
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
File: I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft (raw, json)
Hash identifier: ZYJ6seXrANmeZamVN98S4Y7f1Ik7XF5NAx2+pbQ5lTY=
Subject key identifier: CC:16:AC:07:C7:BA:E3:E8:9E:0E:56:93:7B:2D:64:4E:E0:B4:ED:8B
Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17
Certificate issuer: /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
Manifest number: 0196
Signing time: Fri 09 Oct 2026 04:57:59 +0000
Manifest this update: Fri 09 Oct 2026 04:57:59 +0000
Manifest next update: Fri 16 Oct 2026 04:57:59 +0000
Files and hashes: 1: I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl (hash: L9i2yWQJPdQ5DtYjCS5F4NEqBuRXntUSavfRyVfGANU=)
2: 43A05F96ABF111F0AF8F880CC4F9AE02.roa (hash: EDFQEdiEmOIwcAFLSsj8eYAZyjqk/sVRS9qA9gJE9Ok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl
rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 04:57:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91122B3, serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
Validity
Not Before: Oct 9 04:57:59 2026 GMT
Not After : Oct 16 04:57:59 2026 GMT
Subject: CN=6ac87457-0028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:f4:2a:62:8c:04:ec:ba:82:35:a6:0f:b1:
2c:05:d9:2e:e1:84:38:d8:51:b4:4e:d3:08:a5:29:
47:6b:51:4f:98:1c:39:25:6d:97:1d:3b:26:3e:b3:
1b:37:96:5e:6e:80:56:39:9e:f8:3d:fd:3a:e3:d4:
8b:c5:58:9a:72:8d:32:9c:15:73:83:3d:1a:a3:bb:
93:13:5e:ec:5d:4a:58:8c:35:30:8f:00:24:36:12:
83:cf:df:3c:75:0c:7d:52:37:86:cb:1c:c9:c2:ac:
d0:f7:ee:4d:36:3d:89:6b:84:41:52:b2:d6:e9:dc:
17:f1:bd:ea:9e:67:7d:1c:1b:a6:1f:d0:fe:8b:b0:
ac:c3:93:7c:bf:e9:3a:66:07:47:b4:df:0c:64:6e:
95:67:d8:12:48:e6:66:46:53:f5:91:32:3b:06:d4:
59:00:ab:00:69:71:ed:23:f7:e7:d0:2c:3e:50:b5:
bd:2c:8b:69:4c:5f:2e:21:41:c9:60:1a:b4:b1:95:
d7:fb:2d:b1:bc:8f:1d:1f:0b:88:7d:7f:c8:a1:ef:
78:97:19:cf:a7:a8:31:50:7e:f2:5a:ee:59:74:e9:
0b:af:96:5b:50:52:74:b8:c5:f7:b6:ec:0f:87:06:
07:85:3c:4e:3a:e6:79:bb:7a:5d:1f:14:8b:20:c5:
2e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:16:AC:07:C7:BA:E3:E8:9E:0E:56:93:7B:2D:64:4E:E0:B4:ED:8B
X509v3 Authority Key Identifier:
keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:99:5c:52:5f:e2:e0:bb:c4:79:60:f7:4c:48:0c:f3:4c:22:
7c:47:a3:5a:d3:e4:9f:c7:30:30:c9:60:de:7e:26:34:61:a3:
91:d9:64:ec:95:2d:ca:41:7d:06:12:04:2b:15:56:5a:4a:1b:
b7:39:47:25:19:63:d5:19:31:5b:8e:31:b5:dd:4e:15:81:1f:
85:5a:8e:cf:eb:7e:ac:d5:e2:7d:49:a7:5c:48:f2:f2:51:64:
cd:ed:25:5c:ff:74:a1:24:68:f5:db:a0:04:70:95:2e:c1:f0:
e7:f3:c2:dc:53:2f:17:ee:cb:39:ab:2b:24:dd:b3:0b:e1:b4:
de:a4:66:de:b7:c7:4a:a5:f3:5f:5e:8a:d4:04:5f:15:4f:ef:
5c:c1:b4:f4:89:6a:09:88:ed:c2:6a:48:dd:fa:d1:24:a2:39:
0b:18:23:ce:36:dd:6e:bf:14:d2:ee:1e:e4:79:c3:84:0b:66:
01:74:76:74:04:a0:ea:ea:05:c1:c3:bc:7d:0f:0c:1e:cc:73:
48:57:91:70:63:55:50:1a:fa:fc:66:25:c0:4c:a1:3a:22:95:
1b:ec:a6:89:e6:b7:9c:ed:f9:e9:51:79:29:a1:ae:98:ff:b2:
5b:e5:60:ef:29:14:ee:21:09:39:b9:74:38:3c:86:d7:13:a2:
56:df:68:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:49:26 2026 by rpki-client