
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
File: IcjytuAdCoLRPDUYjDyT5vUUupQ.mft (raw, json)
Hash identifier: VK3x+NUJG+N2Z4sRpnEL3Agn3phcB8cPFbuscg1HCxA=
Subject key identifier: 7E:37:BE:BA:C2:32:D0:73:9E:76:D1:29:FC:9B:03:1A:27:8E:40:65
Authority key identifier: 21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94
Certificate issuer: /CN=A91A9C62/serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94
Certificate serial: DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
Manifest number: DC
Signing time: Wed 23 Sep 2026 06:25:40 +0000
Manifest this update: Wed 23 Sep 2026 06:25:39 +0000
Manifest next update: Wed 30 Sep 2026 06:25:39 +0000
Files and hashes: 1: IcjytuAdCoLRPDUYjDyT5vUUupQ.crl (hash: WqScskiH4nPG5wCsUuWHozUfMMfCO4NNAVugFXHVhEo=)
2: 08EAF5106C2111F0B46AAC57C4F9AE02.roa (hash: yNRoRcrSs2idnKKKQBvpZT7hGrIPyAJ/BqXKminAWZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl
rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:25:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9C62, serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94
Validity
Not Before: Sep 23 06:25:39 2026 GMT
Not After : Sep 30 06:25:39 2026 GMT
Subject: CN=6ab370e4-f0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:55:3e:4a:ea:cf:3f:55:83:5f:22:cb:e8:
8b:5f:fd:94:58:a3:ff:8e:33:77:23:c2:1d:45:dc:
9b:79:95:a4:63:59:0a:e3:8e:a0:8c:48:98:df:5c:
cc:d2:51:6f:36:99:d1:cc:b8:94:db:8c:52:00:df:
11:a8:33:5d:ac:d1:f7:fe:29:61:bf:3a:4f:ef:ff:
f7:c8:3d:2f:2c:49:53:4e:4d:68:6c:56:43:2f:1f:
8c:6e:99:11:66:98:f5:a8:3e:1d:e7:84:6a:da:1f:
8b:d5:df:6d:fe:0f:ee:fd:da:1e:d7:d4:6a:cf:2d:
97:bd:7f:43:53:3c:94:26:c4:1c:05:cd:f2:84:53:
8a:f6:3c:60:93:ff:28:15:be:10:86:ed:cd:b8:1d:
35:3a:ac:eb:33:54:79:f8:0f:79:81:b2:ee:c6:cc:
16:36:ca:94:78:b5:aa:16:17:3d:dd:4f:f4:66:92:
02:41:fe:b9:46:c2:8e:9e:2e:78:16:55:11:b3:83:
89:8a:a3:d5:5f:74:2e:2a:b8:ee:42:85:34:ab:ab:
49:e5:47:3c:6d:86:9d:83:05:81:c1:93:ae:16:75:
06:15:ba:11:68:2f:5a:07:97:71:82:a5:81:5e:e3:
fc:e2:eb:29:1e:e2:5e:88:fe:de:2d:2c:c5:dc:19:
69:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:37:BE:BA:C2:32:D0:73:9E:76:D1:29:FC:9B:03:1A:27:8E:40:65
X509v3 Authority Key Identifier:
keyid:21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:be:ec:4a:c1:70:cd:39:35:d9:67:39:fd:29:99:81:2c:c6:
a4:4c:d1:99:1d:b2:30:87:c0:6f:38:3b:f6:20:af:4c:cd:29:
72:ce:a5:46:d6:07:b8:01:27:60:27:eb:36:6c:44:a0:ce:6f:
50:71:68:dc:0a:88:df:4e:84:e0:c4:27:b4:db:cd:43:a5:c3:
7b:b3:74:e4:cd:71:57:18:62:ca:61:48:0b:14:e1:77:ee:ad:
49:ab:37:c4:f4:64:2a:dd:bd:c2:c9:8f:38:a5:b3:97:c9:d5:
9b:0a:c3:04:6d:1c:9b:33:b8:77:47:0c:dd:e1:83:73:97:1e:
01:ba:ac:7f:2d:20:f7:ac:96:2f:02:e5:18:84:15:42:18:b9:
d6:df:22:5f:fe:d8:be:14:ee:59:d9:8f:7e:fc:58:3a:b6:f4:
01:30:4c:cf:1b:ab:48:ba:97:5e:a0:b8:31:ae:ab:13:72:e0:
86:35:16:b4:bc:d0:62:06:20:0d:37:dc:6d:d8:3e:03:20:75:
79:8f:fb:ee:7d:68:c8:46:72:45:2f:54:56:29:3d:3d:e6:77:
46:f7:fa:62:74:e4:eb:8c:21:ac:0a:8d:f3:86:eb:0d:2c:e6:
a8:9f:8e:88:c2:c6:16:a1:99:11:ed:8e:60:4e:01:dc:89:e5:
00:1f:a6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:35:33 2026 by rpki-client