
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
File: iHgvgx82npb5eaJYXPJzyRbHtP0.mft (raw, json)
Hash identifier: 2ZjC0KWc95nJ3sa+cezNRodeO+9IsboeD+Dz73Hw/4s=
Subject key identifier: 73:A5:88:05:BA:5E:C3:0A:F2:9C:2C:44:0B:CB:86:F6:80:25:3E:41
Authority key identifier: 88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
Certificate issuer: /CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
Certificate serial: 0775
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
Manifest number: 075B
Signing time: Wed 22 Jul 2026 22:20:34 +0000
Manifest this update: Wed 22 Jul 2026 22:20:34 +0000
Manifest next update: Wed 29 Jul 2026 22:20:34 +0000
Files and hashes: 1: iHgvgx82npb5eaJYXPJzyRbHtP0.crl (hash: 90z/7X6UJWKvXgekcTs3FYQwUBczKP7XSEXzbCyL0cw=)
2: 2BC67A2A346711EF9EEB0F52C4F9AE02.roa (hash: QKYaxLpX/SQs5/c2F5OMS0OrA2VZBlIsKBf0LDbK85o=)
3: 0F425E96346711EFA663CD51C4F9AE02.roa (hash: W7HbZgiurIous/dkOII7Zs+KL83NW7eUE5Qjtxcpxno=)
4: A0A96F80AD8511F08B0A1857C4F9AE02.roa (hash: E4mvIp0TY49n7Ku16oPaGsPeRK5kr/jdVq6qAjBUp9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl
rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1909 (0x775)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B65E6, serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
Validity
Not Before: Jul 22 22:20:34 2026 GMT
Not After : Jul 29 22:20:34 2026 GMT
Subject: CN=6a614232-f4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6c:f9:9a:67:7a:9f:5a:a3:18:ce:56:da:a5:
d1:47:2f:43:b4:4c:d9:bb:de:02:45:01:37:03:00:
7b:83:7b:1f:c9:c5:cb:79:30:93:87:b3:d3:fd:e3:
db:91:f0:70:02:a5:ee:10:30:01:82:03:1f:6e:a4:
1a:32:f8:3c:8e:c4:a2:82:a2:0e:5c:1c:ea:d5:88:
cd:5a:5f:08:b2:23:18:77:8e:8b:7c:3a:fa:1f:4d:
44:a0:84:d6:94:fc:4a:d5:b7:98:43:7d:51:8d:42:
a4:af:08:f8:5f:44:3f:f2:47:f7:4a:a1:6b:ec:ce:
9d:ab:27:9b:a0:a6:b4:d4:4d:dc:50:3f:6d:f1:c9:
a0:1b:c2:8d:5f:0e:03:f3:8a:47:d9:91:34:bc:e8:
78:8f:8f:aa:bc:87:0e:ed:d7:20:65:b3:00:42:8c:
39:e0:d5:af:a2:f5:44:65:ea:17:a4:6e:0c:2b:fc:
0b:85:7d:f1:60:38:bf:d5:86:0e:b8:5c:6c:ab:09:
6e:97:56:98:9e:2b:52:d0:3f:34:a4:a5:2e:ec:9d:
0f:95:63:93:78:43:23:ab:e6:1c:32:81:8f:0e:59:
5c:dc:9a:a3:0f:49:5c:6c:5b:b5:8c:a7:39:84:90:
86:dd:e4:a6:8e:7a:62:6f:9d:14:6b:b0:a2:78:e8:
89:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A5:88:05:BA:5E:C3:0A:F2:9C:2C:44:0B:CB:86:F6:80:25:3E:41
X509v3 Authority Key Identifier:
keyid:88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:25:e4:6c:f1:6c:b8:70:81:03:14:28:f8:93:cb:c5:ff:18:
b3:9f:13:bc:e6:c6:e8:16:f6:3f:ee:13:07:0f:f7:99:a0:87:
47:f7:60:b6:55:cf:df:4d:f1:a2:c2:00:5e:7b:c0:8c:6e:fe:
08:9a:27:b0:30:b1:64:9d:89:17:aa:80:f7:e1:38:09:2d:09:
26:e1:6a:bc:d8:64:db:ae:a3:0b:66:02:1e:15:45:b4:d2:64:
3b:85:1f:3b:6e:db:d1:1f:a3:88:07:b8:69:d7:e9:ed:8c:1b:
00:70:2d:4a:f9:ac:a6:16:10:2c:19:5c:46:dc:f2:b6:f9:88:
81:5d:ee:1b:c9:a9:ad:ad:e0:f3:cd:12:46:a5:01:c5:5f:5f:
98:d7:f1:c7:6e:02:66:c7:5a:d4:30:d2:2d:16:88:2d:ef:58:
96:e8:9f:b9:4d:40:ed:3d:21:6a:f3:51:a3:55:31:5c:04:9a:
82:76:b5:2a:de:d5:8d:17:29:d8:3e:95:02:7f:eb:b0:14:5f:
3f:d0:b1:4f:7d:06:59:58:86:4f:c3:cd:f3:94:e5:6a:47:fd:
d5:17:9a:82:d7:21:cc:95:43:84:34:b7:81:2b:6b:52:0a:e5:
da:9f:9c:82:b4:77:28:2d:54:ab:26:bd:54:df:05:f3:4c:a6:
d7:53:88:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:41 2026 by rpki-client