
$ rpki-client -vvf rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
File: iCJHhVdMHyPKnEOe2PVTiPamjOI.mft (raw, json)
Hash identifier: m5iHzoEYjSN4Xju2rf4Nv1/7RCh9ZJjWYovvFsztsyo=
Subject key identifier: A9:85:1F:04:D6:7A:CF:84:76:41:63:1D:96:68:C1:5B:52:D6:D0:F3
Authority key identifier: 88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2
Certificate issuer: /CN=A91689B7/serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2
Certificate serial: 02C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
Manifest number: 02C0
Signing time: Thu 23 Jul 2026 02:24:12 +0000
Manifest this update: Thu 23 Jul 2026 02:24:11 +0000
Manifest next update: Thu 30 Jul 2026 02:24:11 +0000
Files and hashes: 1: iCJHhVdMHyPKnEOe2PVTiPamjOI.crl (hash: aOJfbnDzLpi4txEmhTEK/sbcdyv4Yf4Oujk7La4ud/I=)
2: 2455276E39B311EEA6DFE66BC4F9AE02.roa (hash: Ot9ybUKOEhuNzPb2fA0AHKITpD0tgf/ehRwyWkuwPQQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl
rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 713 (0x2c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91689B7, serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2
Validity
Not Before: Jul 23 02:24:11 2026 GMT
Not After : Jul 30 02:24:11 2026 GMT
Subject: CN=6a617b4c-6520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7f:3e:18:69:c5:e2:98:8d:38:f8:e1:3c:80:
61:2b:24:2e:d0:1c:44:53:d5:4a:6f:82:93:cd:0f:
1d:45:8e:d0:75:3f:61:11:82:6a:a3:07:2a:2d:f3:
39:06:8d:63:16:57:6a:55:48:2e:53:76:06:85:81:
28:eb:6e:ab:89:88:d3:62:4d:35:67:6b:62:86:82:
d6:bb:f5:83:74:59:7b:09:96:53:2e:c1:dc:06:85:
f8:d1:95:c0:92:ff:b6:32:99:8e:b1:00:14:f5:55:
61:09:8f:c3:f9:31:c1:61:c8:8c:3e:80:c0:6c:af:
c3:0d:22:29:9c:f4:50:1c:a5:18:30:ac:ca:89:8a:
41:88:31:41:b7:48:f6:2e:27:36:94:2e:dd:49:51:
6a:8d:fe:cc:80:85:9e:0a:44:c9:5e:86:8d:21:31:
82:f1:b5:58:2a:a5:42:7c:c3:95:3a:fd:55:0c:c0:
81:df:ec:06:8a:4c:74:77:14:e4:04:49:10:ad:ad:
2b:b1:85:01:91:84:3c:c2:e2:f9:fa:76:a6:12:ed:
97:5b:46:a0:6b:14:22:30:9d:68:0d:96:12:1e:76:
6f:b9:ab:cf:80:54:60:6e:ed:66:68:47:58:6b:0d:
81:95:b9:9f:d6:3d:f0:10:30:ef:7f:ba:ee:4a:2c:
4d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:85:1F:04:D6:7A:CF:84:76:41:63:1D:96:68:C1:5B:52:D6:D0:F3
X509v3 Authority Key Identifier:
keyid:88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:0f:ce:86:7f:7a:ee:99:66:d4:da:50:68:bd:f3:9d:ed:e9:
3a:a3:23:87:fb:6b:30:a8:89:43:14:c7:e1:b6:32:c0:d3:4a:
8b:67:18:95:4a:31:6e:fc:e3:ff:38:0c:b2:ed:a2:cb:a2:a7:
34:e8:a8:11:8c:f0:a1:e5:81:0a:da:c6:31:fe:21:38:52:04:
5e:cd:47:2c:30:a0:86:0e:8f:da:27:31:d5:77:56:9d:e0:57:
35:4a:7b:d6:e7:48:02:1f:e0:4a:db:55:03:63:f2:c6:30:59:
90:84:72:90:ad:cd:fe:b4:13:03:c1:7f:63:68:bc:c6:ee:9a:
55:a0:e7:11:0c:83:e3:ce:dd:b7:d6:aa:0a:1d:fa:57:32:50:
a4:ca:f7:54:ed:bd:8a:ee:ef:dd:c2:f9:25:36:5a:92:13:33:
b5:99:d0:48:5d:6b:31:4c:dd:85:a2:7c:10:83:87:9e:56:3d:
73:ce:d5:74:3b:e9:ca:ff:98:5b:a8:24:60:93:d9:65:0b:59:
20:63:04:4f:0d:56:13:94:35:c5:cc:8d:45:f1:e5:48:98:f7:
43:25:fe:d2:8c:f9:d9:cd:c9:75:30:ad:25:99:6c:ac:7a:5f:
f0:94:4f:74:d7:8b:b6:45:6d:81:26:fb:7d:56:26:60:e8:8d:
16:a6:63:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:31 2026 by rpki-client