
$ rpki-client -vvf rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft
File: iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft (raw, json)
Hash identifier: ZDGo0S8l0joqVuuxTAG/81o1K0ts6gO++5AZvUJovfY=
Subject key identifier: 2A:98:E5:F3:35:29:E1:27:55:F1:11:B3:CA:98:C1:36:54:AB:84:EF
Authority key identifier: 88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A
Certificate issuer: /CN=A91376FB/serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A
Certificate serial: 04C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft
Manifest number: 04B3
Signing time: Sun 05 Jul 2026 00:19:00 +0000
Manifest this update: Sun 05 Jul 2026 00:19:00 +0000
Manifest next update: Sun 12 Jul 2026 00:19:00 +0000
Files and hashes: 1: iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl (hash: bZ6sQp7oKoRrlI8bgGqHPx8AFxbfS20+DSVC1CqTWoM=)
2: 25C61AECB7ED11ED9CF6A63EC4F9AE02.roa (hash: VmEYppCHSqRwx3tIg4erYKUw+SWILI9kCa/xLH8LYmg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl
rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 00:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1217 (0x4c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91376FB, serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A
Validity
Not Before: Jul 5 00:19:00 2026 GMT
Not After : Jul 12 00:19:00 2026 GMT
Subject: CN=6a49a2f4-69c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c2:70:e6:5d:eb:47:0d:c8:56:45:75:40:0d:
8b:e2:b1:9d:5a:c5:94:68:9d:98:90:e2:1d:39:f1:
46:73:bf:a2:11:e4:2a:8e:42:82:e4:94:b1:d1:b6:
71:fe:8c:8c:f2:76:80:a5:6a:ab:5b:ec:c6:35:00:
92:85:5c:3d:85:26:91:03:53:f9:8a:26:c8:36:9b:
b8:c6:61:01:a8:c5:60:5d:85:b9:38:ef:a8:db:0b:
c3:b9:bb:db:6a:8c:78:0b:1d:ef:83:46:c6:81:47:
8d:65:e3:bd:ee:0c:74:9c:09:3e:f0:e9:1a:5c:c5:
70:b7:4c:75:44:cf:cf:dd:63:9c:95:8e:7d:38:bd:
2f:c0:8c:f2:12:8c:b9:83:c1:79:52:48:58:b8:78:
36:43:7c:a0:c2:17:5c:c3:67:1b:f0:fa:9c:c5:f9:
4f:68:fb:3a:df:6e:06:8c:1c:2c:65:33:42:f8:c5:
9a:45:91:ef:92:b5:e1:13:f3:e5:69:ee:95:d7:27:
a1:91:b5:3c:4e:fe:0a:30:bc:6a:6c:d5:3a:b7:4d:
45:18:c7:4e:28:00:6c:ef:74:d6:db:8c:8c:0f:2b:
70:2b:1e:8d:b3:76:01:2e:aa:ab:09:3e:6c:c8:e3:
fc:90:9e:f7:3c:96:98:9e:99:0b:3f:62:d3:5d:5b:
50:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:98:E5:F3:35:29:E1:27:55:F1:11:B3:CA:98:C1:36:54:AB:84:EF
X509v3 Authority Key Identifier:
keyid:88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e1:71:29:fd:1c:91:b2:c4:bb:37:b6:53:77:c5:a0:8f:fd:
87:15:e7:31:62:76:e5:51:2f:78:ea:80:e9:ca:52:ac:f2:79:
18:bf:60:46:65:5a:f7:16:af:d0:0d:15:c7:13:a6:bc:ba:73:
95:55:7d:f8:45:3c:b9:d4:b3:99:53:91:a4:f1:09:98:4f:6a:
59:e5:4e:63:68:93:8d:b3:6d:f0:50:38:54:db:0d:dc:79:42:
1d:0d:b8:9d:87:71:ec:a6:c4:51:5b:1c:27:1c:6d:ea:cc:b5:
e2:9d:d2:e6:a8:ba:a4:0d:63:99:95:15:88:45:73:67:63:23:
6c:b3:e9:4b:e0:5e:9b:b0:5f:77:c0:ab:64:41:05:2f:77:2f:
8e:2d:a2:f5:52:ec:9e:0e:04:8e:ca:95:75:84:c6:7a:a6:8d:
0b:8b:86:28:81:9b:db:b4:53:c3:b5:da:e3:b2:90:82:f5:f2:
28:df:11:dc:98:fd:68:fe:9b:64:74:66:11:fb:66:77:ea:24:
1c:2c:eb:1d:53:7d:66:f5:15:81:29:cc:8d:a2:9f:d4:05:65:
ac:ea:e6:8c:f5:e3:48:1c:a9:d1:97:73:0d:67:03:d5:86:53:
10:fa:ea:05:5e:fb:0c:a3:f9:57:d4:08:07:c0:33:7d:67:8f:
fe:5b:84:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 07:51:32 2026 by rpki-client