
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft
File: iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft (raw, json)
Hash identifier: Wg/aAu+sfD3XB9B9+HIwHINtVGKUcYqVzuT8f/kQCVk=
Subject key identifier: A0:93:C4:85:93:4F:2A:BD:97:3D:BA:91:E7:8E:AC:A2:F9:3A:A1:EA
Authority key identifier: 88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A
Certificate issuer: /CN=A91376FB/serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A
Certificate serial: 04F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft
Manifest number: 04E3
Signing time: Sat 03 Oct 2026 00:04:42 +0000
Manifest this update: Sat 03 Oct 2026 00:04:42 +0000
Manifest next update: Sat 10 Oct 2026 00:04:42 +0000
Files and hashes: 1: iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl (hash: Eu/ko/CpdCp/3RY2mblpwWRdBWh3cWGJS/R0hDLP5uk=)
2: 25C61AECB7ED11ED9CF6A63EC4F9AE02.roa (hash: 8tfqD+unXuAbv+bVv6zO4sePkmiq8lznMwY5d3M/IHk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl
rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 00:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1266 (0x4f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91376FB, serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A
Validity
Not Before: Oct 3 00:04:42 2026 GMT
Not After : Oct 10 00:04:42 2026 GMT
Subject: CN=6ac0469a-b0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:7f:f6:5b:e9:c7:aa:15:c2:7e:b6:65:9a:
41:22:b9:f9:d2:c2:54:b6:0d:f2:4a:09:f1:e5:82:
c2:36:04:c4:d8:1f:d9:80:18:26:7b:3e:02:91:03:
29:a0:ee:61:00:5c:7e:52:f5:9d:d3:be:17:53:df:
a1:8d:9f:1a:e6:24:ae:b3:fd:08:e7:06:fa:38:b1:
e3:97:28:02:f2:be:15:d4:cb:ea:f6:5f:7f:a3:b2:
ce:8c:2d:32:56:9a:41:15:88:90:ba:63:9f:07:d2:
ef:b8:bf:06:02:7f:47:b0:a8:5a:b4:1e:b6:73:90:
38:1d:06:70:e0:cf:78:0d:54:3d:34:cb:66:db:49:
0d:ee:6b:68:29:dd:ae:e5:59:79:76:10:e2:db:07:
2e:76:ad:c8:24:b2:a8:d6:77:31:b1:26:29:9a:0f:
86:ee:30:3e:92:5b:7a:f7:b0:00:5c:39:1f:03:b7:
9e:98:21:b5:c1:2d:ac:7d:4b:ed:93:50:ce:3d:ae:
8b:77:2e:eb:3d:e4:11:c8:bb:56:08:d9:72:2d:aa:
a9:b1:24:33:11:bd:f9:c8:9e:3f:1c:ee:33:46:96:
9b:92:31:8b:c6:3f:fc:72:7f:26:c7:a7:5c:c7:2e:
12:2f:29:65:80:a9:36:8f:36:76:17:10:22:cb:bb:
02:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:93:C4:85:93:4F:2A:BD:97:3D:BA:91:E7:8E:AC:A2:F9:3A:A1:EA
X509v3 Authority Key Identifier:
keyid:88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:25:a2:8a:61:f5:a2:54:12:82:8c:f4:e2:6b:c3:92:19:06:
c9:49:c1:e5:d8:70:b9:3d:13:6d:74:9f:97:74:a0:69:9f:b1:
89:fa:45:cd:aa:7c:ec:7f:d1:fb:fc:ca:05:30:16:b9:b2:d2:
08:e2:de:45:0d:69:da:c7:0b:a6:7b:c6:88:8e:c2:e5:96:50:
3a:a5:ad:e6:b1:9f:71:79:ea:df:2b:1e:8c:30:6e:bc:b1:5d:
d2:9e:54:6e:b1:07:81:c7:99:cf:d8:c0:8a:44:ac:fd:74:5a:
29:81:ac:95:86:1a:9e:99:75:ba:07:3e:8b:c3:6a:26:0a:dc:
56:3f:b6:f1:e2:b2:87:76:db:e7:cf:45:f9:5b:42:cf:f3:a4:
3b:68:83:3d:05:70:16:04:f3:08:45:48:f3:b3:d5:39:c7:2a:
22:87:1c:a3:21:99:08:a4:b0:b6:c1:4f:3d:62:dc:41:e2:a5:
3f:44:73:54:34:b0:ae:81:13:1c:27:17:75:19:0f:f8:3a:b6:
28:a5:26:d4:4a:9f:dd:dc:b5:7f:c3:a8:98:5e:14:7d:e4:27:
98:61:dd:57:4a:43:bb:ac:b4:ca:3b:ec:50:40:ad:cf:49:ad:
f4:34:dc:e9:f5:2f:5c:30:42:9f:df:9c:1e:4c:d5:c7:52:8e:
8e:cd:df:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:38:23 2026 by rpki-client