
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
File: -iKAHFKuKl_EkbfL6-aO_KLI0dk.mft (raw, json)
Hash identifier: ce5N6dsPcWmyk8mUII2j4/Nrg84npt8DSVPWcWe3h0E=
Subject key identifier: 26:2D:36:2D:F7:C5:9D:A1:DB:2B:F2:4B:DF:5A:E2:A0:DD:C5:82:21
Authority key identifier: FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9
Certificate issuer: /CN=A91D837B/serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9
Certificate serial: 0134
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
Manifest number: 0130
Signing time: Thu 23 Jul 2026 07:18:48 +0000
Manifest this update: Thu 23 Jul 2026 07:18:48 +0000
Manifest next update: Thu 30 Jul 2026 07:18:48 +0000
Files and hashes: 1: -iKAHFKuKl_EkbfL6-aO_KLI0dk.crl (hash: F51GMaNFiJSRpufSNY4y2zGFwDNivzqdM5lMzKCdwyA=)
2: 8F7DFE66C96E11EF98B64E15C4F9AE02.roa (hash: 0O2Y56VE28BDUyW/y7K+tvSZF089IWlNTSJ1ih9VrPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl
rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:18:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D837B, serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9
Validity
Not Before: Jul 23 07:18:48 2026 GMT
Not After : Jul 30 07:18:48 2026 GMT
Subject: CN=6a61c058-0b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cd:15:77:3d:70:14:01:be:13:db:2e:88:e6:
c5:c2:66:69:bd:cf:45:2a:93:17:9f:c7:aa:c7:60:
b6:49:22:b0:17:12:a3:41:ef:6e:33:3f:62:97:d9:
56:27:49:2d:b1:58:b2:aa:d4:f2:98:90:2b:34:89:
64:ad:eb:ae:5c:36:94:ec:2a:cd:d8:5c:0f:50:67:
71:71:c8:60:76:75:f6:50:8d:6c:67:9b:31:c6:6d:
49:35:7e:91:3d:83:34:b3:1a:7b:28:43:95:12:6c:
28:9d:4c:ea:0a:d6:5d:16:f7:64:4f:82:c8:38:00:
54:82:c2:92:8e:02:3d:e0:ea:f5:f3:18:14:40:72:
c7:7a:36:32:f9:1b:15:97:40:af:e1:2f:be:b0:05:
9c:1d:00:03:63:16:da:9e:81:de:da:4b:6a:00:b4:
74:c0:1c:44:7a:34:2e:da:a0:04:64:4b:42:82:5a:
2d:5a:30:70:92:97:35:46:46:69:1e:74:2e:8c:a1:
8e:ed:df:a6:af:b9:8e:3d:b6:9b:35:3c:95:e3:30:
7d:63:4b:5b:1c:c1:53:60:68:95:d6:85:8a:b3:94:
99:f0:c1:47:7e:77:6b:d4:47:8d:19:08:ba:2d:03:
ce:e8:bb:60:5f:7e:d9:09:bb:64:08:8f:52:ad:08:
55:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2D:36:2D:F7:C5:9D:A1:DB:2B:F2:4B:DF:5A:E2:A0:DD:C5:82:21
X509v3 Authority Key Identifier:
keyid:FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:98:c3:2b:6b:17:00:f5:53:dc:59:be:a4:e4:88:3e:89:20:
ed:7f:a5:74:45:bd:3b:65:19:ee:27:aa:2b:71:e5:66:1e:f9:
13:5b:43:f0:ec:0c:38:2b:77:f3:05:00:df:30:fb:ce:96:cb:
e9:be:a6:04:cf:ea:d4:35:ff:b1:56:56:78:11:dc:4c:37:3d:
38:1b:a4:4b:ed:5c:96:9c:9f:a3:4d:c4:ab:75:e9:6a:14:6d:
7a:a7:f4:1a:ef:d6:ab:8a:ff:d9:64:b8:24:77:b0:e0:0b:ca:
72:16:32:2e:a5:7a:e9:8e:75:1d:8b:9e:c7:f3:c8:62:3a:b5:
95:18:41:02:c5:ca:1e:b7:1a:61:7a:7b:25:9d:94:68:f7:c1:
14:1d:03:a8:7f:2f:07:74:41:3b:ad:07:eb:53:59:00:1e:02:
4b:6d:ae:0b:5c:45:13:e2:e8:71:3c:ea:e8:64:21:35:0e:1c:
81:71:e2:66:98:c0:de:8b:36:21:2b:1e:87:18:b0:8a:b2:be:
24:35:a5:fa:2b:60:93:ae:4c:a2:51:d2:77:1b:bb:45:45:7d:
85:eb:16:27:ed:a3:12:9b:a0:13:3e:2b:a4:8c:87:b6:bc:cb:
2b:71:dd:1d:11:76:b8:ba:c9:d7:51:24:e7:5a:dc:5a:2b:c8:
8a:4c:8c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:28:07 2026 by rpki-client