:4e:89:3d:31:60:a2:0f:0d:2b:b0:01:ed:11:69:05:66:
c5:25:b3:7f:d9:45:50:7e:62:3c:7d:5e:dd:b2:96:0a:e7:22:
f5:a4:f5:6d:9c:f4:22:01:54:39:cd:f1:9d:94:d1:ac:81:b5:
fd:f6:85:ac:c1:93:cb:72:84:6a:47:97:86:d1:10:c1:0d:e6:
42:d4:f6:33:a2:88:51:95:ea:4a:4a:9a:97:4b:86:fb:99:5a:
18:99:91:81:06:bd:c1:f0:2e:90:b8:c2:1c:d0:79:24:81:74:
13:50:29:32:a4:fa:59:31:43:dd:2e:e8:37:2b:25:7c:0f:69:
d0:8a:58:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU4RUYxMTAvBgNVBAUTKDIyODg2RDE3NkE3M0MwQkUzQ0RENTg4OUMyQThCMzIz
RTNCOTQxMkMwHhcNMjYwNTEyMTY0NTE5WhcNMjYwNTE5MTY0NTE5WjAYMRYwFAYD
VQQDEw02YTAzNTkxZi03MGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi3Wbz8QqQnvEYKnOzMRsAOqlHSTRBRfO+Qe6Lk7gJqzzrH5debwmZX44EkCW
1foNG3AePS7dVxLDgOXhm3ECC8hMdgJorPhjmVTLnkeENS+xgPfpfQ0uxI9XuEPe
kjU4ZGRvzLRFrckr5tL7CLJtBxVgsvPp3KuNgmFzd36HIVtHIk+M3M4BQ84hE//K
kzxShUcnmNhtodVZR6npOzHm9KB9DeqTqFK5cDdgPDiBZVo5BrCzQ0q9GddI/Mnl
Ok+uV910u7kA5Tylb7w2qXZvvJylUIqXiylapFDrGZgn/dbxK1WvX3uEGVS/oVY0
OVBUW6cFt24KzmTfs0pTiCIhUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGuNBIz7
FVEyrDcZVOphaiWtPDX6MB8GA1UdIwQYMBaAFCKIbRdqc8C+PN1YicKosyPjuUEs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThFRi9EMjQzMzc5NjRB
RUMxMUU4ODQxN0YzNEFDNEY5QUUwMi9Jb2h0RjJwendMNDgzVmlKd3FpekktTzVR
U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lvaHRGMnB6d0w0ODNWaUp3cWl6SS1PNVFTdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NThFRi9EMjQzMzc5NjRBRUMxMUU4ODQxN0YzNEFDNEY5QUUwMi9Jb2h0RjJwendM
NDgzVmlKd3FpekktTzVRU3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzgurWQBUqXk5/Kx1AAtKz5XVHHUKvNA+5pP/wqDSANJq6dUFl5li7h20bMmv
r8YufZROwZYA+qUWEfKkJA83Y0LxAr3I4/oi850dlvA3a9klWAKkk8dD4pzBU+oF
zQMLbF1GS9yj03uIM1Ag7+xoRtXg+cxyzBxZl8EEkuZxuYVOiT0xYKIPDSuwAe0R
aQVmxSWzf9lFUH5iPH1e3bKWCuci9aT1bZz0IgFUOc3xnZTRrIG1/faFrMGTy3KE
akeXhtEQwQ3mQtT2M6KIUZXqSkqal0uG+5laGJmRgQa9wfAukLjCHNB5JIF0E1Ap
MqT6WTFD3S7oNyslfA9p0IpYuA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:29:20 2026 by rpki-client