
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json)
Hash identifier: VfKGBB1N3GYcbT6XQ7U2EFviSkM8riYnPlMXzxLB6Dw=
Subject key identifier: 4D:82:3C:E2:9B:51:61:16:78:D0:AC:0B:B0:AC:10:43:37:C7:31:EA
Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
Certificate serial: 0418
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
Manifest number: 03F7
Signing time: Wed 13 May 2026 00:35:45 +0000
Manifest this update: Wed 13 May 2026 00:35:45 +0000
Manifest next update: Wed 20 May 2026 00:35:45 +0000
Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: jm5CxwFIwagid7ug+1RAfrCOS4tvXNzSeIrsCbk90so=)
2: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: rOANBQKPsfQ6Tk+3BJxQVcGQ9b8/ioqyWVW5xCF9Omw=)
3: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: a/OjejWguoz8SOjUqilIOKY73TJSTeqh0jYpuVfKqTM=)
4: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: s1eXFpPP1drLzWYFfSWX2mxgRfaTxGb5Di3eSFyUmzk=)
5: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: RGbQplIoBoixh77E1ML8kaMqxyukkROuY8CpRD/mvKs=)
6: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: 3gy1qN11JcP8FRxi5dz6npPXSjCXwvC3iutXG65AMSI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1048 (0x418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005
Validity
Not Before: May 13 00:35:45 2026 GMT
Not After : May 20 00:35:45 2026 GMT
Subject: CN=6a03c761-9c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:99:d5:03:c1:37:4d:f5:01:31:6d:6a:38:af:
8e:e2:03:84:de:77:2d:55:5f:d0:5f:a9:53:0c:e5:
57:22:e2:cc:e6:6e:cc:9a:05:ff:24:4e:a6:93:0b:
41:7b:67:ab:33:92:42:7d:c6:3b:d2:82:80:12:3f:
43:be:b2:85:99:90:ff:da:a0:45:9b:8f:36:81:b2:
f8:94:ee:c4:11:84:1d:d4:a7:e1:20:b4:c9:b4:e6:
2c:dd:83:55:7e:75:1c:af:49:d9:75:22:64:dc:9c:
3f:0b:73:9b:85:8c:2f:03:41:d1:7d:ff:69:20:1e:
be:7e:53:91:46:f1:74:65:89:44:6f:5a:7e:48:a6:
b9:63:84:3e:af:2e:85:12:1f:d5:d8:ae:2a:d7:5d:
50:cb:5b:10:ec:09:d5:ce:a2:14:11:c1:22:9e:4c:
37:a3:32:28:0f:d6:6a:2e:4f:41:18:0c:23:6f:24:
3f:bd:1a:f2:e7:23:4a:9b:27:26:bd:25:d6:c2:59:
3e:c1:b0:51:79:85:03:59:e1:99:ec:46:86:01:78:
be:9c:2d:25:8f:d2:23:56:f0:fe:f3:bd:13:c0:42:
42:63:3c:0f:0b:ce:49:4f:b6:e9:69:d4:21:61:90:
5c:b0:2b:f5:68:86:c6:f6:77:8e:4b:a8:98:3d:aa:
f0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:82:3C:E2:9B:51:61:16:78:D0:AC:0B:B0:AC:10:43:37:C7:31:EA
X509v3 Authority Key Identifier:
keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:cc:7a:71:56:69:04:16:a2:24:87:75:42:2d:79:c1:79:32:
f9:83:3b:62:32:69:25:4d:6d:e3:b9:1e:98:1b:6d:90:f7:4d:
3f:b5:c5:27:94:5b:b4:21:22:b5:c5:81:3f:1f:3b:e5:42:35:
cd:95:c8:70:4f:7e:af:ab:a4:8a:93:fc:8f:55:43:ad:1b:81:
e2:1a:9a:b3:c7:9e:6d:97:1d:c5:6b:f5:6e:13:90:38:a3:87:
9a:23:6f:58:00:25:8d:a0:23:34:01:23:eb:b7:c5:f0:bf:36:
5e:56:b7:d6:3a:5a:32:57:11:37:9b:0b:1e:3e:c5:21:4a:fc:
3e:18:ec:90:90:b5:e6:67:35:13:b6:7c:65:ab:a3:25:35:14:
a6:7c:37:d6:63:bc:7d:67:52:56:91:43:46:30:14:f4:73:af:
c6:38:db:37:20:4c:68:14:7e:46:93:7f:f5:82:58:5d:23:e7:
ee:53:d0:36:e8:47:e6:72:1c:a3:d7:cd:59:68:8a:80:c2:58:
e7:6a:22:8b:8a:7c:d9:cf:7c:66:b8:72:b9:98:d2:fe:75:48:
a5:db:49:5d:79:28:0f:49:06:fb:e9:0b:0a:d7:43:68:26:2e:
f5:3b:0e:46:b9:ab:41:f9:bb:ba:9d:94:4e:85:b7:b3:72:43:
f3:f2:0a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:21:59 2026 by rpki-client