
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft
File: IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft (raw, json)
Hash identifier: f54H9aIzsSvJ0wjvDYFaNMxAoIFkGwueNf4TFoO2iXI=
Subject key identifier: BA:D6:45:9C:E3:CA:2B:D5:D7:4E:6A:8E:5B:31:BE:7E:67:83:1B:4C
Authority key identifier: 22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7
Certificate issuer: /CN=A91A42A4/serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7
Certificate serial: 024E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft
Manifest number: 0249
Signing time: Thu 23 Jul 2026 03:34:06 +0000
Manifest this update: Thu 23 Jul 2026 03:34:05 +0000
Manifest next update: Thu 30 Jul 2026 03:34:05 +0000
Files and hashes: 1: IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl (hash: 7u0wHiRfxemlGBafu0qDP6xPPUDUe389YsLhpXIrhdg=)
2: 73E56336069E11EE9D687712C4F9AE02.roa (hash: om7Sq6Lx++CTZo3S6TXHABbbtVLGwtLuoqtkbUG/ymw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl
rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:34:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590 (0x24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A42A4, serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7
Validity
Not Before: Jul 23 03:34:05 2026 GMT
Not After : Jul 30 03:34:05 2026 GMT
Subject: CN=6a618bae-396a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:1e:a3:4f:b5:e1:67:26:86:76:8d:93:e0:
83:69:bc:89:a2:ef:8d:85:12:c1:0a:50:09:98:c7:
8e:8a:f6:1a:22:6f:12:b5:2d:d3:68:20:1f:a9:9d:
70:b9:19:d1:0a:68:ff:c4:06:ee:09:69:fa:df:75:
4b:b5:e1:d6:f0:dc:da:1f:e7:b2:3e:8c:3e:3b:1f:
16:26:03:18:3b:15:63:76:cf:42:92:07:9e:57:63:
38:5f:ae:f1:5b:ac:fe:c3:ff:b0:62:35:6a:8a:50:
5e:57:a6:88:93:5e:76:9b:d4:cb:01:6c:1f:f0:c1:
b6:4f:1d:d4:3c:52:f1:99:d3:5b:aa:11:38:66:14:
0c:a1:b9:e6:17:8d:22:09:56:ea:ec:fe:37:f9:6f:
58:3d:8b:00:1c:21:c0:9d:b7:8e:bd:9d:1f:95:a9:
a5:80:e5:3b:bd:a0:ac:fc:1a:d2:81:f4:cf:20:ae:
07:af:82:8b:08:81:ae:ee:63:d2:1e:57:1d:f2:aa:
c2:30:ca:c0:eb:49:4f:b7:60:0f:9c:3c:8e:db:fa:
72:44:6a:5c:8f:e9:df:dc:dc:ec:96:4c:7b:70:c1:
28:d6:1e:9b:1c:6a:34:b3:07:93:6b:31:40:e0:db:
de:14:7e:74:14:a7:93:47:02:c1:c9:ef:77:dc:3e:
73:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D6:45:9C:E3:CA:2B:D5:D7:4E:6A:8E:5B:31:BE:7E:67:83:1B:4C
X509v3 Authority Key Identifier:
keyid:22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:5e:c8:91:2b:8e:00:82:20:be:cc:c0:90:46:ac:f1:8d:73:
08:10:57:ed:5e:5a:a2:c5:f3:45:8c:b8:31:62:ad:c1:cc:3e:
72:1d:bd:7a:fb:c2:eb:0b:18:41:16:72:7e:44:fe:e8:55:08:
25:06:8e:19:2f:bd:48:a0:11:bf:56:75:f4:1b:b3:35:e3:78:
0d:71:e2:b7:47:27:b2:32:81:f0:12:84:29:f0:b9:17:00:39:
48:0f:0b:36:1c:08:18:8f:1a:d6:32:72:44:cd:19:31:9d:29:
f9:86:ec:06:16:a8:41:9e:fb:a7:ab:71:22:f0:70:8d:75:93:
60:53:ae:11:bf:2d:7e:4a:e5:70:41:90:8d:f3:ca:d6:04:07:
de:b5:e3:1f:ec:a1:7f:72:d0:e1:34:d7:cc:a4:70:58:58:af:
8f:01:4b:7d:27:9e:87:1c:9c:8d:13:3a:1c:ac:64:5c:d0:07:
54:08:93:ba:0e:b3:9f:99:10:5b:6c:b7:a4:3d:e8:49:3d:16:
d4:18:ee:51:7e:63:59:f5:ed:0b:5e:fd:6c:11:5d:0d:a1:f8:
b8:55:7f:f7:13:57:bb:28:f8:d3:75:e3:cb:2d:64:06:4c:22:
2f:40:62:1c:af:6c:2b:07:60:85:82:35:e7:d4:de:40:bf:f0:
be:ba:16:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:52:42 2026 by rpki-client