
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
File: IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft (raw, json)
Hash identifier: PXGHqnyoN4rWQshMO2jQGiQVlJyH/VNAxp0I4J2QX3c=
Subject key identifier: 1B:52:6A:CB:86:B2:DA:BE:BE:F2:0E:5B:27:34:EC:B3:30:2E:9E:A2
Authority key identifier: 21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6
Certificate issuer: /CN=A91159B7/serialNumber=21F20227559DB1F863849AB643233C3E935776A6
Certificate serial: 0E0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
Manifest number: 0DFD
Signing time: Tue 06 Oct 2026 17:56:59 +0000
Manifest this update: Tue 06 Oct 2026 17:56:59 +0000
Manifest next update: Tue 13 Oct 2026 17:56:59 +0000
Files and hashes: 1: IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl (hash: yGPKR/iTM6vt7tgpjC7qG+ZnL2jBVcRVDqlvUMu9CFY=)
2: 7FC0801ED4EF11EC84AABC0CC4F9AE02.roa (hash: rkIEofZev6bDtd5nBARLbA+jCza/n/hXbR4AIclPFH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl
rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 17:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3597 (0xe0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91159B7, serialNumber=21F20227559DB1F863849AB643233C3E935776A6
Validity
Not Before: Oct 6 17:56:59 2026 GMT
Not After : Oct 13 17:56:59 2026 GMT
Subject: CN=6ac5366b-3e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2d:4a:fb:11:40:bc:7b:ca:e0:48:98:be:3f:
08:df:e8:13:ae:23:e2:1d:ca:7c:ae:22:97:e4:92:
fe:93:e6:a8:20:2a:14:6d:80:01:d4:bf:45:6e:3e:
01:1f:d9:38:e3:28:cd:22:2a:c9:87:19:3c:d5:5b:
5b:73:07:7a:5f:d5:e2:5b:2d:69:8f:3e:af:d8:aa:
ae:db:1c:55:8d:51:f0:f2:06:b2:0a:09:98:b3:17:
42:b3:0e:75:e9:68:2b:61:2f:a0:43:35:53:fc:aa:
4a:56:c6:6c:b2:4b:10:c9:34:f9:e6:8e:2e:bd:ca:
6b:82:47:14:f4:6d:5c:a6:c8:d4:45:d6:ec:7c:69:
67:b9:53:7b:0b:6a:26:7e:30:f7:f3:a7:b4:c7:93:
de:1d:ac:ac:a6:70:aa:f5:e6:f9:62:22:35:04:f3:
45:d2:f4:0a:16:cf:91:64:0e:bc:81:1b:6c:46:cc:
dd:c6:8f:b0:b1:34:ce:07:52:e1:9f:20:cb:82:ec:
d5:ac:80:df:b5:ab:3a:d8:80:f4:c5:83:ef:71:ed:
16:3a:8c:6e:bb:00:15:c9:fe:88:7e:2c:d6:69:fc:
33:17:7b:3a:d2:bb:4a:25:5f:2e:ab:d4:0f:02:5d:
1e:65:85:30:e7:53:24:19:c8:2b:bd:06:5f:a9:73:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:52:6A:CB:86:B2:DA:BE:BE:F2:0E:5B:27:34:EC:B3:30:2E:9E:A2
X509v3 Authority Key Identifier:
keyid:21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:97:08:52:c2:1d:e4:8f:6f:ac:61:19:bd:df:d1:02:bb:e2:
8b:11:a4:99:ec:e4:9d:f8:fb:b5:a5:ef:89:fa:58:29:32:01:
17:e8:2a:64:cf:4c:aa:2c:a2:fd:9b:5c:38:73:78:2b:50:3a:
80:4e:21:23:12:f5:6b:86:24:9f:44:fc:b9:ae:bb:95:ec:28:
b5:6f:ba:b6:08:28:c8:55:17:e3:12:37:ec:bb:75:b2:cb:87:
67:06:99:79:b9:3e:69:a4:1b:c1:7b:cf:d4:1e:e8:e4:0f:a8:
bb:b4:3c:6b:aa:57:92:f5:86:ce:5d:75:41:08:44:50:80:77:
d4:68:d6:81:3b:5f:10:a8:9c:11:dc:09:bc:ff:b5:25:50:8a:
92:af:be:f0:7f:0e:d0:9f:bd:66:28:1c:2e:25:c1:0e:01:f5:
cc:b1:b6:e0:93:cc:d4:81:7e:0c:95:93:23:59:02:e5:4d:17:
3e:17:11:0f:34:a7:3d:d9:33:eb:b0:83:82:00:33:12:5c:04:
ed:35:a1:d8:20:62:fa:be:e7:7d:28:18:93:b7:16:b6:29:82:
64:73:a9:3b:f0:b8:9d:e2:10:86:86:ad:69:cf:ec:6c:97:26:
9b:05:e7:f3:00:e3:35:72:4c:73:3d:02:65:99:98:f4:99:cd:
ba:8f:03:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTU5QjcxMTAvBgNVBAUTKDIxRjIwMjI3NTU5REIxRjg2Mzg0OUFCNjQzMjMzQzNF
OTM1Nzc2QTYwHhcNMjYxMDA2MTc1NjU5WhcNMjYxMDEzMTc1NjU5WjAYMRYwFAYD
VQQDEw02YWM1MzY2Yi0zZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0C1K+xFAvHvK4EiYvj8I3+gTriPiHcp8riKX5JL+k+aoICoUbYAB1L9Fbj4B
H9k44yjNIirJhxk81Vtbcwd6X9XiWy1pjz6v2Kqu2xxVjVHw8gayCgmYsxdCsw51
6WgrYS+gQzVT/KpKVsZssksQyTT55o4uvcprgkcU9G1cpsjURdbsfGlnuVN7C2om
fjD386e0x5PeHayspnCq9eb5YiI1BPNF0vQKFs+RZA68gRtsRszdxo+wsTTOB1Lh
nyDLguzVrIDftas62ID0xYPvce0WOoxuuwAVyf6IfizWafwzF3s60rtKJV8uq9QP
Al0eZYUw51MkGcgrvQZfqXO1hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBtSasuG
stq+vvIOWyc07LMwLp6iMB8GA1UdIwQYMBaAFCHyAidVnbH4Y4SatkMjPD6TV3am
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTlCNy9BNEVDNTNGNkUy
QjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNmaGpoSnEyUXlNOFBwTlhk
cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lmSUNKMVdkc2ZoamhKcTJReU04UHBOWGRxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NTlCNy9BNEVDNTNGNkUyQjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNm
aGpoSnEyUXlNOFBwTlhkcVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj5cIUsId5I9vrGEZvd/RArviixGkmezknfj7taXvifpYKTIBF+gqZM9Mqiyi
/ZtcOHN4K1A6gE4hIxL1a4Ykn0T8ua67lewotW+6tggoyFUX4xI37Lt1ssuHZwaZ
ebk+aaQbwXvP1B7o5A+ou7Q8a6pXkvWGzl11QQhEUIB31GjWgTtfEKicEdwJvP+1
JVCKkq++8H8O0J+9ZigcLiXBDgH1zLG24JPM1IF+DJWTI1kC5U0XPhcRDzSnPdkz
67CDggAzElwE7TWh2CBi+r7nfSgYk7cWtimCZHOpO/C4neIQhoatac/sbJcmmwXn
8wDjNXJMcz0CZZmY9JnNuo8DdQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:07:35 2026 by rpki-client