
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
File: i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json)
Hash identifier: zIzbWtDhxyjUbPPRDgsD81eTHpJT0cNv114o5NONaOQ=
Subject key identifier: 09:5E:73:81:5F:12:4E:A9:2E:AC:D7:40:A1:D9:4C:C7:11:DA:C3:08
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial: 083B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
Manifest number: 0794
Signing time: Tue 12 May 2026 22:07:27 +0000
Manifest this update: Tue 12 May 2026 22:07:26 +0000
Manifest next update: Tue 19 May 2026 22:07:26 +0000
Files and hashes: 1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: qn1KMsuRZHLqi9PZ2n6ll7knXDKZvFb1azZNMX7Zveg=)
2: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: +RLs5CzvZXqI61CAHfurXr4hcnlLMlz6cCq54j5zw2Q=)
3: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: bkBhWlpijpoPZQCX/fri8xyFsJ4YVWckTUwmgGDvtWw=)
4: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: Q6rfj53pf8UB4FBvHHs00agRED73Fq/tWE6oYVaqkaw=)
5: 317095E0A28911ECBC355360C4F9AE02.roa (hash: ebFlaRUmZcQJUtMsrS9rZ+TKHMBWxmuEuoPHS8qzaoo=)
6: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: n0M+4sPO2I1QxTqzwDfkxMGQeXxQFFjm9haxwLReuy4=)
7: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: Z0VkCYZ1R/4kbKogoS7s0rDtQor1LJugR/SNxu4FzT0=)
8: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: y2QzsDAAMtUIeIRXNVIyp+738veR++Jv2+SSsvzATjs=)
9: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: 23FlzfUUG2o+yV463/MzqJtyKQ1WBczJHj5IsGh6xFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2107 (0x83b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Validity
Not Before: May 12 22:07:26 2026 GMT
Not After : May 19 22:07:26 2026 GMT
Subject: CN=6a03a49f-957f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:50:dd:05:0e:12:af:7a:59:c6:85:27:c1:8c:
60:05:4f:cb:3f:0b:d3:f9:36:a4:37:d6:bc:74:c1:
7c:6b:db:92:f3:5a:ed:74:e4:ed:7a:47:de:30:28:
4f:a9:de:70:63:3f:c6:da:e0:50:de:90:4b:a7:b0:
cd:95:7a:98:4c:78:3a:40:c3:41:c7:83:9f:9d:4d:
fd:a4:17:63:5b:0a:2f:3e:02:f4:41:c6:d2:12:64:
3c:f2:69:1c:73:a6:15:82:ff:77:11:47:3d:31:38:
fd:59:e9:50:12:66:f8:8e:1a:09:da:15:1f:77:e9:
23:46:08:0a:87:9c:6e:9f:d2:26:b7:47:c0:08:72:
63:5f:33:45:c6:c8:23:17:7f:31:12:d0:31:52:7a:
54:39:1a:76:f3:e5:c2:39:58:30:8c:56:62:be:d4:
e3:f8:42:95:25:1b:48:c4:12:3b:c0:6a:69:cc:07:
0c:ec:b5:f5:72:72:3b:5a:d3:8b:84:50:bc:fc:aa:
81:92:6d:3e:ec:99:a5:03:c5:63:39:06:98:0f:29:
65:fb:58:ed:b4:9b:bb:f1:a4:c8:64:2b:cb:7d:a3:
9b:c1:a5:24:a2:f8:c4:6a:86:8e:fd:ef:da:d6:26:
00:a0:a5:27:43:2b:a1:49:bd:2b:92:51:fa:53:b8:
43:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5E:73:81:5F:12:4E:A9:2E:AC:D7:40:A1:D9:4C:C7:11:DA:C3:08
X509v3 Authority Key Identifier:
keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:91:05:02:49:a1:de:bf:12:f2:74:2b:54:f0:9e:0c:26:b6:
1d:7c:c4:a6:79:38:06:03:92:2f:5e:db:57:38:5b:f9:d8:6f:
45:63:36:e9:1b:a1:bf:ed:e7:62:8a:bd:ea:8f:35:20:45:ae:
b3:3b:8d:7a:0a:2b:a6:4b:93:db:35:23:a9:0b:29:18:81:00:
8f:f2:c5:bc:2d:96:ca:86:cc:80:98:87:d3:5c:31:ec:91:04:
90:fa:1e:29:5b:7a:7f:51:50:31:72:11:f7:d7:40:44:9c:80:
16:45:a7:8d:66:18:3b:5b:61:24:a7:53:6e:fd:91:56:aa:bc:
86:7a:dd:b6:d8:7e:ab:90:1f:30:5b:d4:12:18:c2:91:1d:8b:
0c:d4:e6:e3:c5:03:34:2a:c0:69:d9:4e:45:cf:04:2d:96:5a:
81:6a:b0:33:1d:f9:00:7a:6b:ad:13:d2:5e:ad:7d:0e:9d:93:
e0:b2:59:35:d1:45:fe:07:ae:26:70:ff:66:13:6a:04:0b:09:
90:88:75:d3:b2:e7:a2:ae:f5:8b:7a:81:17:ed:b9:06:f7:8a:
87:9a:88:e6:62:42:00:5f:b1:5e:19:49:f3:b9:5b:d7:01:e9:
4f:5b:90:74:a0:db:67:ec:b3:82:95:d4:f3:01:13:87:00:77:
9c:6d:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:38:55 2026 by rpki-client