
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft
File: IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft (raw, json)
Hash identifier: iUpPvjHXNm31q08pbTYW5RtodciZVte9aqLISKBGf0Q=
Subject key identifier: 7C:BA:AC:84:07:17:AD:1A:59:F7:5F:25:D7:2A:1D:55:C0:B3:CE:D6
Authority key identifier: 21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07
Certificate issuer: /CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107
Certificate serial: 058E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft
Manifest number: 0585
Signing time: Tue 24 Mar 2026 22:57:30 +0000
Manifest this update: Tue 24 Mar 2026 22:57:29 +0000
Manifest next update: Tue 31 Mar 2026 22:57:29 +0000
Files and hashes: 1: IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl (hash: dNFeT6YzmpdIiNZIuVHfCJUHWrKYOyoAr9kzVhUZOec=)
2: 6084E4F217E811EC8A22700DC4F9AE02.roa (hash: 4+PTFdgl3/Y2zZl8cZ4hou7wKPwTyGH/S+rTxQnvDys=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl
rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:57:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1422 (0x58e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8B44, serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107
Validity
Not Before: Mar 24 22:57:29 2026 GMT
Not After : Mar 31 22:57:29 2026 GMT
Subject: CN=69c316d9-34c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:5b:98:0f:96:b5:90:1a:6c:8b:89:bd:b7:
59:4f:54:61:0c:95:ac:96:42:5f:f5:d7:dd:99:8f:
bb:5d:ce:16:86:66:6d:66:f0:34:c0:ed:70:ce:c1:
7d:92:ad:95:03:a0:b6:ad:da:26:37:7f:00:28:ed:
47:49:dd:f8:75:45:cb:c0:7f:8a:b1:99:9a:27:2a:
24:3b:b3:cb:6f:89:c9:07:5a:c6:b9:76:0d:23:f2:
08:ed:80:02:42:81:73:d4:65:75:80:e5:25:47:bb:
84:dc:cc:1a:77:1f:46:91:af:e0:3d:9f:35:f6:b9:
cd:6b:1e:98:3d:0d:bc:16:20:1e:9c:c9:22:7a:8d:
a2:87:b2:91:7a:68:b9:2d:1f:0f:7d:d5:e6:88:c0:
8e:0c:f7:5c:66:dd:0d:55:fb:92:de:90:e7:c7:d5:
cd:96:7c:85:a7:6b:5c:27:45:3f:84:66:a3:74:41:
33:9c:67:bb:ce:b8:9a:96:0e:fb:10:e1:4a:3e:f0:
12:85:21:03:8e:49:01:ea:59:96:ae:00:55:8c:78:
3f:20:d4:19:2b:ee:eb:9d:b7:1d:e6:76:a6:dd:7e:
70:5f:12:b4:1d:1c:e2:f3:d8:3e:65:39:d4:3e:55:
f3:f7:d9:42:24:37:f4:42:05:8e:d1:93:91:22:36:
42:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BA:AC:84:07:17:AD:1A:59:F7:5F:25:D7:2A:1D:55:C0:B3:CE:D6
X509v3 Authority Key Identifier:
keyid:21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:14:cc:52:fa:1b:6f:19:9c:d5:98:96:2b:a2:10:c5:42:5d:
b6:38:44:2d:63:1c:94:da:04:e2:01:e7:9e:15:fa:7e:87:50:
4c:cd:57:52:6a:7c:0b:fe:1a:a4:5c:44:f7:96:31:75:f9:68:
69:14:82:68:ee:ee:a9:41:97:d6:4d:1a:d1:29:89:12:4f:3d:
d4:fa:09:7d:cd:94:30:2e:2f:b4:02:20:7c:fe:90:fa:38:71:
38:dc:f0:0e:af:0e:35:7a:b8:ee:ee:11:28:6e:3e:72:c2:49:
37:09:6d:19:6a:5b:b9:4c:45:ee:3a:f0:a9:f1:5e:85:7e:fb:
5b:d7:e1:ba:8b:a7:dc:06:28:01:88:f6:d2:b8:d3:de:51:91:
89:51:1e:20:77:cd:03:53:aa:b5:84:7d:69:70:90:6b:f4:24:
41:1d:9f:e9:16:80:bd:2f:6f:08:de:ac:f9:94:73:6d:cf:43:
c9:a0:89:5a:c8:b8:d7:b8:cc:1b:cb:30:b8:ba:26:2d:fb:27:
ae:45:d1:89:70:99:93:2c:5a:69:fb:b0:18:e1:18:9b:6d:ae:
18:5c:86:ef:69:33:f1:f0:e3:14:56:f9:cb:ee:0f:9d:91:3a:
d5:ed:2c:2f:c9:d5:65:5e:6c:c0:bc:02:03:c2:ad:9c:3e:b9:
43:10:69:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThCNDQxMTAvBgNVBAUTKDIxRjcxM0M4MDhCQ0QxNEJGQ0JDQ0ZENDYyNzNDMjBF
RDA3QjQxMDcwHhcNMjYwMzI0MjI1NzI5WhcNMjYwMzMxMjI1NzI5WjAYMRYwFAYD
VQQDEw02OWMzMTZkOS0zNGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsOBbmA+WtZAabIuJvbdZT1RhDJWslkJf9dfdmY+7Xc4WhmZtZvA0wO1wzsF9
kq2VA6C2rdomN38AKO1HSd34dUXLwH+KsZmaJyokO7PLb4nJB1rGuXYNI/II7YAC
QoFz1GV1gOUlR7uE3Mwadx9Gka/gPZ819rnNax6YPQ28FiAenMkieo2ih7KRemi5
LR8PfdXmiMCODPdcZt0NVfuS3pDnx9XNlnyFp2tcJ0U/hGajdEEznGe7zrialg77
EOFKPvAShSEDjkkB6lmWrgBVjHg/INQZK+7rnbcd5nam3X5wXxK0HRzi89g+ZTnU
PlXz99lCJDf0QgWO0ZORIjZCAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHy6rIQH
F60aWfdfJdcqHVXAs87WMB8GA1UdIwQYMBaAFCH3E8gIvNFL/LzP1GJzwg7Qe0EH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEI0NC9GM0IxNjRBQzE3
RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBVdjh2TV9VWW5QQ0R0QjdR
UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lmY1R5QWk4MFV2OHZNX1VZblBDRHRCN1FRYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEI0NC9GM0IxNjRBQzE3RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBV
djh2TV9VWW5QQ0R0QjdRUWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMBTMUvobbxmc1ZiWK6IQxUJdtjhELWMclNoE4gHnnhX6fodQTM1XUmp8C/4a
pFxE95YxdfloaRSCaO7uqUGX1k0a0SmJEk891PoJfc2UMC4vtAIgfP6Q+jhxONzw
Dq8ONXq47u4RKG4+csJJNwltGWpbuUxF7jrwqfFehX77W9fhuoun3AYoAYj20rjT
3lGRiVEeIHfNA1OqtYR9aXCQa/QkQR2f6RaAvS9vCN6s+ZRzbc9DyaCJWsi417jM
G8swuLomLfsnrkXRiXCZkyxaafuwGOEYm22uGFyG72kz8fDjFFb5y+4PnZE61e0s
L8nVZV5swLwCA8KtnD65QxBpVQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:20 2026 by rpki-client