
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
File: i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft (raw, json)
Hash identifier: dB8uW6GSPdd/yapn5eOL6GlmgH7UjvzV7eDdP57m5Rc=
Subject key identifier: 1D:AB:FD:01:1C:43:10:85:C1:9D:BE:21:98:71:25:E2:1D:8D:4A:F3
Authority key identifier: 8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D
Certificate issuer: /CN=A91D37E4/serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D
Certificate serial: 084D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
Manifest number: 083C
Signing time: Wed 22 Jul 2026 21:34:54 +0000
Manifest this update: Wed 22 Jul 2026 21:34:54 +0000
Manifest next update: Wed 29 Jul 2026 21:34:54 +0000
Files and hashes: 1: i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl (hash: obXjiBIquLfYPJdcMpESY3/pNVcFrECML98Ao43XHCU=)
2: D933655E23B511EBA7BDD50FC4F9AE02.roa (hash: C86QSzMPJfidhhZAtCALwlPi6LGTUSBetHOGRrIMSeU=)
3: BD764EAE1D5B11EBAB008D19C4F9AE02.roa (hash: Gqr5gUPYx0CJyOxSeCXlqpQBiTSLSQ6IJMBMylryXzk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl
rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:34:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2125 (0x84d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D37E4, serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D
Validity
Not Before: Jul 22 21:34:54 2026 GMT
Not After : Jul 29 21:34:54 2026 GMT
Subject: CN=6a61377e-b974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2d:8a:6e:f8:10:3a:61:23:c1:d1:f7:ef:3d:
0e:e8:00:04:b9:c7:6a:fb:8f:cd:d6:30:ac:d9:04:
4f:9c:73:7c:b8:a1:b5:02:0b:79:03:26:fd:e8:64:
11:92:03:3c:62:a8:a9:42:e2:da:ed:9c:a1:2d:63:
e1:38:0d:9e:48:11:07:0d:31:7a:60:92:ba:5d:d0:
e9:26:ea:52:05:e8:77:92:2e:02:c6:0b:e5:27:1f:
e2:d6:4c:32:c2:22:74:a3:80:5c:51:d1:9e:2e:31:
dd:09:81:f2:53:13:d5:00:6e:b7:c8:38:15:3d:f5:
3e:01:3d:b9:c9:96:ce:2f:49:1c:d2:a2:07:d3:f9:
ba:13:bd:48:8a:ac:bc:48:13:91:ee:f1:58:72:5b:
9b:54:57:df:86:d5:44:a7:25:f0:aa:eb:73:8e:d4:
40:af:a8:d6:81:da:60:e3:72:bc:83:31:ee:2c:be:
f7:03:4d:ea:7c:57:1e:25:f3:9d:8a:7c:07:29:f2:
2e:95:85:b7:04:84:fe:ec:2b:22:c5:c5:6c:01:c5:
cb:b4:b0:0f:d9:db:24:c6:74:0d:15:5c:89:a9:83:
7b:5e:b3:b8:07:80:fc:ed:c0:5c:73:f8:a3:4e:a5:
76:00:0c:dc:3d:0a:7f:c7:f5:50:62:19:68:4e:7e:
24:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AB:FD:01:1C:43:10:85:C1:9D:BE:21:98:71:25:E2:1D:8D:4A:F3
X509v3 Authority Key Identifier:
keyid:8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:34:7b:10:06:d4:63:5c:18:55:4a:47:d4:29:d4:1c:62:52:
5c:cd:0a:3a:19:f8:c6:5f:96:38:09:52:37:d8:bb:63:0a:26:
d5:e7:d5:8b:9e:45:64:e7:cf:41:e7:a5:b4:17:eb:fd:b1:0c:
f3:43:cb:d4:be:5c:9e:89:37:55:a2:9e:7f:84:43:8f:67:57:
40:04:4c:4e:d3:d3:9e:17:1c:cc:4b:ad:ef:41:11:ff:96:75:
3e:d1:88:e6:0a:80:4f:0a:27:8a:5e:3a:b7:73:74:5f:12:16:
e3:5a:dc:72:f7:15:25:54:43:b8:50:91:a6:99:44:a3:0b:41:
dd:b2:90:a4:5e:3d:e1:d8:6a:72:17:80:fd:2b:10:ab:98:3e:
06:2a:3c:ec:6d:1f:84:a4:99:9f:8f:27:d3:29:0b:c3:18:3b:
f8:90:b0:07:bb:c5:03:10:38:1a:1e:6e:e2:6b:47:0b:f1:8b:
d7:55:29:17:34:00:69:9b:21:4a:83:92:a8:bb:41:2a:2c:31:
48:ff:23:50:2b:03:1f:ea:4c:4c:88:ef:d2:5e:3e:f8:9d:1c:
a9:77:20:4e:5e:a5:e7:10:98:68:8d:87:34:75:70:2c:f0:f7:
7b:8e:0a:8b:25:a5:93:f3:3a:4e:be:7e:97:7f:2e:cd:6b:dc:
fb:a8:2a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:13:48 2026 by rpki-client