
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft
File: Ikchh2oR4tOkuYshvIT3jmT-yEY.mft (raw, json)
Hash identifier: WoC2Tx5Wrqn0RqGMKmY4Wak+dXNKFDFk02oENHTHytw=
Subject key identifier: 51:2A:8F:BC:9F:5A:4F:A3:60:86:4D:8E:ED:C4:68:97:79:0F:26:64
Authority key identifier: 22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46
Certificate issuer: /CN=A91CEE6D/serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846
Certificate serial: C0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft
Manifest number: BD
Signing time: Mon 21 Sep 2026 06:53:18 +0000
Manifest this update: Mon 21 Sep 2026 06:53:18 +0000
Manifest next update: Mon 28 Sep 2026 06:53:18 +0000
Files and hashes: 1: Ikchh2oR4tOkuYshvIT3jmT-yEY.crl (hash: +6GlGrcy4tCtNtQ0FySdvx5tQeo7Ss/eoLjEk/Xf61E=)
2: 09F2A296A02E11F08BC71221C4F9AE02.roa (hash: 2jaK9Imhu+Xw7a9whl7nd2mMko9E0vTzAQrleZ3Kuic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl
rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEE6D, serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846
Validity
Not Before: Sep 21 06:53:18 2026 GMT
Not After : Sep 28 06:53:18 2026 GMT
Subject: CN=6ab0d45e-6be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:5b:d4:82:9f:35:17:44:f8:0c:a8:4f:05:
8d:da:87:38:d8:42:fb:d9:0c:94:24:4b:2a:e6:b3:
52:00:68:06:e4:14:cf:a1:ce:51:e2:a4:8e:ba:b7:
cb:68:b2:1a:c5:ae:d9:a4:fb:02:45:c8:28:2c:d3:
84:aa:bb:5d:04:3d:fe:95:e4:9a:97:90:b9:dd:92:
6c:7c:b7:5e:7e:43:b7:90:ea:9d:21:21:f9:90:80:
45:3a:d8:7d:5a:a1:5d:9e:5d:0b:aa:db:46:ab:bf:
e1:eb:ef:33:ec:6c:93:bc:e0:18:0c:e0:69:ad:90:
99:de:8f:f3:c6:40:d5:8d:2b:5b:02:19:67:64:39:
e1:96:fe:ba:85:a7:9f:46:62:3a:18:a4:a0:df:70:
53:ca:da:07:5f:0f:d9:63:77:b5:85:30:cb:61:76:
0f:24:41:f3:a9:f5:12:a1:ae:d0:4d:9d:52:d6:f6:
18:cd:79:f0:8b:8b:2c:82:99:92:e0:97:18:35:3e:
8d:f7:f4:db:8b:85:41:8e:0e:25:20:8c:35:8b:67:
d1:e4:04:ca:67:8f:60:69:8b:5c:e8:73:30:ea:0d:
05:04:8b:03:f5:0e:71:15:68:c6:6e:99:b9:56:80:
f4:e1:52:e0:bc:bd:60:1c:74:50:5c:bb:91:e9:cf:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2A:8F:BC:9F:5A:4F:A3:60:86:4D:8E:ED:C4:68:97:79:0F:26:64
X509v3 Authority Key Identifier:
keyid:22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:d5:6c:c1:fc:16:43:bc:d5:34:b7:08:e3:bd:15:f8:36:8d:
7a:aa:7a:79:74:a7:ad:04:1e:1b:d8:ce:4c:b3:e8:d0:2d:15:
aa:23:64:1f:79:5a:3e:7f:84:2a:53:94:30:8a:92:d4:cc:79:
f6:78:ce:87:20:a1:17:a6:e7:e2:c0:c7:c6:4b:1b:f8:d6:59:
a2:8a:27:f9:5c:2c:81:b1:11:20:84:2e:e6:fb:ab:68:cb:a4:
97:dc:42:29:c2:28:3e:ca:86:aa:89:a4:2c:06:79:cf:c4:04:
04:2c:1a:d4:73:df:6d:80:f3:74:08:8d:8d:f8:91:77:47:e1:
70:02:27:05:a6:a1:3f:7f:14:43:5e:52:94:bc:4e:12:cd:a0:
f2:61:bf:ee:cb:9b:ca:1e:6e:cb:e2:b4:33:00:12:c8:d3:61:
c1:0a:8d:d8:0f:65:c3:b5:b9:1c:a5:96:bc:6c:6b:73:2a:42:
b1:d0:79:55:50:67:db:16:d2:b8:df:88:84:83:4e:45:49:bc:
56:8b:4d:53:c1:0f:06:bf:b4:b5:76:3e:9d:5b:0e:cc:71:bb:
b1:62:e8:34:17:43:44:50:c3:7b:28:37:88:a6:1b:a3:08:a1:
46:8e:cf:bd:7b:fb:07:54:53:8a:1d:82:08:71:c4:ad:e5:a4:
10:56:de:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:31:57 2026 by rpki-client