
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json)
Hash identifier: cRtVW+h1RS5YRi7b0EcU1Cl7UPYGNfBc+pFzZLIFr5A=
Subject key identifier: 45:15:F8:32:29:C8:53:02:70:B1:9F:E3:19:47:02:31:4C:D0:3F:9C
Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
Certificate serial: 043C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
Manifest number: 041B
Signing time: Thu 23 Jul 2026 01:13:25 +0000
Manifest this update: Thu 23 Jul 2026 01:13:25 +0000
Manifest next update: Thu 30 Jul 2026 01:13:25 +0000
Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: E5BCTCQbJnqmCu9haBGberSh1nipk08DEqkluvOo6JA=)
2: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: s1eXFpPP1drLzWYFfSWX2mxgRfaTxGb5Di3eSFyUmzk=)
3: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: a/OjejWguoz8SOjUqilIOKY73TJSTeqh0jYpuVfKqTM=)
4: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: RGbQplIoBoixh77E1ML8kaMqxyukkROuY8CpRD/mvKs=)
5: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: 3gy1qN11JcP8FRxi5dz6npPXSjCXwvC3iutXG65AMSI=)
6: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: rOANBQKPsfQ6Tk+3BJxQVcGQ9b8/ioqyWVW5xCF9Omw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1084 (0x43c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005
Validity
Not Before: Jul 23 01:13:25 2026 GMT
Not After : Jul 30 01:13:25 2026 GMT
Subject: CN=6a616ab5-3bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:6b:cc:e1:9e:34:a5:ec:0f:e0:62:b2:1e:
71:b4:7c:9c:b2:73:9c:34:25:75:26:3c:9d:6c:22:
c8:40:69:ac:66:d4:47:5a:8d:cd:cf:14:87:21:e7:
36:e0:ac:9e:b9:94:71:e2:c0:a1:27:60:63:a3:c0:
fc:0d:29:1e:8c:e4:1d:de:cc:36:de:d2:2b:0f:49:
c7:18:06:95:7d:1b:6f:52:80:65:a5:84:82:64:58:
ae:92:65:5f:a7:eb:3d:f4:35:76:f8:34:c1:35:80:
0a:15:64:df:1e:17:08:d9:a4:c3:54:0e:dc:9e:73:
d4:de:9e:79:40:9d:2b:3a:df:7b:c3:ab:d1:af:aa:
70:83:f0:d6:cd:9c:b8:80:80:5b:23:12:21:3a:ab:
d3:5f:5a:b1:db:25:44:88:61:ea:be:af:92:d5:04:
ee:a1:30:eb:95:aa:68:c5:d7:3a:e7:6d:56:56:99:
00:d6:fe:a7:28:71:04:1c:a2:b6:8d:37:60:0f:44:
e3:b7:00:99:de:a3:a5:af:fb:29:d2:f5:06:ef:47:
0a:ad:1a:6f:40:65:73:ae:fc:32:63:21:9b:df:22:
11:8a:e0:dc:d6:d1:a3:92:3c:6e:7d:bc:c8:c8:66:
c2:fe:ac:21:6a:0e:a8:6e:e9:06:c9:fe:7e:06:7e:
eb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:15:F8:32:29:C8:53:02:70:B1:9F:E3:19:47:02:31:4C:D0:3F:9C
X509v3 Authority Key Identifier:
keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:ae:b2:74:f6:d6:b8:77:f8:77:da:40:b1:86:2b:3b:14:a0:
80:eb:61:e5:4f:61:fd:63:1a:ee:4a:25:67:b0:a9:80:86:d8:
44:95:f2:ff:ec:3d:b5:03:22:f4:9e:90:53:4f:17:47:cd:54:
2e:ad:52:53:c5:70:d7:1c:60:7e:a8:70:08:b7:d7:b7:51:12:
9d:6f:e5:33:9d:23:b0:8e:93:bd:73:3f:16:57:4a:35:25:3f:
6c:1e:0b:ac:1d:eb:15:55:74:c2:07:cd:4e:a5:e2:e9:df:90:
1a:1a:50:4c:99:5c:c2:46:50:4a:37:93:be:83:0c:07:d6:af:
1d:9d:57:5a:cc:64:e2:5a:b2:55:82:77:98:92:8d:77:26:d5:
59:70:95:75:1f:b7:96:d8:40:d0:0b:b5:9d:4c:df:92:2a:f5:
48:e2:c7:07:ab:c7:be:f4:1d:cb:0e:8d:49:bf:7c:73:2e:94:
08:98:c1:74:ae:0e:73:61:72:cb:db:27:99:11:7a:15:34:7c:
30:37:47:cc:16:cf:3f:c6:e8:3c:9e:2a:91:c6:2a:4f:40:85:
ee:a6:ab:d5:3a:0e:fb:a6:ac:f7:09:dc:0f:98:a0:7c:9d:68:
a4:81:a9:50:92:06:0a:6a:3f:7f:66:ec:7a:26:d3:de:ed:1d:
fc:c9:54:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:32:22 2026 by rpki-client