
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
File: ixqAZb6Iqmwbo_7bVOCH59KttN4.mft (raw, json)
Hash identifier: Kz3c0bsqNqEkB/1rmMlJY0sg1CIYe1rMU6Z/sgYmWAc=
Subject key identifier: DD:09:BC:94:80:AC:03:2E:EE:2A:1A:DB:62:76:EB:DF:96:2C:2F:95
Authority key identifier: 8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE
Certificate issuer: /CN=A91DC068/serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE
Certificate serial: 01CF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
Manifest number: 01C3
Signing time: Thu 23 Jul 2026 05:12:55 +0000
Manifest this update: Thu 23 Jul 2026 05:12:55 +0000
Manifest next update: Thu 30 Jul 2026 05:12:55 +0000
Files and hashes: 1: ixqAZb6Iqmwbo_7bVOCH59KttN4.crl (hash: pxHHPTkGcMglfA0c2SX9O/2GYLYYOdqD97Iw60dHmqI=)
2: 4DDA8A18D5DD11EEA5B1C711C4F9AE02.roa (hash: m02khT/jg2hbvP72RR7nK1qweNEQkqkW4mCPiNuzwrw=)
3: 4D69D2D2D5DD11EEA5B1C711C4F9AE02.roa (hash: KXSh6prRPhPWK5BnqXhTsFwQImo2BvM4I7HOo4Rrn/M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl
rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:12:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463 (0x1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC068, serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE
Validity
Not Before: Jul 23 05:12:55 2026 GMT
Not After : Jul 30 05:12:55 2026 GMT
Subject: CN=6a61a2d7-d01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:94:99:f4:c5:81:90:41:1c:9b:48:75:3b:
3f:bf:28:f6:3a:32:da:29:da:ac:c4:18:a4:c0:40:
a0:d6:f8:f3:2f:26:29:31:72:7a:74:a5:87:78:db:
bf:96:21:16:e0:10:f5:a1:0b:af:dd:32:e1:e4:bc:
75:c9:01:a8:46:97:bb:f1:5d:49:c7:d5:0b:94:94:
83:f9:0a:e1:34:e7:f7:34:19:ad:50:e4:48:24:b6:
64:96:6e:34:8e:4d:cf:5a:df:56:8d:bb:87:b9:6a:
ec:09:6e:0d:9e:a5:73:69:cc:79:38:0b:36:06:d6:
c6:3c:00:ae:c5:24:4b:2f:ac:87:99:15:b1:8e:e6:
bb:68:df:28:11:35:a5:be:ca:e0:7c:09:4e:23:d1:
8c:8a:0c:dc:46:21:1b:1e:a5:b2:11:33:12:bd:e7:
26:4b:9a:9b:4f:e8:93:17:a9:4b:0b:be:c3:4d:6b:
c0:eb:b7:c8:81:25:e4:af:f1:f9:2d:0d:c6:d5:1e:
35:f7:b4:90:94:b4:0e:fe:4c:de:6a:22:54:7b:c0:
a3:44:e1:0b:06:cf:74:7a:e7:72:62:33:78:41:83:
a8:fd:74:57:60:9c:98:a2:db:be:18:5b:21:e0:5d:
8f:de:56:37:bd:6a:b4:c5:48:bc:a8:00:9e:d4:ff:
a7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:09:BC:94:80:AC:03:2E:EE:2A:1A:DB:62:76:EB:DF:96:2C:2F:95
X509v3 Authority Key Identifier:
keyid:8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:17:99:68:76:a3:7d:99:81:75:82:9e:36:6f:f2:5e:af:2c:
2b:ee:dc:08:cc:d5:74:dc:9a:73:29:c9:e2:a6:83:1b:1e:38:
92:a3:4b:4b:9e:11:66:5b:f0:97:24:3d:4a:5e:79:8f:5d:75:
c6:83:5d:a7:35:c7:96:29:ae:89:3c:1b:93:aa:fc:aa:ce:04:
2b:2e:56:90:9a:93:de:d5:5c:09:50:21:47:39:94:7b:0e:ec:
91:c5:68:28:b9:82:9f:78:e1:32:8f:f7:70:a0:54:4a:fe:81:
7f:da:a5:0f:64:c3:d1:de:61:9c:71:fc:82:2d:57:47:05:29:
9e:2e:41:97:01:de:13:73:3f:e2:fd:76:10:53:bc:6e:5b:ab:
a7:ff:07:d9:59:ea:af:b2:f5:18:b0:f6:de:eb:11:31:3a:4f:
09:62:eb:69:09:e0:a4:6f:a1:27:f5:9c:f0:75:6f:3e:03:47:
5c:72:9d:78:93:f1:ce:d0:15:a4:58:95:ab:c0:01:5a:88:c9:
60:63:32:4a:c5:7b:43:c3:68:1e:d1:ea:8b:1b:0d:c5:09:6b:
f5:96:98:6c:62:8d:e3:18:55:9c:9e:ca:44:2f:fe:e3:29:10:
f9:81:72:a6:dc:c6:b6:06:57:10:c1:8c:e1:e3:45:88:b2:8e:
42:92:90:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:07 2026 by rpki-client