
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft
File: iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft (raw, json)
Hash identifier: EIp70Q6/9SgWQ6YIdTVQmyRgey1Kp3ip2RqY2owU/QQ=
Subject key identifier: F5:49:5D:DF:4E:BB:72:8D:6E:7E:BE:2E:C1:28:2B:66:38:CB:2B:32
Authority key identifier: 89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE
Certificate issuer: /CN=A91F40E0/serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft
Manifest number: 93
Signing time: Mon 11 May 2026 07:41:57 +0000
Manifest this update: Mon 11 May 2026 07:41:57 +0000
Manifest next update: Mon 18 May 2026 07:41:57 +0000
Files and hashes: 1: iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl (hash: 4Y4zQlyk/3xls4eqU2EkAvkpwSRGvEU2FpNBkRkzgmo=)
2: 399480C4ACD011F08828DD7BC4F9AE02.roa (hash: faAWxuL02WBDF7lhFM/mV+aG3ZsWz2hDnEoq4EKfApA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl
rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F40E0, serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE
Validity
Not Before: May 11 07:41:57 2026 GMT
Not After : May 18 07:41:57 2026 GMT
Subject: CN=6a018845-0918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:d6:14:4f:44:a6:b2:90:40:8d:3a:c2:9d:
50:33:68:65:de:58:6e:5b:04:12:36:30:5e:04:fd:
53:e6:6d:f3:7f:69:fa:a3:83:83:2b:44:0d:ab:f4:
8c:a4:60:27:db:43:82:0b:a6:76:66:a3:d4:4e:a4:
29:62:b1:5f:34:f7:a2:a2:3b:a8:b7:4b:1b:25:17:
5f:cf:cd:48:6a:c1:57:50:8c:04:b4:02:af:cc:48:
59:e8:52:0e:1b:4b:59:b3:fc:70:27:07:62:32:f1:
2a:45:c2:1a:73:90:9d:e4:39:98:35:c3:15:04:00:
6f:37:8d:3a:56:74:5f:fe:2b:47:c8:e3:9e:ba:a5:
96:d5:17:11:2b:2d:8d:c6:d7:60:1a:cd:e9:11:39:
ef:8b:e5:bf:14:89:0d:dd:de:46:73:8a:a2:0c:b5:
9e:15:ba:91:2b:5d:2f:17:c0:a0:19:e4:09:f3:72:
42:3b:f1:95:18:ab:1a:c6:a2:fd:cb:d4:3c:65:8a:
e8:9f:3c:7b:bd:d7:91:2e:d1:4f:43:99:cd:ce:cd:
55:dc:a4:c9:cd:e4:58:c9:44:2c:c6:a7:39:6a:4d:
15:f8:bb:28:64:a1:d7:07:67:22:5a:c0:36:f5:84:
50:67:69:06:4f:21:74:49:de:71:a3:f5:59:9f:f8:
17:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:49:5D:DF:4E:BB:72:8D:6E:7E:BE:2E:C1:28:2B:66:38:CB:2B:32
X509v3 Authority Key Identifier:
keyid:89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:39:80:11:b0:c6:92:60:7c:2d:a1:2b:1f:8c:5b:53:ef:31:
7d:4a:dd:27:58:77:34:b4:44:10:89:ae:ef:29:21:10:57:3f:
4d:8d:aa:68:16:bc:ac:a6:b9:41:28:13:f6:cc:80:c8:bf:2e:
39:13:fc:45:dd:04:95:07:d4:59:2a:80:d2:45:4a:76:3e:b3:
b4:43:3f:6d:9c:ac:36:a8:6f:c6:c7:57:5d:7f:e6:cc:c7:a7:
e0:1e:93:93:56:6b:f3:f1:89:a4:97:31:c3:15:b4:48:86:dd:
5e:bf:e2:c5:17:e4:50:d8:b3:9c:be:41:22:85:f8:26:88:9e:
1a:18:6b:25:18:12:39:bc:24:f8:f7:d4:a6:43:14:64:de:ec:
c6:b8:4f:16:a8:fc:e0:9a:4e:6f:3a:21:78:27:4e:01:8e:2e:
47:d5:c5:73:ed:2f:8f:dc:dd:a6:04:c4:05:59:32:3f:f5:38:
ec:32:1e:ff:9c:b6:ca:24:e3:6c:81:53:2b:54:1e:c9:2f:75:
43:a8:68:2c:be:c0:b6:c3:1c:aa:e9:0f:06:f4:b3:19:84:b0:
8c:1b:a3:d2:f3:b7:67:38:53:25:25:9b:00:60:e1:d9:ee:ec:
96:75:72:e3:ef:85:7e:1f:d2:45:33:0d:d4:4a:50:49:c3:07:
9e:4a:3e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:28:34 2026 by rpki-client