
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft
File: ijL6yit6Kieb3e2pT1iNAGddgKQ.mft (raw, json)
Hash identifier: fEY4BACdGl4xzTxHHV8RLF5HQOG86dD/NcBwImR+uis=
Subject key identifier: 15:AC:78:1B:71:2B:FA:DC:95:A8:E5:DB:A4:05:7A:A2:3F:A9:3A:B2
Authority key identifier: 8A:32:FA:CA:2B:7A:2A:27:9B:DD:ED:A9:4F:58:8D:00:67:5D:80:A4
Certificate issuer: /CN=A91D6835/serialNumber=8A32FACA2B7A2A279BDDEDA94F588D00675D80A4
Certificate serial: 61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft
Manifest number: 5E
Signing time: Thu 23 Jul 2026 10:08:09 +0000
Manifest this update: Thu 23 Jul 2026 10:08:09 +0000
Manifest next update: Thu 30 Jul 2026 10:08:09 +0000
Files and hashes: 1: ijL6yit6Kieb3e2pT1iNAGddgKQ.crl (hash: p3oZbDiz6NMaK7nG3TACCkmxn16U3SGTM7i/cXZJ/Zw=)
2: 8F628C6C000E11F1B0B593243F6F56BC.roa (hash: +uCC4RxvvM2jLwWeFZZmtoCiHRrr+bxpylbILtMobiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.crl
rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6835, serialNumber=8A32FACA2B7A2A279BDDEDA94F588D00675D80A4
Validity
Not Before: Jul 23 10:08:09 2026 GMT
Not After : Jul 30 10:08:09 2026 GMT
Subject: CN=6a61e809-dc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:f0:3d:7f:4f:ff:a6:02:bf:d5:a0:ab:fe:
e6:b0:4c:94:f3:e9:0e:1c:55:da:e3:98:e7:aa:f4:
c6:8a:9b:e5:69:fc:d2:1b:0a:13:61:c6:38:95:01:
a9:db:80:76:26:3d:6a:ea:00:e3:c5:ef:8d:e5:ad:
12:4a:1d:ed:cb:40:24:bf:70:c3:40:5e:40:65:ad:
be:04:bc:f8:d4:bf:e6:15:fc:93:5c:cd:4f:19:11:
bc:7c:d6:c0:4a:7b:b4:51:28:67:ea:c9:42:5d:ae:
08:97:f1:16:3e:64:49:08:bf:d6:01:03:d1:ef:79:
3b:88:cd:30:63:9f:b6:e7:e2:ca:e3:7f:b2:c9:7e:
d2:17:c8:e4:31:f4:67:70:83:e1:45:91:20:a4:90:
0e:48:1d:f9:6b:9f:1f:93:b5:c1:b2:ba:6b:13:1c:
db:9b:e2:b5:15:47:9f:6b:3c:27:2e:50:25:86:bd:
60:ff:64:a2:8f:eb:6d:0e:12:8e:60:7f:2e:e1:7a:
45:0a:2c:35:48:7f:ef:5c:2c:eb:02:9d:70:a4:b8:
8d:16:95:11:56:03:b4:26:9e:25:56:73:72:f0:f3:
c9:25:f4:57:42:02:8c:a4:8a:1f:27:25:af:0d:51:
ba:42:ba:d5:13:50:70:95:d3:32:16:ed:9b:a0:35:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AC:78:1B:71:2B:FA:DC:95:A8:E5:DB:A4:05:7A:A2:3F:A9:3A:B2
X509v3 Authority Key Identifier:
keyid:8A:32:FA:CA:2B:7A:2A:27:9B:DD:ED:A9:4F:58:8D:00:67:5D:80:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:bf:0c:aa:63:51:0c:c4:a7:52:76:88:16:8c:a6:f1:e1:61:
37:29:40:2d:31:32:ee:f5:c0:57:e8:a5:9c:fd:09:fa:13:77:
39:1c:7c:56:ee:76:43:08:43:93:bb:41:72:26:44:54:b2:eb:
12:9d:58:af:d4:ef:f0:ba:30:14:59:cf:ac:a0:95:e9:cb:6d:
61:0b:a4:4a:af:54:75:0c:e7:ea:8b:49:98:e1:03:e3:0a:3d:
1e:4c:87:09:0f:86:0b:8e:8d:1a:9c:28:6f:14:c1:ae:02:4e:
26:7e:a8:e9:ac:45:4b:d6:b5:3c:74:6d:e5:9d:c2:e3:b1:31:
ca:20:ce:55:74:52:6b:57:7e:9f:a6:d3:b6:ca:df:4e:55:34:
27:27:86:98:2e:90:6e:f3:eb:0f:ac:c0:d4:2e:78:10:03:16:
5f:ef:34:6f:17:9b:4c:58:62:7e:c2:63:e7:d8:33:1a:15:2e:
6d:09:66:b7:14:15:07:bc:43:70:a7:bb:6b:eb:48:cf:73:b9:
94:11:88:52:c3:09:9c:ec:6c:9e:16:3e:53:8c:16:2b:a3:8a:
bc:43:48:3f:ab:29:34:1b:73:09:c7:83:57:aa:56:f5:1e:ed:
1f:d3:03:06:da:f8:f1:80:7b:cd:70:b4:1d:80:5d:36:27:3c:
73:89:70:ef
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
NjgzNTExMC8GA1UEBRMoOEEzMkZBQ0EyQjdBMkEyNzlCRERFREE5NEY1ODhEMDA2
NzVEODBBNDAeFw0yNjA3MjMxMDA4MDlaFw0yNjA3MzAxMDA4MDlaMBgxFjAUBgNV
BAMTDTZhNjFlODA5LWRjN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC36/A9f0//pgK/1aCr/uawTJTz6Q4cVdrjmOeq9MaKm+Vp/NIbChNhxjiVAanb
gHYmPWrqAOPF743lrRJKHe3LQCS/cMNAXkBlrb4EvPjUv+YV/JNczU8ZEbx81sBK
e7RRKGfqyUJdrgiX8RY+ZEkIv9YBA9HveTuIzTBjn7bn4srjf7LJftIXyOQx9Gdw
g+FFkSCkkA5IHflrnx+TtcGyumsTHNub4rUVR59rPCcuUCWGvWD/ZKKP620OEo5g
fy7hekUKLDVIf+9cLOsCnXCkuI0WlRFWA7QmniVWc3Lw88kl9FdCAoykih8nJa8N
UbpCutUTUHCV0zIW7ZugNX7pAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFax4G3Er
+tyVqOXbpAV6oj+pOrIwHwYDVR0jBBgwFoAUijL6yit6Kieb3e2pT1iNAGddgKQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2ODM1LzQ2NUNGNUEyMDAw
RTExRjFBNkIzMTQ4QjNFNkY1NkJDL2lqTDZ5aXQ2S2llYjNlMnBUMWlOQUdkZGdL
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaWpMNnlpdDZLaWViM2UycFQxaU5BR2RkZ0tRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2
ODM1LzQ2NUNGNUEyMDAwRTExRjFBNkIzMTQ4QjNFNkY1NkJDL2lqTDZ5aXQ2S2ll
YjNlMnBUMWlOQUdkZGdLUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCBvwyqY1EMxKdSdogWjKbx4WE3KUAtMTLu9cBX6KWc/Qn6E3c5HHxW7nZDCEOT
u0FyJkRUsusSnViv1O/wujAUWc+soJXpy21hC6RKr1R1DOfqi0mY4QPjCj0eTIcJ
D4YLjo0anChvFMGuAk4mfqjprEVL1rU8dG3lncLjsTHKIM5VdFJrV36fptO2yt9O
VTQnJ4aYLpBu8+sPrMDULngQAxZf7zRvF5tMWGJ+wmPn2DMaFS5tCWa3FBUHvENw
p7tr60jPc7mUEYhSwwmc7GyeFj5TjBYro4q8Q0g/qyk0G3MJx4NXqlb1Hu0f0wMG
2vjxgHvNcLQdgF02JzxziXDv
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:08 2026 by rpki-client