
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft
File: ItyTZY3G6XAwereu8eJV3j1D9bc.mft (raw, json)
Hash identifier: eQ6Z8iTSZ485yTRa8jdM3y+wWIBdw0dUjFl1BhCadO4=
Subject key identifier: 9E:BA:C9:E4:BD:05:2C:17:58:15:9F:38:36:39:F9:0E:11:81:BC:91
Authority key identifier: 22:DC:93:65:8D:C6:E9:70:30:7A:B7:AE:F1:E2:55:DE:3D:43:F5:B7
Certificate issuer: /CN=A91F0C45/serialNumber=22DC93658DC6E970307AB7AEF1E255DE3D43F5B7
Certificate serial: ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft
Manifest number: E9
Signing time: Sun 15 Nov 2026 06:42:35 +0000
Manifest this update: Sun 15 Nov 2026 06:42:35 +0000
Manifest next update: Sun 22 Nov 2026 06:42:35 +0000
Files and hashes: 1: ItyTZY3G6XAwereu8eJV3j1D9bc.crl (hash: tlJVNoWdqoCt0bR9oIUe+35ofTCAxgL7hvNS/yd3erg=)
2: 96AF1D609A0F11F09F475111C4F9AE02.roa (hash: lCi752ligH/UO1OJEHoof5FIfLu807frgAct0rFSMSY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.crl
rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 06:42:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0C45, serialNumber=22DC93658DC6E970307AB7AEF1E255DE3D43F5B7
Validity
Not Before: Nov 15 06:42:35 2026 GMT
Not After : Nov 22 06:42:35 2026 GMT
Subject: CN=6af9545b-c688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b6:1d:43:0b:ff:71:37:ef:39:65:ba:58:2d:
ee:98:50:78:b6:6d:b4:b8:dd:0c:8f:67:24:55:10:
57:e4:42:df:a5:65:0a:0d:51:a0:97:ba:12:2d:e0:
db:be:8d:d7:f7:64:3f:2a:40:a3:0b:ad:65:a5:9b:
51:4c:2a:bb:8c:58:52:98:0b:1c:b9:fb:cf:c2:68:
66:32:f0:82:91:22:af:92:57:65:7f:77:d1:77:f1:
ce:ae:d4:27:e8:e1:80:e8:36:3c:6c:28:7e:32:98:
ad:a8:bd:77:d9:59:52:02:78:a6:e5:b1:ce:ce:c1:
cf:b5:32:15:3f:bb:d9:5c:ad:94:4e:ad:eb:82:41:
a5:8c:ba:f2:6f:d6:a7:eb:2b:0c:ca:d0:49:8c:e9:
7d:5c:15:55:e0:96:f5:31:9e:45:ce:42:40:a9:19:
2b:22:5e:e0:34:ed:37:10:97:d4:08:30:b5:1c:bb:
38:a8:ae:03:4b:a9:4c:c7:ef:5e:51:db:20:8c:2f:
f8:65:32:4a:3f:0b:4e:82:4e:92:f9:f1:64:85:39:
97:52:3f:2f:87:8d:00:78:d8:41:8c:b0:6a:52:31:
2a:1b:1a:66:12:bd:df:4a:10:23:53:2f:13:a0:ba:
21:57:02:55:4e:ba:f9:d5:a4:f5:09:80:d2:96:b8:
18:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BA:C9:E4:BD:05:2C:17:58:15:9F:38:36:39:F9:0E:11:81:BC:91
X509v3 Authority Key Identifier:
keyid:22:DC:93:65:8D:C6:E9:70:30:7A:B7:AE:F1:E2:55:DE:3D:43:F5:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:73:fc:b2:3d:19:80:57:9b:21:6e:ef:e4:55:38:75:f2:fe:
83:45:d1:ea:4b:00:81:db:c2:35:37:19:16:fa:81:4e:51:01:
56:0e:fc:28:1d:06:59:a5:ef:b5:57:f3:3e:6f:62:1c:29:02:
2e:b6:f2:f8:6f:59:7d:ca:9e:ba:a2:c8:17:86:c7:8f:9e:4e:
0d:e7:77:79:5d:b6:ce:cd:be:fb:c9:67:15:cd:40:8d:44:32:
00:9e:7f:7b:5d:4b:f9:54:45:00:08:e6:7b:f3:62:18:eb:62:
76:5b:93:f0:b8:3d:d8:03:77:19:44:b6:a7:47:90:33:91:b6:
6f:a5:ad:3b:55:46:6a:c6:7a:d6:ce:2b:13:46:95:d9:e0:80:
21:ae:6c:96:c5:b7:41:4e:8a:f5:ec:b9:0a:de:29:41:88:a3:
5c:e1:21:38:52:8d:d1:44:ba:d2:b3:6a:ea:c5:72:e7:2b:3d:
eb:ac:dc:be:ec:b6:c8:d2:ee:51:da:3f:36:d4:2b:65:75:c0:
e9:38:eb:ba:97:f4:8f:1a:61:f0:9f:92:ac:7c:69:d5:b7:22:
5f:ec:a1:00:e1:87:56:f7:10:49:32:81:b8:de:f3:0e:61:78:
77:a9:3a:48:64:a3:58:c0:b3:2a:47:f4:39:70:e2:83:17:6f:
9e:8b:3a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:48:22 2026 by rpki-client