
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
File: 0I2GgcK-TUfCopBV9m5olVhGF_c.mft (raw, json)
Hash identifier: FD1eLpeTh1N7Ltsj+RLxiS2T/j4oRBfM15wEZ+7HslI=
Subject key identifier: D9:B1:E4:2E:68:0D:6B:BA:54:50:D4:DE:E1:BF:E3:E2:C4:4D:00:7A
Authority key identifier: D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7
Certificate issuer: /CN=A91FCEB1/serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7
Certificate serial: 1B4E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
Manifest number: 2325
Signing time: Wed 22 Jul 2026 15:59:43 +0000
Manifest this update: Wed 22 Jul 2026 15:59:43 +0000
Manifest next update: Wed 29 Jul 2026 15:59:43 +0000
Files and hashes: 1: 0I2GgcK-TUfCopBV9m5olVhGF_c.crl (hash: EUo7j3u+8tLloLJ0A1kG0CxxAHIwubaXbJAVF6BbwsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl
rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:59:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6990 (0x1b4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCEB1, serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7
Validity
Not Before: Jul 22 15:59:43 2026 GMT
Not After : Jul 29 15:59:43 2026 GMT
Subject: CN=6a60e8ef-490d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:18:69:72:b6:8d:fd:71:18:ee:84:73:ce:d1:
4d:1d:19:ac:ca:47:ce:82:af:97:cc:5b:c5:1e:ea:
87:cd:37:93:4e:88:cc:22:77:32:80:2e:56:2e:c8:
86:62:28:72:33:ef:31:d1:c5:cc:b5:df:31:99:c6:
13:ba:2e:4e:a9:1b:ec:fc:1f:b7:05:62:8a:a8:a0:
73:5b:81:99:9d:ed:0e:e9:55:a0:76:a9:91:c6:dc:
fb:5c:d0:01:98:b7:ee:13:e8:95:9b:6e:93:e8:e0:
fe:24:38:48:e9:2f:ff:f9:64:77:aa:b1:ee:a1:1c:
18:da:ec:8c:e8:b3:06:cd:45:57:7d:24:1d:c6:b3:
9d:30:ba:26:eb:87:71:c0:27:0a:48:3d:5e:57:36:
9e:c5:3c:aa:2e:ae:7b:d7:5a:70:5c:34:fe:1f:61:
3f:9a:8c:5e:4f:26:09:4d:30:23:40:74:56:2c:58:
8d:a0:b1:05:ad:18:1d:77:a6:6e:27:79:73:53:4f:
22:b7:3e:9b:a7:05:28:0e:25:39:77:b3:1e:d5:0a:
ea:00:09:0f:15:8a:a9:82:0c:2b:f9:fe:55:b1:30:
11:9d:f0:51:ff:c3:62:5c:71:ef:2c:0c:22:59:c3:
90:5a:9d:29:10:b2:b2:95:ad:bf:ca:56:ab:c0:b3:
c5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B1:E4:2E:68:0D:6B:BA:54:50:D4:DE:E1:BF:E3:E2:C4:4D:00:7A
X509v3 Authority Key Identifier:
keyid:D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:a1:52:4e:a6:02:4d:6c:74:87:01:cc:7e:a6:be:07:55:d4:
18:01:7c:1a:87:b5:9f:39:e3:c2:87:c6:25:76:28:e0:2b:6d:
08:a2:3e:e9:be:c0:b6:43:61:72:02:e4:6b:3b:15:9c:35:78:
48:5f:58:8c:f9:66:3a:ed:c2:a7:b0:a8:f5:ab:f9:64:2e:16:
db:1b:65:81:4c:8f:58:41:27:d7:bd:44:75:f7:d7:18:0a:b7:
74:45:8e:d8:b4:b9:84:f3:47:4f:dd:7f:d5:55:34:d7:21:8f:
bb:08:a0:a6:d5:95:63:ba:70:50:10:9b:43:1d:ed:9b:44:a6:
cc:d3:88:87:ab:43:b8:64:8a:ab:86:9b:af:e2:ec:36:53:ec:
b5:a9:43:a4:9a:f5:8c:9d:ae:01:b1:53:b8:17:10:bf:02:76:
e9:4d:18:b4:c4:96:63:89:ec:7b:41:b4:2a:a8:05:54:ac:99:
78:9f:bd:66:e1:45:90:41:7d:35:1e:5f:b6:39:59:62:a8:ba:
ea:28:25:27:a6:09:0c:a4:88:d7:83:1d:44:76:15:22:c5:1a:
54:41:a5:b1:6e:d3:18:66:2d:29:0e:f8:31:13:70:bc:a1:a6:
8b:18:42:96:1f:fb:a0:e8:58:1c:03:6a:9e:f9:09:62:96:84:
a5:1c:b0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:34 2026 by rpki-client