
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft
File: I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json)
Hash identifier: 81ZAb395UYU4174FWlMDnj4gu8fxSi7W7ecctEaVROo=
Subject key identifier: 2B:C5:40:52:CC:26:23:CD:EB:82:2C:CF:42:9E:E9:19:B8:61:5C:38
Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB
Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB
Certificate serial: 19D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft
Manifest number: 19C6
Signing time: Wed 22 Jul 2026 16:28:27 +0000
Manifest this update: Wed 22 Jul 2026 16:28:27 +0000
Manifest next update: Wed 29 Jul 2026 16:28:27 +0000
Files and hashes: 1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: kDdyLg1Wyd0q/F0RThBKNGR0chH1E7pXGUJ9RsnpOh8=)
2: D421D958881611E78B9B0850C4F9AE02.roa (hash: 8Nuoull25KblVQ1PNDvmoNwHbwhuQ64gaT6vwAXGPpc=)
3: D57C98A88C0311EFAA53FF12C4F9AE02.roa (hash: sk/aWgMAKHJV+S5wciXhAIcHYQF2Px3Gvke4ka59rbI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl
rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:28:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6614 (0x19d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E892A, serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB
Validity
Not Before: Jul 22 16:28:27 2026 GMT
Not After : Jul 29 16:28:27 2026 GMT
Subject: CN=6a60efab-b390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:02:3f:d0:7b:12:36:87:d8:81:2a:77:cb:78:
c7:da:c3:7b:bf:a1:d2:f5:56:ca:15:d0:03:c5:7e:
4a:de:43:ca:24:df:56:b1:87:8c:79:c0:48:0f:65:
ae:7b:bc:4e:75:29:32:68:06:56:15:ed:4e:55:eb:
90:b3:35:d8:08:8e:1c:1e:d2:45:ec:f2:8d:27:d7:
86:36:f1:6b:65:ae:0a:bc:73:e3:12:d0:50:ae:8d:
49:aa:c4:05:2a:d8:d6:ff:e2:3c:d6:7e:59:90:e9:
a3:1e:af:84:9c:84:b1:af:b8:8e:22:e0:39:b6:39:
c4:64:bb:1f:52:8f:54:63:9d:d2:44:62:61:f9:b8:
9b:f4:c8:71:d6:ca:0f:24:f5:04:7a:37:3a:e4:81:
9c:e6:7a:0e:ab:e0:2e:58:49:75:33:29:88:75:d9:
b3:ef:e3:db:ec:f3:ab:3b:66:55:19:5c:ab:db:9c:
74:52:3a:62:29:c4:06:b7:df:99:82:75:21:d8:0d:
67:dd:67:a5:b5:da:e2:5e:96:02:ef:22:b9:47:c5:
9f:6f:9a:47:01:ac:6d:0f:d8:3a:2b:55:c5:40:e5:
35:c9:f4:75:b5:02:53:b2:ad:21:9d:91:5d:db:1e:
45:88:98:e4:9a:cc:d5:d3:ab:f0:8f:a3:9e:39:2d:
98:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C5:40:52:CC:26:23:CD:EB:82:2C:CF:42:9E:E9:19:B8:61:5C:38
X509v3 Authority Key Identifier:
keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8e:e3:f8:bc:9e:46:d6:6f:09:9f:35:a7:50:25:ec:e6:3b:
92:44:d8:f8:7c:8e:bb:be:5f:71:bf:3f:45:be:a1:0e:e8:50:
33:32:c0:b1:3f:df:09:8a:15:ff:09:85:65:8a:17:a3:8b:a9:
f2:d0:9f:ff:94:5e:26:7d:df:ff:23:84:f1:64:ce:b8:bc:62:
ce:32:2b:06:a0:5e:2d:7d:47:d1:a2:1d:47:5f:14:61:d2:da:
da:35:69:e0:cb:51:81:ec:6b:5e:b1:97:76:c1:3e:b7:2a:52:
8b:d9:ef:c2:b3:e4:eb:8e:e7:8b:ce:ac:ea:13:a9:59:28:27:
e3:aa:0e:91:85:d6:b7:84:1a:df:f5:01:5a:17:52:be:46:f9:
c6:40:fe:3f:1f:eb:23:98:57:b0:7f:1f:f2:0f:a1:bf:0d:00:
d3:bc:7e:6c:2d:39:d8:6c:27:44:bb:0f:1c:ab:51:0c:7d:07:
6b:ea:1f:fb:07:e4:c2:48:3b:9f:ba:40:85:05:18:8b:fe:38:
f6:e2:eb:71:c1:9d:8d:00:79:01:e8:32:2b:8b:0f:87:e5:38:
ab:59:a8:40:30:ec:d8:c5:b7:81:61:70:c1:52:31:50:15:fc:
09:25:8a:84:96:f3:d9:b0:d9:a5:a1:ad:67:63:3a:96:20:62:
3d:db:cb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:53:12 2026 by rpki-client