
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
File: iH554lttHTfvHzG8WgIy-OdlFUU.mft (raw, json)
Hash identifier: DXczkdvu2nuwZewYVV7HNDReaYG4tmzDTKMcSSShnLc=
Subject key identifier: 21:15:5F:65:EB:26:53:16:B3:25:FB:53:72:B3:AB:CE:22:29:93:77
Authority key identifier: 88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45
Certificate issuer: /CN=A91D9F5A/serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545
Certificate serial: C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
Manifest number: 091E
Signing time: Wed 22 Jul 2026 21:24:58 +0000
Manifest this update: Wed 22 Jul 2026 21:24:58 +0000
Manifest next update: Wed 29 Jul 2026 21:24:58 +0000
Files and hashes: 1: iH554lttHTfvHzG8WgIy-OdlFUU.crl (hash: oRJicqYc01cw7RJruCsiEXbg0HqZv4UxkOWWnMaFqRw=)
2: CEFEDAB26B3D11F0A0837D7FC4F9AE02.roa (hash: B8m2ePIUCgEMFkUqEdw865bj5KYfUZe6gW5FvbGFIPQ=)
3: CF6A89D86B3D11F0A0837D7FC4F9AE02.roa (hash: w4kX8b17fTC2s9BhESajxJlKj2QyQzvAORehV2EbPSs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl
rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9F5A, serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545
Validity
Not Before: Jul 22 21:24:58 2026 GMT
Not After : Jul 29 21:24:58 2026 GMT
Subject: CN=6a61352a-5f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:83:f4:19:dc:63:5c:2b:a9:65:5e:63:b2:
bf:8e:36:0d:67:96:e6:47:64:36:20:8e:9a:20:fd:
a6:ab:89:39:a6:8e:9f:68:06:f5:ea:29:f8:60:f1:
9d:a0:17:19:c8:20:fd:34:92:20:59:46:67:f3:5c:
a5:0a:19:a8:b0:0f:ba:1e:8d:1c:47:93:db:b3:54:
04:65:09:06:ba:6c:8f:2b:8e:f8:c9:aa:44:fb:82:
63:e0:25:9e:63:64:7b:9e:dd:dc:25:80:7e:87:fc:
de:4a:56:17:22:a9:d8:44:be:56:a9:75:76:3c:12:
19:38:a2:2f:cf:17:1f:bd:ec:4c:51:6c:e9:11:8a:
7c:34:ab:e7:e1:aa:67:c5:3c:d6:17:c8:69:ac:79:
f1:56:2b:c0:5b:c7:60:da:51:ff:7f:5c:58:32:d0:
09:0b:14:66:f5:5b:1c:b7:99:39:d9:e5:cf:69:f1:
43:5b:01:36:a9:14:cb:01:b6:74:c4:55:d4:d8:34:
fe:da:30:53:51:11:fd:8b:34:88:99:7a:72:8f:4d:
cb:7a:06:1e:97:bd:0b:c1:2a:48:76:08:15:a7:e5:
26:14:d7:e4:0b:5c:bc:95:78:5b:6f:54:e9:8f:5b:
b6:2c:cd:40:45:7a:09:c8:4c:fb:90:d6:b6:a1:3b:
09:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:15:5F:65:EB:26:53:16:B3:25:FB:53:72:B3:AB:CE:22:29:93:77
X509v3 Authority Key Identifier:
keyid:88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:fd:30:8e:bc:3b:1b:8e:ee:ea:ab:42:f2:d6:3b:9d:46:9c:
25:62:59:a1:1f:60:75:92:da:2b:c1:59:85:97:19:22:d7:56:
ec:98:3d:42:4f:d8:6d:99:91:49:ef:83:ac:60:7d:36:e2:00:
22:cf:e2:b2:79:5e:f8:9f:07:ca:23:b5:2e:76:90:da:2b:34:
0d:b7:52:42:4e:82:c6:dd:ef:b9:be:34:b9:bb:08:f5:98:37:
3b:e0:aa:c8:7e:ee:9e:61:c2:fe:ee:a0:99:bc:51:0c:a8:e0:
5e:eb:fc:c1:70:e1:d9:67:b5:c3:d0:91:c9:32:4a:59:6e:d6:
fc:76:a8:96:86:2f:66:83:c6:53:32:92:3c:1b:a4:57:15:a7:
6a:cd:44:9a:22:4d:fd:7f:dc:9b:c0:4b:42:82:a5:20:87:e1:
ac:85:e7:48:3f:ae:6d:cd:a8:62:13:4b:77:6a:e9:42:df:fe:
9f:20:2a:e8:70:60:5e:6b:25:c3:fb:dc:11:9c:fb:19:6c:6f:
6b:c5:ce:63:82:92:23:27:cc:74:75:c2:55:a6:98:d2:3a:43:
db:58:9f:82:13:76:14:49:5b:c2:56:4e:4f:7d:31:b9:87:0c:
f9:dc:12:25:f5:0b:a6:b1:7c:11:59:f3:d3:57:92:62:03:71:
8a:ea:df:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:53 2026 by rpki-client