
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
File: IcjytuAdCoLRPDUYjDyT5vUUupQ.mft (raw, json)
Hash identifier: Sonk3gjPD3oH4orazMm3+mM2teu68vuRro8uPnoSZNM=
Subject key identifier: 47:E2:20:08:B5:7C:BE:7C:15:A7:84:55:CE:FE:1D:EB:E3:D7:31:EA
Authority key identifier: 21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94
Certificate issuer: /CN=A91A9C62/serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
Manifest number: BB
Signing time: Tue 21 Jul 2026 08:46:02 +0000
Manifest this update: Tue 21 Jul 2026 08:46:02 +0000
Manifest next update: Tue 28 Jul 2026 08:46:02 +0000
Files and hashes: 1: IcjytuAdCoLRPDUYjDyT5vUUupQ.crl (hash: vdOc0SMnIRS4oqRsLtxudO5SxQnnSsarHa3WDdzCCWE=)
2: 08EAF5106C2111F0B46AAC57C4F9AE02.roa (hash: yNRoRcrSs2idnKKKQBvpZT7hGrIPyAJ/BqXKminAWZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl
rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9C62, serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94
Validity
Not Before: Jul 21 08:46:02 2026 GMT
Not After : Jul 28 08:46:02 2026 GMT
Subject: CN=6a5f31ca-5098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:57:49:ab:81:6a:1b:16:34:45:f8:08:ff:
40:a7:a4:cf:3f:5d:b9:30:47:43:c4:2a:1f:a9:d4:
b8:72:58:69:c5:db:d9:34:e8:49:e6:0f:02:a2:20:
13:f7:8b:19:b7:2d:cb:bc:6c:44:e6:2d:04:aa:06:
e6:69:10:13:7e:d1:55:6d:1d:e6:82:01:ec:c1:67:
e5:22:e9:50:ab:de:fa:46:f8:9b:8c:13:80:96:b6:
06:fe:36:e3:21:c5:c4:90:88:3c:a3:7d:55:a7:e9:
be:59:c4:99:3f:1d:6c:41:b7:b7:a9:ab:da:45:7b:
ae:89:9f:ef:dc:44:b4:4e:78:22:3a:13:d6:9b:af:
03:f6:a1:1b:0f:75:46:ee:bb:7b:d4:0f:b9:bb:9a:
fc:b6:a8:8a:28:04:43:66:7b:6a:9d:a3:e1:b8:65:
8c:e0:41:f7:6f:72:97:e5:a1:24:1b:cd:a5:ae:ef:
45:fe:83:2b:9c:87:f5:90:25:76:e2:f0:25:60:92:
3b:c5:29:e0:ed:31:57:1c:c5:9b:f2:6c:02:41:15:
05:8e:e8:09:e8:02:f1:24:4f:af:16:2b:38:e4:72:
b6:c0:de:be:b3:cd:87:4f:ee:6d:e1:1c:13:8f:58:
f4:54:74:c8:92:af:61:f5:1e:43:1e:86:56:5d:ef:
41:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E2:20:08:B5:7C:BE:7C:15:A7:84:55:CE:FE:1D:EB:E3:D7:31:EA
X509v3 Authority Key Identifier:
keyid:21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:24:51:46:09:0c:40:bd:01:c3:88:9d:9a:8a:49:99:52:51:
df:81:e6:9e:c1:ea:c9:26:90:b5:60:fc:30:a2:2b:c3:a9:62:
0c:b9:95:26:d9:1b:46:c9:1d:2a:3a:d9:88:2e:c6:a8:aa:93:
10:74:e0:6f:e5:96:d4:34:af:50:49:61:e4:f2:39:5e:ca:eb:
51:34:c9:dd:0d:10:72:40:a4:60:22:78:81:c4:13:ce:23:c8:
c1:e6:21:4b:cd:f7:21:bc:a2:ff:20:16:e4:c0:ad:f2:f9:cd:
6d:16:d5:06:d8:c8:db:04:af:a0:a0:fb:1f:53:b7:7c:4c:62:
74:c2:d8:31:af:db:90:26:91:ea:ab:c8:98:3c:3b:7a:2a:ae:
a6:29:3f:5c:73:9f:eb:14:24:a6:b8:85:c4:b0:01:de:af:ae:
09:ba:98:33:de:45:48:af:81:b6:e9:f1:72:e0:25:8b:f8:16:
dd:f4:72:8b:fd:18:9f:7c:04:36:a8:05:32:4d:75:cf:ce:c1:
e2:61:ae:1e:2b:6e:ff:39:67:1e:5a:28:8d:ff:98:06:17:d3:
ef:08:ba:34:92:5d:85:50:09:b9:17:7f:cb:d3:22:2b:d7:b7:
e4:c0:66:7b:90:01:fa:2c:c1:3a:ad:56:1d:31:d5:17:e6:81:
e8:2f:b0:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTlDNjIxMTAvBgNVBAUTKDIxQzhGMkI2RTAxRDBBODJEMTNDMzUxODhDM0M5M0U2
RjUxNEJBOTQwHhcNMjYwNzIxMDg0NjAyWhcNMjYwNzI4MDg0NjAyWjAYMRYwFAYD
VQQDEw02YTVmMzFjYS01MDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuBBXSauBahsWNEX4CP9Ap6TPP125MEdDxCofqdS4clhpxdvZNOhJ5g8CoiAT
94sZty3LvGxE5i0EqgbmaRATftFVbR3mggHswWflIulQq976RvibjBOAlrYG/jbj
IcXEkIg8o31Vp+m+WcSZPx1sQbe3qavaRXuuiZ/v3ES0TngiOhPWm68D9qEbD3VG
7rt71A+5u5r8tqiKKARDZntqnaPhuGWM4EH3b3KX5aEkG82lru9F/oMrnIf1kCV2
4vAlYJI7xSng7TFXHMWb8mwCQRUFjugJ6ALxJE+vFis45HK2wN6+s82HT+5t4RwT
j1j0VHTIkq9h9R5DHoZWXe9B1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEfiIAi1
fL58FaeEVc7+Hevj1zHqMB8GA1UdIwQYMBaAFCHI8rbgHQqC0Tw1GIw8k+b1FLqU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUM2Mi8wQUVBQUNENjZC
NjYxMUYwQjdGOEVCNDBDNEY5QUUwMi9JY2p5dHVBZENvTFJQRFVZakR5VDV2VVV1
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ljanl0dUFkQ29MUlBEVVlqRHlUNXZVVXVwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OUM2Mi8wQUVBQUNENjZCNjYxMUYwQjdGOEVCNDBDNEY5QUUwMi9JY2p5dHVBZENv
TFJQRFVZakR5VDV2VVV1cFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKSRRRgkMQL0Bw4idmopJmVJR34HmnsHqySaQtWD8MKIrw6liDLmVJtkbRskd
KjrZiC7GqKqTEHTgb+WW1DSvUElh5PI5XsrrUTTJ3Q0QckCkYCJ4gcQTziPIweYh
S833Ibyi/yAW5MCt8vnNbRbVBtjI2wSvoKD7H1O3fExidMLYMa/bkCaR6qvImDw7
eiqupik/XHOf6xQkpriFxLAB3q+uCbqYM95FSK+BtunxcuAli/gW3fRyi/0Yn3wE
NqgFMk11z87B4mGuHitu/zlnHloojf+YBhfT7wi6NJJdhVAJuRd/y9MiK9e35MBm
e5AB+izBOq1WHTHVF+aB6C+wuA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:08:28 2026 by rpki-client