
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
File: imIbx3o91BcMuRA_-HiLyQkAgtE.mft (raw, json)
Hash identifier: tqT7Ugul6XLs/2J9M1oSytfwT5HZa8oUziVuYV3FBGI=
Subject key identifier: 96:D8:9C:81:56:7C:56:C5:0E:EB:AD:15:A1:73:C6:08:C9:54:C0:15
Authority key identifier: 8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1
Certificate issuer: /CN=A91C24C5/serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1
Certificate serial: 01DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
Manifest number: 01D4
Signing time: Mon 11 May 2026 03:38:08 +0000
Manifest this update: Mon 11 May 2026 03:38:07 +0000
Manifest next update: Mon 18 May 2026 03:38:07 +0000
Files and hashes: 1: imIbx3o91BcMuRA_-HiLyQkAgtE.crl (hash: O86NYvj0K+iY3Bf1FhJcIbC0x6t5FOZx5AwbQWYyBVo=)
2: 872F5E22835A11EE9FFEC146C4F9AE02.roa (hash: c/jawI9sVhPShnKjCf1i13c+sicTCdQqYFc31eax07o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl
rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:38:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C24C5, serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1
Validity
Not Before: May 11 03:38:07 2026 GMT
Not After : May 18 03:38:07 2026 GMT
Subject: CN=6a014f20-29ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:87:64:d7:9a:bc:8c:a3:5e:0b:32:46:33:
4c:43:6d:a6:27:7e:ea:f9:d3:bc:51:63:96:3c:6f:
35:82:02:03:c4:16:f8:3d:63:4b:67:02:e3:a7:a3:
b2:b9:90:13:dc:c1:18:74:1a:40:92:3c:6e:6e:4c:
e1:98:7e:6e:c5:e9:97:7a:15:01:43:ac:b3:06:39:
52:c3:a8:fd:ac:03:30:d0:5e:91:ec:51:20:fb:1b:
4d:14:b2:13:9e:0d:2a:ce:f5:4f:f1:83:bd:cb:bd:
cb:2e:dd:04:e2:45:e2:84:cc:90:e0:8e:c8:7a:6c:
eb:4a:9b:37:a3:62:23:e5:63:e0:93:ff:65:83:f0:
8e:b5:53:46:47:15:2a:45:98:f5:8c:23:4b:38:8f:
66:58:c6:a2:b7:1e:1c:d3:b6:33:32:3a:a8:e0:22:
14:97:78:66:7b:9d:c9:08:8b:35:fc:e6:fb:3d:84:
fb:50:03:26:91:26:2f:c4:55:b0:48:12:c7:e0:91:
f8:12:48:8a:72:cd:a7:09:f9:fb:bb:98:17:48:0b:
0a:f9:4d:2d:83:60:85:48:81:83:7c:27:c5:bb:ef:
1f:23:17:5c:44:80:bb:f3:b4:28:8c:3c:0f:d6:3a:
37:85:a2:5e:7e:e7:a2:30:67:e6:bb:e2:a5:3d:d8:
5e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D8:9C:81:56:7C:56:C5:0E:EB:AD:15:A1:73:C6:08:C9:54:C0:15
X509v3 Authority Key Identifier:
keyid:8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:e1:89:73:20:38:53:81:4a:5a:c7:b4:91:ca:29:00:73:fd:
cf:64:24:ef:fc:20:e0:37:84:33:f2:7c:a2:0c:4a:cf:a4:6c:
db:ff:9e:02:32:91:61:3c:ff:ce:72:cc:9b:93:f0:3b:6b:d3:
43:fe:df:10:f2:97:a2:9b:9a:57:18:55:c4:fc:75:5b:bf:d9:
31:49:5e:8d:32:80:51:db:2f:8d:d2:ee:f6:da:1f:a5:e6:8a:
0b:b1:28:76:99:35:21:88:a5:b2:98:6f:75:8e:00:82:9a:16:
99:d1:09:d6:c2:ac:93:13:a8:58:a6:60:33:f0:17:84:30:db:
03:39:1a:a9:1a:b2:e3:05:6c:b8:a0:6e:38:84:4f:85:f6:63:
04:14:af:fd:a1:dc:ca:84:fe:c6:f2:29:e7:2b:9a:2e:1a:be:
36:11:80:df:bb:8f:c9:f1:42:e3:81:10:3a:fc:d0:f8:af:d1:
7f:a2:74:d1:89:69:ed:ba:cc:e1:ec:75:8d:27:ec:cf:9d:f1:
23:73:0d:bf:03:50:87:e1:9e:0d:16:6d:70:f6:2f:7d:f9:8e:
75:65:fc:f1:28:de:76:d3:49:d4:64:06:68:da:a8:a6:1d:56:
bb:70:36:2f:a6:56:4f:68:2e:29:a6:de:50:43:0b:9e:f8:69:
f8:4d:45:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:23:39 2026 by rpki-client