
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json)
Hash identifier: +dxXgyoNmX3nUdZfH+8exb62AAoCjzMloo9QqYXMpbc=
Subject key identifier: B0:B8:5E:D2:16:2E:24:5E:1F:92:41:2C:F2:77:A0:90:37:BD:D6:3F
Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7
Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7
Certificate serial: 02C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
Manifest number: 02B3
Signing time: Thu 23 Jul 2026 02:32:55 +0000
Manifest this update: Thu 23 Jul 2026 02:32:54 +0000
Manifest next update: Thu 30 Jul 2026 02:32:54 +0000
Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: 5LYM3cVVrWDinhY/PDQy/uVDRc54aqUB7+gS2NP8dj4=)
2: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: 63Mc6PfxkqkDwQtpOI9U8lomk1Cxh7mzQMzSOn5gi4U=)
3: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: 0C9mx4bIr2S3KsrxXmmh+6ZkoQeTAaGyUsfLf68eqPo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl
rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709 (0x2c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7
Validity
Not Before: Jul 23 02:32:54 2026 GMT
Not After : Jul 30 02:32:54 2026 GMT
Subject: CN=6a617d57-34d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:07:ea:af:67:57:b2:46:30:23:e7:1e:3f:7c:
95:7a:a2:0f:95:8f:d3:9f:a2:49:c8:b7:a3:5b:b7:
56:1c:3b:55:c0:a2:b3:76:c0:67:95:ce:69:69:41:
ae:e7:45:3c:b6:fb:9e:e5:31:4e:c6:63:79:4f:2f:
01:89:66:0b:90:b7:87:fc:ae:40:ba:fc:2f:09:e8:
30:98:0f:47:b9:0e:7b:82:15:51:09:63:6a:f9:90:
10:53:d8:2e:5f:e0:90:69:dd:c5:65:7a:f4:7d:01:
34:42:43:ba:47:81:b6:7f:44:ef:b1:09:4f:ef:1c:
6e:d8:5e:51:b5:02:ad:eb:1f:79:dc:00:76:36:d7:
28:65:aa:17:dc:7b:72:5c:31:3a:75:be:8c:d8:ad:
21:31:08:5c:27:e1:63:84:06:26:35:13:3a:3e:f7:
94:e9:51:3d:bd:d5:6a:f0:dd:69:d7:af:62:4f:da:
52:b5:12:4b:97:ad:4d:df:34:31:d2:f8:42:e5:5d:
b5:0b:06:76:55:50:f8:a4:4d:eb:69:ae:d0:22:2a:
84:d7:e9:32:96:e8:62:48:11:28:96:1a:ea:30:55:
0d:f7:c7:de:69:13:4c:92:7b:5d:3a:b9:9c:8c:0a:
c3:c3:c0:c0:c9:1c:fb:f3:da:7c:e0:41:65:de:c5:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B8:5E:D2:16:2E:24:5E:1F:92:41:2C:F2:77:A0:90:37:BD:D6:3F
X509v3 Authority Key Identifier:
keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ee:2e:65:07:b6:60:f6:af:ca:7a:7d:2b:6d:d3:ba:58:82:
22:16:c3:2d:cc:c1:44:8f:a8:ee:6f:96:16:3c:82:20:45:61:
a6:57:2f:ee:4a:3c:ea:99:29:9b:90:79:f9:16:44:09:11:1b:
78:13:20:8e:f1:51:37:de:b8:19:7a:69:26:99:75:a4:f5:b0:
b1:76:e3:a1:2f:ef:44:24:a7:56:7b:d9:60:c2:f4:36:a1:62:
84:70:7e:36:c9:96:4d:c7:b7:9d:8e:bb:cb:91:85:f9:54:9b:
db:36:6c:b5:0e:b6:d7:1b:76:01:b0:a1:8d:52:c3:b2:8d:a7:
bc:55:34:61:13:8e:eb:70:97:76:ac:4d:90:b9:ab:c7:56:e4:
1b:b3:81:30:2c:6a:ae:ce:e2:d2:26:ec:f4:a3:26:6e:ab:05:
8f:c6:77:2c:ca:88:29:c8:40:46:eb:a6:92:94:40:bc:4e:87:
87:73:e7:ec:08:27:2b:37:1a:d9:39:4b:c9:fe:83:cb:6c:41:
4d:50:fa:82:2c:92:2b:d6:14:11:3e:15:c2:74:35:de:d4:09:
87:3c:0a:d5:10:4e:ea:fc:c4:23:80:b4:5e:12:58:0d:f6:75:
e1:d4:0b:e0:8a:42:5b:7c:73:42:dc:76:ae:0a:9b:12:49:a5:
c3:51:de:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:02:47 2026 by rpki-client