
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft
File: ItyTZY3G6XAwereu8eJV3j1D9bc.mft (raw, json)
Hash identifier: NVSoE05b2qYbu02GIvnF7CZ6GeqQf+FbBM4yuReALVU=
Subject key identifier: A5:05:27:CB:10:BD:20:84:A5:60:92:16:13:9D:78:75:74:66:A1:52
Authority key identifier: 22:DC:93:65:8D:C6:E9:70:30:7A:B7:AE:F1:E2:55:DE:3D:43:F5:B7
Certificate issuer: /CN=A91F0C45/serialNumber=22DC93658DC6E970307AB7AEF1E255DE3D43F5B7
Certificate serial: B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft
Manifest number: AE
Signing time: Thu 23 Jul 2026 09:04:00 +0000
Manifest this update: Thu 23 Jul 2026 09:04:00 +0000
Manifest next update: Thu 30 Jul 2026 09:04:00 +0000
Files and hashes: 1: ItyTZY3G6XAwereu8eJV3j1D9bc.crl (hash: r53M7ZNHeTzAiSSImxNs0ptlfh6/a16yRIcpjta/8qs=)
2: 96AF1D609A0F11F09F475111C4F9AE02.roa (hash: lCi752ligH/UO1OJEHoof5FIfLu807frgAct0rFSMSY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.crl
rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0C45, serialNumber=22DC93658DC6E970307AB7AEF1E255DE3D43F5B7
Validity
Not Before: Jul 23 09:04:00 2026 GMT
Not After : Jul 30 09:04:00 2026 GMT
Subject: CN=6a61d900-c542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:13:b6:f3:53:f2:13:86:43:a2:d1:1b:d5:
47:d4:08:7b:be:ef:58:f2:83:de:14:3d:e5:9d:16:
82:57:89:bd:e7:eb:36:8e:5b:64:c2:ef:59:f9:a0:
07:7b:56:dd:a4:03:d0:44:f7:25:6a:6d:13:89:5e:
4e:0d:ab:9e:d0:fa:d0:09:b3:6f:43:de:eb:66:7a:
8e:00:35:a1:13:60:ac:24:6e:4e:62:22:56:ba:68:
c1:ca:cf:94:b2:d4:80:53:6f:d1:cb:99:67:80:cf:
44:83:64:b4:a7:37:c1:8a:87:0e:36:a5:1b:f9:ff:
fc:11:cd:ea:ef:59:99:90:be:24:f8:b6:77:d4:37:
2a:a6:a6:26:72:2c:61:33:c8:7c:f2:18:9f:60:0d:
fb:b2:c8:42:01:40:5f:9e:a8:cc:15:5c:24:b6:80:
dd:0d:2a:e1:67:3f:30:81:14:a7:d5:0e:1e:6a:c3:
08:00:21:0e:d1:d3:c8:f4:aa:8e:b1:f0:20:ec:7f:
33:dc:32:59:2d:f7:ae:b8:d8:1f:a4:3f:1e:ad:a5:
ad:27:b1:85:ef:ae:e9:10:77:a6:0d:33:ca:97:1b:
3a:0f:97:7c:fa:d2:24:56:4a:6e:f9:51:26:11:db:
50:e9:17:3c:b7:dc:dd:4d:ad:8b:61:84:2e:66:32:
24:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:05:27:CB:10:BD:20:84:A5:60:92:16:13:9D:78:75:74:66:A1:52
X509v3 Authority Key Identifier:
keyid:22:DC:93:65:8D:C6:E9:70:30:7A:B7:AE:F1:E2:55:DE:3D:43:F5:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:51:e2:2e:01:c0:ac:80:64:5b:f7:03:a7:14:3e:5a:7b:b4:
d7:e4:87:16:68:6e:78:4c:1e:b6:6c:78:3d:cc:3b:e4:f1:fc:
19:11:fe:12:60:e9:b3:54:70:46:81:85:a7:17:ce:2d:60:08:
3a:de:26:04:0c:e9:f6:56:ee:0e:2b:46:49:cb:81:3f:32:9d:
e3:b3:3f:e9:7a:5a:25:a9:ea:5d:50:70:6b:00:16:68:97:3e:
a4:78:0a:2b:11:63:bf:4c:e3:57:f8:46:b1:b1:d3:b6:d8:14:
49:00:d5:c4:05:8f:65:98:9e:2e:03:c0:e2:e0:73:af:00:2e:
d7:9d:e9:56:d0:b1:ea:ba:55:a4:4a:91:15:b4:cf:8c:92:c8:
4b:8a:f6:f0:c7:ae:3a:d0:4b:5e:e4:d8:01:a2:7e:9a:2a:f0:
3c:0e:eb:4b:5c:bc:cc:ff:f7:6a:47:e3:a8:22:4d:53:12:69:
4b:d5:55:f8:87:2f:a1:ad:e2:46:48:4d:95:2d:0b:4d:34:26:
1b:ff:af:43:83:80:46:55:35:76:b1:15:36:03:ea:52:f9:72:
88:8d:f6:3c:ec:32:fd:0f:01:a8:01:54:65:e1:79:55:1a:43:
a1:10:dd:e9:da:bf:cb:dd:08:50:1e:69:99:3b:8a:df:a0:1e:
7e:8e:b5:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjBDNDUxMTAvBgNVBAUTKDIyREM5MzY1OERDNkU5NzAzMDdBQjdBRUYxRTI1NURF
M0Q0M0Y1QjcwHhcNMjYwNzIzMDkwNDAwWhcNMjYwNzMwMDkwNDAwWjAYMRYwFAYD
VQQDEw02YTYxZDkwMC1jNTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyLsTtvNT8hOGQ6LRG9VH1Ah7vu9Y8oPeFD3lnRaCV4m95+s2jltkwu9Z+aAH
e1bdpAPQRPclam0TiV5ODaue0PrQCbNvQ97rZnqOADWhE2CsJG5OYiJWumjBys+U
stSAU2/Ry5lngM9Eg2S0pzfBiocONqUb+f/8Ec3q71mZkL4k+LZ31DcqpqYmcixh
M8h88hifYA37sshCAUBfnqjMFVwktoDdDSrhZz8wgRSn1Q4easMIACEO0dPI9KqO
sfAg7H8z3DJZLfeuuNgfpD8eraWtJ7GF767pEHemDTPKlxs6D5d8+tIkVkpu+VEm
EdtQ6Rc8t9zdTa2LYYQuZjIkawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKUFJ8sQ
vSCEpWCSFhOdeHV0ZqFSMB8GA1UdIwQYMBaAFCLck2WNxulwMHq3rvHiVd49Q/W3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEM0NS85MUExODk5RTg5
MkUxMUYwOTdBQzY2MkZDNEY5QUUwMi9JdHlUWlkzRzZYQXdlcmV1OGVKVjNqMUQ5
YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0l0eVRaWTNHNlhBd2VyZXU4ZUpWM2oxRDliYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MEM0NS85MUExODk5RTg5MkUxMUYwOTdBQzY2MkZDNEY5QUUwMi9JdHlUWlkzRzZY
QXdlcmV1OGVKVjNqMUQ5YmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUFHiLgHArIBkW/cDpxQ+Wnu01+SHFmhueEwetmx4Pcw75PH8GRH+EmDps1Rw
RoGFpxfOLWAIOt4mBAzp9lbuDitGScuBPzKd47M/6XpaJanqXVBwawAWaJc+pHgK
KxFjv0zjV/hGsbHTttgUSQDVxAWPZZieLgPA4uBzrwAu153pVtCx6rpVpEqRFbTP
jJLIS4r28MeuOtBLXuTYAaJ+mirwPA7rS1y8zP/3akfjqCJNUxJpS9VV+Icvoa3i
RkhNlS0LTTQmG/+vQ4OARlU1drEVNgPqUvlyiI32POwy/Q8BqAFUZeF5VRpDoRDd
6dq/y90IUB5pmTuK36Aefo61tg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:53 2026 by rpki-client