
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json)
Hash identifier: IIJK6C5/+dzDD3avksbGopbGjEsHyO4Q6sMaDpVJhWI=
Subject key identifier: 45:4A:93:64:D9:3F:0A:21:09:85:A6:42:3A:0F:84:7A:62:8B:34:99
Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63
Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63
Certificate serial: 02BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
Manifest number: 02AB
Signing time: Thu 23 Jul 2026 02:35:58 +0000
Manifest this update: Thu 23 Jul 2026 02:35:57 +0000
Manifest next update: Thu 30 Jul 2026 02:35:57 +0000
Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: pshopQCNBm5WGR3OgZiWcEx557OXE3qfyu2dwH76RnM=)
2: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: A7VcLCIr/FcjJaPxb9fLesSTHqaiYIJD5WUKTmg4W9Q=)
3: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: Pu3HSh7UAJem3mpQag6OD//H7HzHFiNKKj+xFn4gXBM=)
4: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: FAsv4u0lMC/I3QYc2qVpW+Zdc9wxgYJL7HZ2HtRyWFE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl
rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 703 (0x2bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63
Validity
Not Before: Jul 23 02:35:57 2026 GMT
Not After : Jul 30 02:35:57 2026 GMT
Subject: CN=6a617e0e-6367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:38:12:d8:10:86:f3:3d:af:84:02:37:b9:
cc:9c:87:0a:32:f3:a7:a7:d3:46:3d:ef:bd:4a:0b:
eb:76:c7:6d:1b:9b:82:25:d4:75:9e:39:80:fd:96:
3f:2c:ba:ce:87:59:32:b6:e6:22:20:1c:b9:5b:35:
92:55:8a:92:33:02:78:f8:8b:5f:e3:4a:a1:58:22:
f7:4d:62:c5:71:50:c1:09:78:e8:54:fb:71:c5:cf:
2c:08:f1:fd:61:d3:c9:74:61:0f:93:f3:7a:67:df:
5c:3b:5e:77:c3:4b:49:9e:f3:d8:da:de:1a:91:a3:
d5:36:d5:71:48:63:9f:56:4b:4f:20:cd:fa:d4:8f:
f2:b9:66:31:48:cf:28:11:47:c9:53:b4:93:68:99:
37:70:8d:d5:2b:64:55:0c:7f:89:3a:b8:ba:de:64:
a1:f6:a0:6f:93:de:92:8a:5a:09:fc:cb:81:b3:f9:
d0:3f:e5:a9:d5:f1:f0:e2:d4:00:c6:e7:53:a3:de:
81:eb:78:9c:d7:22:62:ac:61:f7:e6:ca:8a:06:50:
2e:c4:a9:2e:0c:c8:2b:64:bc:a3:45:b2:2e:f1:93:
9d:50:c6:f0:67:47:49:3c:e2:51:5f:dd:aa:0c:c4:
f2:81:d1:6e:74:41:07:65:3c:32:5b:b0:ac:77:88:
ac:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4A:93:64:D9:3F:0A:21:09:85:A6:42:3A:0F:84:7A:62:8B:34:99
X509v3 Authority Key Identifier:
keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f0:a6:1a:73:cd:1d:27:6d:c9:84:e6:d7:6e:60:b6:17:9b:
1a:f2:c6:f0:2c:ab:c0:33:a7:e6:fd:c7:a3:6e:ff:df:73:e5:
64:25:72:7c:dd:87:58:7a:5d:cb:4c:2c:9d:bd:a4:2e:25:5a:
2b:a9:04:a4:2f:55:9f:05:33:8e:7e:89:9c:b0:0b:7f:3c:d5:
2b:db:66:e4:d1:59:aa:a4:59:69:8c:d5:e4:2a:0a:81:03:af:
38:5a:69:75:8f:e7:f2:9e:7d:02:c8:63:9c:c2:bc:ca:b4:cd:
e6:58:99:2f:ef:14:39:91:49:70:55:eb:af:9a:b4:43:74:ae:
59:b3:bd:dd:f4:71:64:69:06:08:ab:e0:53:05:c5:df:8d:b4:
ff:c4:84:b5:da:70:c8:de:7f:2e:f9:a3:b5:a1:23:9e:9c:60:
d7:f0:66:f3:6d:84:55:e4:1f:0e:2b:8b:84:f7:d3:7c:eb:17:
23:42:2a:12:ed:b8:fe:2a:59:34:07:ab:24:1c:0d:a8:ef:f0:
43:61:33:1a:41:78:97:e7:08:7c:2a:c3:af:1d:24:5c:fc:f5:
92:61:27:99:2b:0b:3f:36:04:89:68:74:67:62:dd:5a:80:a0:
e4:3a:6d:e2:b5:c0:30:3c:15:29:11:4d:7b:18:39:c0:f9:c7:
67:fb:38:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:48:45 2026 by rpki-client