
$ rpki-client -vvf rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
File: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft (raw, json)
Hash identifier: +IiEpMj9FA40WgQQouuOZbP1ibJOQ4E2XtlgKdBC0u8=
Subject key identifier: 42:B4:D1:E7:4C:01:A6:65:4E:58:12:98:72:5B:48:C4:28:5D:0F:23
Authority key identifier: FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6
Certificate issuer: /CN=A91820AF/serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6
Certificate serial: 0728
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
Manifest number: 071E
Signing time: Tue 12 May 2026 21:59:33 +0000
Manifest this update: Tue 12 May 2026 21:59:33 +0000
Manifest next update: Tue 19 May 2026 21:59:33 +0000
Files and hashes: 1: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl (hash: LadDrAPVFYGqLsFI6VIbauVSwQyO1uCJHQoIjxnzSQQ=)
2: D4DE5FF8A01F11EC87D72549C4F9AE02.roa (hash: aA6Dw3R9kVAHSoiUlastCf/DMZ8hslWGyzDMB+ksQeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl
rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:59:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1832 (0x728)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91820AF, serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6
Validity
Not Before: May 12 21:59:33 2026 GMT
Not After : May 19 21:59:33 2026 GMT
Subject: CN=6a03a2c5-19e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7e:c2:97:39:b9:47:00:cc:be:5d:da:6b:7f:
17:83:39:55:d9:7d:2e:51:1e:b1:d7:a7:0b:02:29:
9d:66:f8:b5:94:82:58:58:45:f5:e3:7f:84:c0:0a:
b6:f1:1a:76:12:9d:83:64:e5:a5:3c:c2:ad:e1:9b:
d1:95:a7:4a:f0:c9:99:d5:f5:22:55:3e:53:63:d7:
86:2f:42:80:1a:c6:e4:ad:cc:a3:bf:7a:e7:14:d9:
37:6c:5c:dd:58:2d:e7:03:3d:c2:9e:6f:3b:0c:d4:
5b:3c:38:2f:81:42:2e:77:ff:d9:60:69:56:23:de:
c4:87:53:e4:07:2f:63:b4:17:7c:7f:b5:18:7d:01:
dd:a9:f6:17:13:0c:ec:b1:61:58:69:94:b1:8a:5f:
d7:34:6f:a4:d1:39:82:67:13:e0:c6:00:cd:ef:1f:
74:a4:9f:e2:89:c4:a6:40:54:19:58:90:63:bd:a9:
ac:50:9b:1b:e0:95:fc:27:0a:2b:00:40:a1:49:f8:
d7:f9:c3:26:db:db:22:6c:71:5e:50:a8:8c:70:8e:
bf:55:93:eb:2f:d3:b8:35:ef:ab:cc:b7:e7:18:f9:
56:86:d0:e3:51:9c:54:aa:bc:7b:b9:66:17:56:18:
a3:79:e0:a7:8c:32:87:b1:d7:62:e9:e1:1e:5c:a5:
59:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B4:D1:E7:4C:01:A6:65:4E:58:12:98:72:5B:48:C4:28:5D:0F:23
X509v3 Authority Key Identifier:
keyid:FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b7:43:46:0b:e5:f8:be:23:8b:de:a2:21:9b:d3:e1:02:85:
81:f6:ae:18:1a:3c:f1:bf:d2:57:42:c9:08:8a:ef:1a:a6:36:
f8:22:00:57:25:ed:7d:c8:80:4b:d1:1e:7e:69:4a:4e:21:04:
ce:67:a7:0d:c1:20:f2:03:2e:6e:b5:80:6c:63:d5:fe:8a:0e:
7d:27:23:13:16:1d:b0:09:0c:f2:68:7b:d4:03:a0:06:50:e9:
a0:d9:e4:13:f6:b5:f4:82:fb:a3:ef:0f:a2:cd:e6:9e:51:b9:
bd:3a:b0:0f:29:15:6b:07:40:ac:d9:1e:b4:f2:19:17:fc:03:
09:f4:0f:3d:7a:70:5a:80:50:84:03:81:d5:42:c6:ca:62:2c:
84:e7:8b:7e:70:83:d7:9d:d5:9a:3a:3d:f1:5c:61:ec:d2:b2:
d5:b5:af:25:d9:a2:49:b8:10:c6:26:32:39:0d:8c:29:f3:5e:
0e:57:30:f9:35:fb:fc:22:31:e2:80:63:b9:95:00:5a:e9:7f:
26:bf:f3:6b:1c:f3:96:c6:5a:0d:14:f0:c9:37:f8:ae:c8:cd:
59:d7:f0:6b:a0:e9:d1:0d:84:63:c0:d5:79:14:be:55:00:17:
03:95:fe:8a:38:4c:92:0c:6c:cf:e0:b0:bb:5b:56:22:b4:b3:
32:b7:21:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:21:26 2026 by rpki-client