
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft
File: IHitW73x1MW5cLvik02aNV2zHOg.mft (raw, json)
Hash identifier: 8P/kxn9jofxhvEh+xs/LMM3aUMld24Gs1YJj/mqhbkg=
Subject key identifier: 71:15:F8:B2:A8:37:40:1C:DE:08:7E:0A:8C:FE:6C:08:0D:C0:53:6F
Authority key identifier: 20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8
Certificate issuer: /CN=A91E4DFA/serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8
Certificate serial: 05D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft
Manifest number: 05C6
Signing time: Wed 22 Jul 2026 23:51:44 +0000
Manifest this update: Wed 22 Jul 2026 23:51:44 +0000
Manifest next update: Wed 29 Jul 2026 23:51:44 +0000
Files and hashes: 1: IHitW73x1MW5cLvik02aNV2zHOg.crl (hash: CzWspNjS8eAp/7iGePBszLZ82RPqp+Q/VQX6Bj1Z3E8=)
2: 6D506318F1E711F0A2FD0FF1416F56BC.roa (hash: 0zuqIS8hbfV5A711MSih3uxG9p+AWNnca2aMV8NXs2I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl
rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:51:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1492 (0x5d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4DFA, serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8
Validity
Not Before: Jul 22 23:51:44 2026 GMT
Not After : Jul 29 23:51:44 2026 GMT
Subject: CN=6a615790-0665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5d:e4:1d:51:55:e8:da:49:cb:06:a7:62:a5:
2b:bf:d7:28:c8:31:b4:2b:09:18:7c:98:23:08:1e:
6a:cd:b1:0f:c7:5e:5a:0d:c9:3d:e0:4e:af:d2:c0:
82:41:e6:cb:a0:85:66:92:4f:44:93:d1:29:1a:46:
45:6f:1c:42:21:56:44:4b:a8:32:96:c1:b4:5e:6f:
30:d6:e1:6d:b2:0c:fb:4d:a4:06:5c:c8:96:e8:20:
73:a8:66:06:de:95:ac:c1:a3:a0:d1:74:fe:4e:9c:
af:f6:c2:b4:36:d0:3a:e7:10:dd:2d:b1:79:de:1c:
a9:17:91:ab:01:c5:3c:39:c9:31:87:bb:e7:db:c4:
12:62:c2:95:98:31:42:e6:36:44:08:ea:ec:a2:6a:
ad:1a:e7:0a:a1:e2:ee:26:82:9c:20:d0:17:4c:41:
9b:c5:f0:11:73:3a:46:f8:d5:9b:42:07:af:f1:a7:
b2:e7:3e:97:59:db:42:3e:01:c9:1a:10:36:95:42:
23:39:b8:df:f1:81:0c:77:08:a9:56:ff:90:47:9d:
7e:21:c1:da:19:03:92:2f:82:ef:12:01:d7:ca:5a:
1a:67:61:a9:21:5f:c1:4c:db:6d:2f:6f:3a:ab:9b:
f1:7d:1a:b2:d2:bf:b2:0f:f8:ae:04:82:59:97:63:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:15:F8:B2:A8:37:40:1C:DE:08:7E:0A:8C:FE:6C:08:0D:C0:53:6F
X509v3 Authority Key Identifier:
keyid:20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c8:f7:f1:18:00:ad:10:66:0c:39:51:aa:c0:5f:08:0c:23:
58:6e:e9:ea:3a:7f:8a:83:3d:a1:a0:a9:b0:77:2d:cb:c0:4b:
86:06:94:ca:ee:df:3b:df:d1:25:94:b5:ab:62:e9:6d:8b:55:
28:f3:9a:a7:70:ed:62:73:e9:cb:2e:cb:a4:5e:47:a6:b7:a3:
68:bf:d9:31:5f:30:82:6d:98:a1:7f:56:c0:7f:b9:d9:fd:da:
ba:75:e4:7e:c7:d5:2e:f3:0f:ec:9e:39:91:69:c8:f8:af:54:
64:b1:cf:57:b5:d2:ae:4a:76:66:66:f8:3d:b2:00:54:5b:6a:
12:c8:ab:62:5b:5b:28:87:08:c6:a0:15:a8:24:fa:46:ce:b4:
1c:6b:04:69:b1:bc:0e:8f:45:2a:bb:01:ea:35:2f:8c:a5:78:
b2:8f:cf:9b:4c:88:d3:de:fd:bc:37:28:c3:9c:67:0a:36:86:
0f:fe:89:ee:eb:7d:88:8e:fa:19:6f:b4:bd:1d:f4:76:ce:0d:
ac:dc:50:4a:b3:f4:ea:b0:ee:ed:21:fc:fc:8e:d8:19:27:ae:
2c:04:93:eb:f3:83:38:16:38:83:49:1f:73:71:c2:70:d4:87:
d3:8b:5d:bf:5d:fc:18:6e:29:70:ab:91:d9:52:d8:76:78:63:
c7:41:b8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:24:54 2026 by rpki-client