
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft
File: ibqQy31EKoOHxquTBzjKIA4Te60.mft (raw, json)
Hash identifier: v5BfasaNsDm0mH5bO2+iTjkfW3HUm0LgJ1f2qcLVFR0=
Subject key identifier: 7B:04:FD:68:12:57:FD:F7:7C:77:F9:CB:C3:B5:EF:F8:F3:21:5F:D1
Authority key identifier: 89:BA:90:CB:7D:44:2A:83:87:C6:AB:93:07:38:CA:20:0E:13:7B:AD
Certificate issuer: /CN=A91DD25E/serialNumber=89BA90CB7D442A8387C6AB930738CA200E137BAD
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft
Manifest number: 95
Signing time: Thu 23 Jul 2026 09:15:21 +0000
Manifest this update: Thu 23 Jul 2026 09:15:21 +0000
Manifest next update: Thu 30 Jul 2026 09:15:21 +0000
Files and hashes: 1: ibqQy31EKoOHxquTBzjKIA4Te60.crl (hash: CWLaE975r2dQHvgALvt4WTB7Qb8i4AWybPkSapLhhZc=)
2: 9CF6A89AA27B11F09D816A4BC4F9AE02.roa (hash: r2L+5zqyZ6IXeM2mIQAiI2PNwo+tejqOC0YJpkywEYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.crl
rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD25E, serialNumber=89BA90CB7D442A8387C6AB930738CA200E137BAD
Validity
Not Before: Jul 23 09:15:21 2026 GMT
Not After : Jul 30 09:15:21 2026 GMT
Subject: CN=6a61dba9-aca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:41:0d:cd:e9:71:32:1b:70:b3:a7:4e:af:a4:
50:99:c9:3d:2c:3e:1e:56:f6:ba:54:61:28:c0:84:
54:1b:0c:98:7b:a7:20:20:30:fc:d8:94:a7:d1:ae:
90:3c:5c:10:f1:1e:b6:b5:4a:4a:16:6e:32:f3:61:
20:f3:42:03:06:67:e1:52:b7:18:93:de:2b:11:ce:
91:58:db:9c:78:d0:f9:e4:5c:7a:e8:19:2a:42:72:
e7:e8:41:d2:5d:47:14:c9:20:c3:db:75:ee:9b:99:
81:d0:a3:46:94:77:76:2d:e2:e6:3a:8d:89:94:9b:
b4:5b:0e:39:8f:f2:49:9e:6c:11:03:25:94:e4:66:
a7:22:35:c7:7e:b8:d6:12:c1:52:e4:14:55:97:e1:
50:c8:78:81:0a:bd:d7:4e:cb:54:67:c8:4f:b9:ff:
ad:36:7d:56:2a:f9:cc:0d:9e:72:8c:1d:dc:2d:46:
30:bc:d0:61:21:97:ee:40:68:df:a7:0e:0f:61:7d:
9b:7e:ff:ee:38:f5:11:74:f2:b4:66:f0:52:a9:f1:
0d:9e:84:2e:3d:d6:75:9a:dd:dd:ab:7a:39:b7:c2:
2a:f0:0d:31:70:34:92:be:d2:ac:38:1b:16:d8:db:
e4:21:85:db:12:a7:79:5d:3f:00:1e:27:a0:29:c6:
9b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:04:FD:68:12:57:FD:F7:7C:77:F9:CB:C3:B5:EF:F8:F3:21:5F:D1
X509v3 Authority Key Identifier:
keyid:89:BA:90:CB:7D:44:2A:83:87:C6:AB:93:07:38:CA:20:0E:13:7B:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a7:3f:7e:10:b5:f6:6b:a9:7a:a1:a8:5b:00:75:ae:f2:41:
8d:85:e9:56:dc:8e:ba:6f:9e:a4:9f:c0:7b:be:4f:7f:13:0c:
71:79:ec:3f:a7:9d:8b:ef:ea:f3:49:c3:26:ae:02:aa:f6:31:
fd:3e:0b:06:61:ad:fa:76:af:fe:3c:ed:50:4e:fd:ac:06:05:
c2:99:ff:53:8e:65:9b:e7:3d:db:7a:11:3b:74:b3:34:50:f6:
bf:79:9d:ee:8e:66:c7:41:72:36:e1:b7:96:d7:2b:91:72:66:
5d:8d:d5:5d:25:7a:ff:2f:64:5a:c0:7a:3c:9b:70:52:33:b1:
ac:77:88:5c:bb:0a:a3:4d:39:a8:06:24:0c:61:ed:42:6c:01:
6a:ef:d0:2b:5d:d0:cd:75:ed:7e:a2:59:ac:bb:8f:7c:3d:7d:
df:ee:87:25:c0:cf:bf:0d:2f:5f:b0:3c:3e:36:4f:11:5c:18:
cf:50:91:8c:a9:03:65:43:c1:d3:9a:6e:4c:9a:ee:96:ad:ae:
db:f5:e2:01:ce:cb:e1:9a:96:f8:96:af:01:b5:50:54:15:80:
a5:cb:a8:a4:b8:13:11:5c:ca:0e:93:9d:3e:90:1f:11:bb:71:
78:d6:a1:b6:05:52:98:9d:31:8b:ff:de:51:c5:90:48:8e:3b:
37:8f:0d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:40:40 2026 by rpki-client