
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
File: IQlGzanedd75YJiV-_Ie2Exy9Oc.mft (raw, json)
Hash identifier: G3HorULNZKfPznOi+33yEFePL2XSBaScLcQTRdfo590=
Subject key identifier: 0F:65:46:A5:62:01:D5:FB:83:EF:CC:84:A3:20:C3:20:9F:94:F0:29
Authority key identifier: 21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7
Certificate issuer: /CN=A91F7537/serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7
Certificate serial: 0106
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
Manifest number: 0102
Signing time: Wed 25 Mar 2026 05:22:03 +0000
Manifest this update: Wed 25 Mar 2026 05:22:03 +0000
Manifest next update: Wed 01 Apr 2026 05:22:03 +0000
Files and hashes: 1: IQlGzanedd75YJiV-_Ie2Exy9Oc.crl (hash: Ms8EafFlCv17SmcIIQAP1cECfqOpb5qGFAAW/0191MU=)
2: 6156C7F6A27311EFBF7D5E22C4F9AE02.roa (hash: vy7IODG07pz73pTj0pY/9n2zcuO8v2L2DLhKfTMR+yA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl
rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7537, serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7
Validity
Not Before: Mar 25 05:22:03 2026 GMT
Not After : Apr 1 05:22:03 2026 GMT
Subject: CN=69c370fb-0af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:e9:c8:6d:be:37:9d:6c:13:e4:75:cb:d7:
68:ee:1a:2b:55:65:73:30:2f:7f:92:c1:0d:2d:03:
e0:9d:79:40:08:d7:6d:64:8c:bc:bd:f7:01:ce:58:
63:60:fa:35:df:d4:b6:80:22:18:1b:d5:13:a9:8c:
6e:7c:ff:0a:7d:b9:cf:df:e4:d3:ab:d4:94:f6:3f:
dc:4c:aa:40:5d:18:ac:21:45:a6:d7:35:4d:e5:0b:
f9:ff:fb:16:a0:c8:aa:af:9b:68:74:71:b6:34:a3:
27:f6:c4:dc:c1:47:27:ca:3f:a5:b0:35:86:c9:d2:
49:5b:94:bf:db:e5:f5:87:87:2f:1e:24:32:2f:3c:
43:53:0b:a3:6c:86:9e:3e:4f:95:69:04:3f:e3:5f:
01:7a:31:a1:90:50:66:2d:a8:09:53:aa:e8:7f:ef:
2f:e1:a4:53:ae:18:a2:bd:fd:82:22:f5:76:f8:4a:
44:93:81:cf:47:86:32:b2:d6:6b:a8:f8:d6:3f:4b:
22:90:c8:8e:55:dd:e1:20:76:08:64:d2:0b:cd:a2:
13:48:2b:ae:a2:a4:15:45:58:f7:54:4a:7d:33:c3:
30:99:81:b5:3c:19:0f:74:06:55:d9:bf:64:a6:05:
ff:b5:a1:c0:55:72:85:68:cf:cc:81:eb:57:0b:6b:
87:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:65:46:A5:62:01:D5:FB:83:EF:CC:84:A3:20:C3:20:9F:94:F0:29
X509v3 Authority Key Identifier:
keyid:21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:87:92:12:63:b6:bc:56:91:a1:2d:97:57:b5:43:a9:3a:6f:
84:e4:f5:fa:17:c9:61:30:65:05:0a:6e:50:b3:5b:c7:4b:9e:
db:27:6f:58:9c:24:e1:81:b9:b0:db:a0:c3:92:b4:f4:15:fe:
10:fb:a3:17:f8:77:f4:97:4c:ff:c9:18:39:1d:e0:f5:15:70:
fb:36:b0:98:f0:ae:1c:e5:4d:49:b1:b1:aa:f9:5d:34:8b:4d:
d4:5e:f1:0f:ec:f9:85:2a:b5:2a:ba:e2:35:fa:ae:d9:0a:fb:
d3:48:82:99:f5:e3:de:8a:23:73:c1:20:37:28:a0:a8:70:ac:
f1:49:f8:6c:dd:99:df:ea:0a:9e:42:b1:d8:41:be:84:ec:a3:
f1:b4:71:50:20:c4:58:c0:4c:65:06:c9:ca:8e:6a:92:3f:14:
bb:7d:7c:fb:09:3e:71:78:dc:44:40:31:d6:ee:5d:85:14:60:
e6:c9:cb:8b:f9:fc:f3:62:19:26:c4:e9:02:5b:fb:2d:e0:de:
d6:65:18:7c:0e:fa:b7:ab:32:13:8b:87:32:ba:67:d7:8f:72:
bd:9d:d6:d9:b6:b8:2d:fd:82:1d:fc:80:66:7d:e5:a9:ba:58:
30:13:85:bd:6b:20:39:ca:a0:38:b7:18:73:de:3c:f6:7b:b7:
0f:38:25:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjc1MzcxMTAvBgNVBAUTKDIxMDk0NkNEQTlERTc1REVGOTYwOTg5NUZCRjIxRUQ4
NEM3MkY0RTcwHhcNMjYwMzI1MDUyMjAzWhcNMjYwNDAxMDUyMjAzWjAYMRYwFAYD
VQQDEw02OWMzNzBmYi0wYWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtb3pyG2+N51sE+R1y9do7horVWVzMC9/ksENLQPgnXlACNdtZIy8vfcBzlhj
YPo139S2gCIYG9UTqYxufP8KfbnP3+TTq9SU9j/cTKpAXRisIUWm1zVN5Qv5//sW
oMiqr5todHG2NKMn9sTcwUcnyj+lsDWGydJJW5S/2+X1h4cvHiQyLzxDUwujbIae
Pk+VaQQ/418BejGhkFBmLagJU6rof+8v4aRTrhiivf2CIvV2+EpEk4HPR4YystZr
qPjWP0sikMiOVd3hIHYIZNILzaITSCuuoqQVRVj3VEp9M8MwmYG1PBkPdAZV2b9k
pgX/taHAVXKFaM/MgetXC2uH/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA9lRqVi
AdX7g+/MhKMgwyCflPApMB8GA1UdIwQYMBaAFCEJRs2p3nXe+WCYlfvyHthMcvTn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUzNy84N0RENTQ4Q0Ey
NzExMUVGQTM5MkYwNzlDNEY5QUUwMi9JUWxHemFuZWRkNzVZSmlWLV9JZTJFeHk5
T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lRbEd6YW5lZGQ3NVlKaVYtX0llMkV4eTlPYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzUzNy84N0RENTQ4Q0EyNzExMUVGQTM5MkYwNzlDNEY5QUUwMi9JUWxHemFuZWRk
NzVZSmlWLV9JZTJFeHk5T2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEYeSEmO2vFaRoS2XV7VDqTpvhOT1+hfJYTBlBQpuULNbx0ue2ydvWJwk4YG5
sNugw5K09BX+EPujF/h39JdM/8kYOR3g9RVw+zawmPCuHOVNSbGxqvldNItN1F7x
D+z5hSq1KrriNfqu2Qr700iCmfXj3oojc8EgNyigqHCs8Un4bN2Z3+oKnkKx2EG+
hOyj8bRxUCDEWMBMZQbJyo5qkj8Uu318+wk+cXjcREAx1u5dhRRg5snLi/n882IZ
JsTpAlv7LeDe1mUYfA76t6syE4uHMrpn149yvZ3W2ba4Lf2CHfyAZn3lqbpYMBOF
vWsgOcqgOLcYc9489nu3Dzglgw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:21:39 2026 by rpki-client