
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
File: ixqAZb6Iqmwbo_7bVOCH59KttN4.mft (raw, json)
Hash identifier: MRIZjf7HqqG3qtJld8fl5YzL59OQ/luVpBAgFtyXGa8=
Subject key identifier: A6:1D:6B:7A:25:78:F3:61:DD:AC:4E:36:EB:83:98:4C:B9:28:B3:69
Authority key identifier: 8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE
Certificate issuer: /CN=A91DC068/serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE
Certificate serial: 01AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
Manifest number: 019F
Signing time: Mon 11 May 2026 04:17:49 +0000
Manifest this update: Mon 11 May 2026 04:17:48 +0000
Manifest next update: Mon 18 May 2026 04:17:48 +0000
Files and hashes: 1: ixqAZb6Iqmwbo_7bVOCH59KttN4.crl (hash: nLOT1Rff/NMUhnNnkUSQfSn01Y5BHLbukgwJHunJrds=)
2: 4DDA8A18D5DD11EEA5B1C711C4F9AE02.roa (hash: m02khT/jg2hbvP72RR7nK1qweNEQkqkW4mCPiNuzwrw=)
3: 4D69D2D2D5DD11EEA5B1C711C4F9AE02.roa (hash: KXSh6prRPhPWK5BnqXhTsFwQImo2BvM4I7HOo4Rrn/M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl
rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC068, serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE
Validity
Not Before: May 11 04:17:48 2026 GMT
Not After : May 18 04:17:48 2026 GMT
Subject: CN=6a01586d-4739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:06:3e:8c:1b:f2:6c:a1:0d:8a:8c:aa:a0:
bf:23:bb:c7:c1:1d:ee:95:17:0c:2c:5b:1e:15:42:
a5:de:dc:ae:d5:34:26:47:f3:3a:c5:c3:a3:4b:a0:
53:a7:ac:1d:f3:f5:33:3c:8f:b2:d5:d5:86:f4:1a:
6f:03:3e:f6:20:a0:14:e7:2f:a1:b9:20:61:ca:20:
1a:8a:d3:ee:5a:67:c7:f2:d6:3c:d5:a4:dc:e1:bc:
50:66:10:24:7d:e0:1b:47:ec:4a:71:a9:3d:e1:86:
ea:15:b6:54:12:4c:8e:c3:25:d4:31:bb:5d:c4:bb:
c4:76:03:33:de:6b:d9:42:38:7d:d8:a8:93:61:1d:
af:0a:b3:fb:3f:c2:85:ac:05:23:1e:54:57:27:83:
9a:32:49:ee:6f:cc:73:80:0a:2f:c4:8d:a2:8b:f8:
73:28:da:c6:61:57:0d:be:3f:d5:bf:34:cf:b0:3a:
06:73:a7:6a:38:88:0e:05:3a:c0:df:87:3b:5e:44:
b6:29:14:c7:88:c1:eb:aa:8f:b2:18:df:c8:5f:f3:
1c:24:21:10:95:ab:93:35:ad:3d:8b:27:de:fd:13:
22:14:a9:23:9b:be:f9:01:d8:00:21:54:ae:f0:fb:
c6:e3:f2:8f:00:34:03:ad:5f:43:d6:9a:8a:9e:3b:
e6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1D:6B:7A:25:78:F3:61:DD:AC:4E:36:EB:83:98:4C:B9:28:B3:69
X509v3 Authority Key Identifier:
keyid:8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:5e:59:b4:80:bd:3a:3c:43:03:ed:e7:ea:8b:88:99:27:96:
d1:14:44:70:83:2f:fc:47:84:44:67:f0:6f:3f:e0:b9:a2:6e:
58:6e:e1:21:8b:de:16:64:3e:32:cf:cf:1f:e7:d4:9a:4a:f9:
4f:55:d4:39:7e:62:29:2e:b9:af:53:5c:6e:23:16:bc:2f:3f:
b7:7b:04:85:71:3d:e3:56:dc:bb:80:c2:9a:98:c0:8f:92:b1:
cd:ec:f0:97:e6:bb:ff:78:c8:7e:3e:c1:95:cb:f8:8a:cd:22:
4c:d5:89:58:fa:a4:f1:4d:83:9a:29:1a:97:e5:e8:d3:48:94:
4c:3a:e8:5c:74:38:db:81:8a:cf:d5:52:b1:19:95:68:b4:bc:
d7:c5:2a:96:6e:bb:75:2f:41:f2:27:f8:33:38:64:b9:58:23:
bb:12:1c:5d:23:3b:5b:fe:f9:54:26:3f:d4:9d:de:0f:98:57:
46:5e:f1:68:e9:c8:98:34:19:0d:8d:b9:f7:8e:1e:0f:cc:2b:
ef:8f:a7:be:2d:b7:39:3b:80:9d:c9:66:3f:31:da:bf:6b:da:
ab:26:9a:36:f5:2e:5f:24:87:88:08:3b:d6:de:aa:6b:f3:ac:
fb:fb:8e:1f:e3:5d:da:10:c1:20:ca:83:aa:b1:33:f8:95:3f:
2c:cd:a2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:00:03 2026 by rpki-client