
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft
File: IlPgspHkNQSp2iaP28xaDjF-bME.mft (raw, json)
Hash identifier: xmV5vkYNoMfiG4gh3J2J6ib99nuK6oskqtaM26aMDeM=
Subject key identifier: 45:D9:35:98:B2:C7:10:4F:F0:CC:EE:AB:9B:4C:A2:72:4C:A9:DA:08
Authority key identifier: 22:53:E0:B2:91:E4:35:04:A9:DA:26:8F:DB:CC:5A:0E:31:7E:6C:C1
Certificate issuer: /CN=A91D1FD2/serialNumber=2253E0B291E43504A9DA268FDBCC5A0E317E6CC1
Certificate serial: 47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft
Manifest number: 44
Signing time: Wed 23 Sep 2026 08:13:06 +0000
Manifest this update: Wed 23 Sep 2026 08:13:05 +0000
Manifest next update: Wed 30 Sep 2026 08:13:05 +0000
Files and hashes: 1: IlPgspHkNQSp2iaP28xaDjF-bME.crl (hash: RsN9hvGbpMl2IvlJSKMtYrLg27pHiwVJoPoDDq7/bhw=)
2: A213FF8E535211F184FC032898833773.roa (hash: /sb5ONI+bRGD73MyIUMkM893RApQNOS9VkRgEjeAKps=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.crl
rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1FD2, serialNumber=2253E0B291E43504A9DA268FDBCC5A0E317E6CC1
Validity
Not Before: Sep 23 08:13:05 2026 GMT
Not After : Sep 30 08:13:05 2026 GMT
Subject: CN=6ab38a12-4d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:d0:46:4e:97:f4:64:a4:11:57:a6:86:25:
8d:f6:1a:f7:11:8b:d5:05:33:79:20:dd:fd:11:1c:
7e:c6:7b:7b:29:39:c1:eb:70:40:d6:93:8d:51:d8:
08:b3:87:29:37:40:db:43:f4:fc:b6:a2:2e:95:2d:
35:9a:07:2d:f6:45:8c:c5:b2:18:ad:9c:8a:04:87:
9b:98:b5:59:5f:3b:a5:29:71:05:61:78:47:5e:a9:
0d:1c:4d:a4:ca:0b:d1:d1:d1:20:35:b8:fc:eb:dc:
6c:de:a6:a0:1b:9f:eb:e2:07:87:45:d6:9a:7b:58:
b1:2e:fd:06:87:b4:90:40:7a:ad:0e:67:fe:bb:3c:
63:9f:b8:20:63:1c:f8:0d:29:88:0d:78:fc:18:1c:
97:0e:b5:5a:e9:79:a4:1d:ae:92:62:2d:fc:81:26:
cc:7b:37:f3:4a:61:53:ee:16:c5:77:b1:58:1e:f0:
08:d0:44:70:48:c4:bf:c1:61:78:87:06:95:55:4d:
6f:c6:57:c2:0c:29:65:fc:c3:0d:a6:a7:34:c3:f9:
3c:38:09:a7:4b:59:54:7c:ef:7b:9d:76:d5:fb:d0:
39:7c:e0:aa:f8:ad:82:9b:64:b2:ad:bd:ec:89:c3:
06:eb:26:bd:46:40:84:f6:b0:a3:7e:77:54:dc:f1:
e3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D9:35:98:B2:C7:10:4F:F0:CC:EE:AB:9B:4C:A2:72:4C:A9:DA:08
X509v3 Authority Key Identifier:
keyid:22:53:E0:B2:91:E4:35:04:A9:DA:26:8F:DB:CC:5A:0E:31:7E:6C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5b:00:1d:a9:51:fc:8b:77:13:de:7a:20:6b:e6:41:5e:57:
85:cd:27:13:f8:25:8f:ef:ab:28:06:a5:bd:98:2d:f3:b6:24:
fb:8e:0e:16:05:f1:bd:02:bc:87:d9:09:26:a0:68:fc:b7:12:
75:a6:6f:17:c6:ed:fa:4a:2d:3b:84:79:f5:76:df:75:ca:9b:
6b:77:ae:c2:1b:9c:d1:f1:e7:e3:90:e4:d9:06:24:f7:e4:26:
0a:95:f6:ee:a8:dc:1b:68:dd:c5:2a:85:71:cd:2b:ec:c7:af:
c3:00:eb:26:f5:e0:24:0d:70:0f:f0:4c:f8:da:64:c0:c6:76:
42:d1:03:79:0b:df:62:34:06:be:ae:87:c5:aa:82:af:e2:c0:
b7:6e:64:d7:b1:fe:a5:07:c6:37:ce:8e:20:47:68:54:0e:00:
67:78:f4:10:bc:de:64:02:c2:8d:d0:af:69:47:05:ca:a2:07:
b3:a6:e4:66:49:f7:06:0e:4d:62:c5:87:79:66:59:70:11:3b:
df:b0:f2:0c:29:d0:38:58:9d:9e:e8:0f:1c:ac:cf:8b:63:77:
e2:3b:89:de:db:43:de:0a:f2:84:f2:f9:22:b5:90:76:54:24:
84:a8:7c:13:ff:83:08:42:9e:1f:05:47:c4:54:05:55:08:52:
bf:ef:97:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:33:02 2026 by rpki-client