
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
File: i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft (raw, json)
Hash identifier: 7ogDK4hQzkPpStSqJLtKesSZZ5YwYYIgV773L6CjWGI=
Subject key identifier: EF:7D:42:07:FD:6C:50:67:31:7B:5B:A1:CD:4E:B8:55:39:6A:93:96
Authority key identifier: 8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C
Certificate issuer: /CN=A91C0EDF/serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C
Certificate serial: 01F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
Manifest number: 01E8
Signing time: Mon 21 Sep 2026 03:29:07 +0000
Manifest this update: Mon 21 Sep 2026 03:29:07 +0000
Manifest next update: Mon 28 Sep 2026 03:29:07 +0000
Files and hashes: 1: i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl (hash: gMdW56HTD8C/cMy0LfVGjv6iyA1mkIx29xY3Sqdny1c=)
2: 52333EB4CFAE11EEB928CD25C4F9AE02.roa (hash: ddr6rcuB/if8U4W4LMkgWUDhUuSvIUyegUgFAFAAT30=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl
rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0EDF, serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C
Validity
Not Before: Sep 21 03:29:07 2026 GMT
Not After : Sep 28 03:29:07 2026 GMT
Subject: CN=6ab0a483-1084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:88:d8:a2:5d:da:5a:1a:f8:a4:b2:7f:54:4b:
06:87:ea:0e:61:f0:4e:33:68:7c:54:48:7d:9f:39:
62:7f:9d:53:fa:ed:62:cd:5f:91:dd:88:1f:0b:1e:
85:0a:bf:49:57:91:5e:40:e8:18:0d:e3:a0:98:34:
70:d1:ed:fc:bc:7e:8b:28:1a:74:54:4d:3b:d0:76:
0b:f5:53:c5:82:b6:de:fa:e0:15:20:d3:9e:a9:cf:
cc:0b:61:d9:16:74:f6:6c:ae:07:9d:a4:d3:13:58:
40:cb:36:20:c1:1e:20:b5:f9:91:75:cf:18:6d:dc:
ce:a0:74:63:9c:83:18:f4:5b:c1:ce:90:af:a3:e1:
41:9e:8f:4e:7d:17:e8:b9:b7:d7:3d:c2:25:9e:0c:
78:f6:c9:b6:3d:d5:96:68:c4:98:56:0c:63:65:e1:
18:6a:2a:97:4e:42:64:8c:f6:94:aa:50:b4:51:6c:
29:94:c1:ed:3c:57:ef:d0:32:6e:4c:17:06:39:7c:
f8:41:50:41:f4:dd:5f:14:a6:51:36:52:8f:e1:6d:
9b:e6:00:7d:95:37:23:71:52:07:d7:72:0f:7d:8c:
ca:48:f2:17:2a:e8:e9:ff:08:be:9d:fe:38:91:00:
6b:75:6f:79:a8:61:e2:c7:94:25:32:7e:cd:64:81:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7D:42:07:FD:6C:50:67:31:7B:5B:A1:CD:4E:B8:55:39:6A:93:96
X509v3 Authority Key Identifier:
keyid:8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c4:36:dc:3a:51:6d:1e:bb:6c:f8:f2:ad:d3:24:bb:43:e5:
56:b7:d5:93:92:be:57:b2:aa:dd:ae:ae:99:47:a7:3a:38:e2:
2f:f5:75:0e:df:0a:3b:c8:76:f4:f4:99:96:ae:05:e5:85:df:
c0:0f:2e:45:73:e2:e5:ca:88:3a:be:b8:cd:d7:8d:c9:08:86:
a3:b9:c5:25:15:a1:78:2c:48:1f:de:cf:c4:c9:27:b8:36:b6:
e3:3a:3c:79:7f:f1:11:a5:bb:69:14:d9:13:47:ef:d8:d8:f9:
06:4f:28:24:ce:d3:37:80:65:b4:6e:58:d7:0c:ae:6c:bd:9e:
be:42:1c:5f:ed:05:0f:08:8d:6b:3f:0c:90:4a:0c:8d:24:8d:
8b:7e:44:97:a2:1b:27:d7:08:3a:d8:90:91:c0:e0:86:23:37:
2e:0e:2d:e8:04:04:4e:d5:7a:ab:0c:ce:a2:36:0e:4b:55:e4:
3e:1f:8b:86:9d:d2:ef:f4:92:47:2a:21:57:70:3c:bd:d2:e8:
5a:38:f6:88:4a:f7:ac:fe:44:de:e9:8f:3d:29:73:d1:01:b6:
8c:e1:44:34:ae:c2:8f:01:c1:33:17:b1:aa:89:29:1f:23:4f:
22:b6:30:3b:b1:86:77:97:86:82:a5:53:2d:b1:65:bf:ad:0e:
8d:d6:ee:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:15:58 2026 by rpki-client