
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft
File: ihuLzV7XzXIsUwBJjkqTZdBGo04.mft (raw, json)
Hash identifier: 3waIoZP9R3i/Tq/gRdHX+Dd2C3+mOlgwztFtho7FlKo=
Subject key identifier: 57:02:92:FA:74:EF:54:B5:43:58:4F:5B:F1:A0:AF:21:D6:B5:C0:D7
Authority key identifier: 8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E
Certificate issuer: /CN=A91E01C6/serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E
Certificate serial: 0918
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft
Manifest number: 0906
Signing time: Tue 12 May 2026 20:23:25 +0000
Manifest this update: Tue 12 May 2026 20:23:25 +0000
Manifest next update: Tue 19 May 2026 20:23:25 +0000
Files and hashes: 1: ihuLzV7XzXIsUwBJjkqTZdBGo04.crl (hash: tb3W7xAeO+A6hWYlFaIRTqL3iB2ghRpfmLy00BQbBW4=)
2: 78D634342C1011F19A59A39993833773.roa (hash: /6Q+4A8RViZdAo8hsHn6FgiejqmqQ0nKU07g0cp0WbI=)
3: 7052D1FC273111F1B0188097AC833773.roa (hash: ZOeUKy/b4cbCvvyY/Xhr0VF0IQC2GG+fp0apZTpN0GY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl
rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:23:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2328 (0x918)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E01C6, serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E
Validity
Not Before: May 12 20:23:25 2026 GMT
Not After : May 19 20:23:25 2026 GMT
Subject: CN=6a038c3d-ac48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cd:aa:9a:a7:85:92:b0:97:36:6c:8f:d2:60:
3d:bf:1a:08:42:07:dc:47:be:3e:a7:f3:cd:72:c2:
58:0a:38:a4:96:74:fe:26:3f:ce:a3:b0:c0:fb:b3:
39:db:62:02:03:c4:f6:02:17:28:bf:37:2d:66:bb:
46:57:bc:77:6b:58:79:0d:6a:10:fa:8b:e6:b3:ad:
11:ce:9a:72:f5:80:26:04:50:cb:c9:71:a6:d0:f8:
31:41:2a:5b:c2:bd:a2:39:0a:d1:31:e0:2b:2d:9d:
cf:62:de:96:fa:18:40:d4:8d:4b:31:4f:14:54:d0:
07:ff:15:36:a7:e8:f1:9b:d1:16:1f:a3:4f:e3:86:
97:ab:7d:2e:6f:c0:84:7d:90:5e:97:32:35:3a:fd:
ed:2b:b6:09:85:41:6f:b7:81:7c:84:16:ce:ec:fe:
7a:6a:0d:fc:17:7b:25:bb:cc:9f:52:90:13:30:e2:
4f:98:c8:5f:b0:16:33:33:ca:2f:6e:46:77:cd:73:
b7:d5:b4:84:04:f0:af:e0:42:fe:f9:f9:7c:f8:c6:
29:dc:6c:9f:69:9b:f7:c2:e8:5d:72:17:34:3d:88:
e2:8f:88:55:e3:25:40:7e:f7:0d:75:67:54:60:65:
1f:48:a1:26:72:5a:6c:9f:50:ab:7c:9e:53:13:a4:
85:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:02:92:FA:74:EF:54:B5:43:58:4F:5B:F1:A0:AF:21:D6:B5:C0:D7
X509v3 Authority Key Identifier:
keyid:8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0d:81:71:1b:ab:11:5b:b5:39:de:48:55:7a:5a:97:e2:52:
2e:2e:b2:af:a4:dd:70:1d:36:62:0f:21:87:e9:d2:da:4c:c2:
c4:8c:b1:2c:2e:eb:f9:3e:b5:08:a4:4a:50:3c:ed:a1:34:9f:
f8:c1:96:2f:83:95:0e:4f:c2:0e:a3:4a:67:93:15:fd:ab:25:
a6:2b:f4:53:dd:64:48:e6:1c:bd:ac:ae:ff:97:b2:f1:ab:81:
9b:4d:49:4b:21:92:f8:89:4c:7c:84:ca:d1:50:10:23:f5:4c:
27:1f:d3:4f:56:7e:bf:0b:b0:7f:8d:be:c6:6f:27:9f:37:0f:
4c:20:32:19:43:db:22:63:f7:1c:e5:fe:ba:53:66:7f:9e:27:
60:56:b4:d5:4b:f5:8c:7c:e2:6e:9b:98:1b:af:2f:f4:8d:eb:
42:5a:2e:f2:8d:e8:9c:db:37:84:e2:5a:7b:81:c5:fc:3e:8c:
1a:47:da:70:01:45:18:9d:0e:29:49:1f:85:34:d5:1c:d4:b8:
eb:71:d7:16:fc:fb:25:a8:06:7e:bd:09:14:ff:29:57:7d:30:
e9:63:6f:4d:6a:5c:34:fb:93:cd:29:ca:f6:22:f3:b6:21:b9:
6f:8d:60:7d:bf:7d:97:0f:08:92:f1:ab:c3:11:c9:8a:ef:21:
d1:a1:1e:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTAxQzYxMTAvBgNVBAUTKDhBMUI4QkNENUVEN0NENzIyQzUzMDA0OThFNEE5MzY1
RDA0NkEzNEUwHhcNMjYwNTEyMjAyMzI1WhcNMjYwNTE5MjAyMzI1WjAYMRYwFAYD
VQQDEw02YTAzOGMzZC1hYzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0s2qmqeFkrCXNmyP0mA9vxoIQgfcR74+p/PNcsJYCjiklnT+Jj/Oo7DA+7M5
22ICA8T2AhcovzctZrtGV7x3a1h5DWoQ+ovms60Rzppy9YAmBFDLyXGm0PgxQSpb
wr2iOQrRMeArLZ3PYt6W+hhA1I1LMU8UVNAH/xU2p+jxm9EWH6NP44aXq30ub8CE
fZBelzI1Ov3tK7YJhUFvt4F8hBbO7P56ag38F3slu8yfUpATMOJPmMhfsBYzM8ov
bkZ3zXO31bSEBPCv4EL++fl8+MYp3GyfaZv3wuhdchc0PYjij4hV4yVAfvcNdWdU
YGUfSKEmclpsn1CrfJ5TE6SFIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFcCkvp0
71S1Q1hPW/GgryHWtcDXMB8GA1UdIwQYMBaAFIobi81e181yLFMASY5Kk2XQRqNO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFDNi80OTFDOENFNkND
OTExMUVBOEE1OUVGNDZDNEY5QUUwMi9paHVMelY3WHpYSXNVd0JKamtxVFpkQkdv
MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lodUx6VjdYelhJc1V3Qkpqa3FUWmRCR28wNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDFDNi80OTFDOENFNkNDOTExMUVBOEE1OUVGNDZDNEY5QUUwMi9paHVMelY3WHpY
SXNVd0JKamtxVFpkQkdvMDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWw2BcRurEVu1Od5IVXpal+JSLi6yr6TdcB02Yg8hh+nS2kzCxIyxLC7r+T61
CKRKUDztoTSf+MGWL4OVDk/CDqNKZ5MV/aslpiv0U91kSOYcvayu/5ey8auBm01J
SyGS+IlMfITK0VAQI/VMJx/TT1Z+vwuwf42+xm8nnzcPTCAyGUPbImP3HOX+ulNm
f54nYFa01Uv1jHzibpuYG68v9I3rQlou8o3onNs3hOJae4HF/D6MGkfacAFFGJ0O
KUkfhTTVHNS463HXFvz7JagGfr0JFP8pV30w6WNvTWpcNPuTzSnK9iLztiG5b41g
fb99lw8IkvGrwxHJiu8h0aEeCQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:21:01 2026 by rpki-client