
$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft
File: IohtF2pzwL483ViJwqizI-O5QSw.mft (raw, json)
Hash identifier: FvBXUB7WkD8KYg6+GGvFcRXEzbEdhB+fB224fubcGIQ=
Subject key identifier: 23:9D:88:79:42:C2:23:D9:D2:E5:02:65:CE:92:A3:90:CA:2A:1E:96
Authority key identifier: 22:88:6D:17:6A:73:C0:BE:3C:DD:58:89:C2:A8:B3:23:E3:B9:41:2C
Certificate issuer: /CN=A91658EF/serialNumber=22886D176A73C0BE3CDD5889C2A8B323E3B9412C
Certificate serial: 15F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft
Manifest number: 2E49
Signing time: Tue 18 Aug 2026 16:52:55 +0000
Manifest this update: Tue 18 Aug 2026 16:52:54 +0000
Manifest next update: Tue 25 Aug 2026 16:52:54 +0000
Files and hashes: 1: IohtF2pzwL483ViJwqizI-O5QSw.crl (hash: pmbqv9BwOrl80JnnP7Eo5E1Pim/mFu8qp15wG7z58a4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.crl
rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 16:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5619 (0x15f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91658EF, serialNumber=22886D176A73C0BE3CDD5889C2A8B323E3B9412C
Validity
Not Before: Aug 18 16:52:54 2026 GMT
Not After : Aug 25 16:52:54 2026 GMT
Subject: CN=6a848de7-8843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:8b:0b:3a:85:98:00:22:73:f9:e2:9f:2d:
0d:46:94:40:04:66:f4:11:64:04:6f:cc:7a:29:88:
d6:00:0f:3b:a5:a4:ad:c0:71:28:e5:c1:25:80:e3:
83:fa:81:08:1e:72:12:21:5a:9c:f5:e8:89:51:6e:
55:0b:c3:4b:c3:04:80:fa:a1:7d:30:65:c1:fe:32:
1c:2e:b3:fc:ff:ab:4e:9b:53:1f:7f:7b:fa:a7:bf:
bc:d5:97:b6:2b:ed:16:e7:85:b0:60:90:89:9b:4b:
08:aa:d9:d8:14:1c:48:ab:6f:4d:dc:ab:97:d2:68:
6e:64:56:c8:e6:6e:d8:ac:14:b6:09:9f:70:ea:9c:
3d:c1:c7:58:c5:b8:d7:8a:2c:bf:69:78:ee:8c:b7:
6f:97:49:2f:68:3f:c4:9e:d0:9f:bc:1f:c8:c3:14:
90:10:3d:ba:1a:a2:dc:1d:8f:14:31:fa:5c:9a:92:
6c:27:3a:0f:f8:b6:48:84:46:69:9a:4f:b2:75:01:
c0:b0:23:97:60:64:13:1d:03:75:bd:36:4f:a5:81:
d0:0e:5e:09:27:aa:31:25:63:4e:d1:7e:6a:b9:f4:
2f:8a:5f:92:19:85:82:e4:83:d3:86:af:62:8e:b3:
c4:bc:c2:7e:b9:05:33:9d:0e:16:9b:e5:eb:b7:f4:
b4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9D:88:79:42:C2:23:D9:D2:E5:02:65:CE:92:A3:90:CA:2A:1E:96
X509v3 Authority Key Identifier:
keyid:22:88:6D:17:6A:73:C0:BE:3C:DD:58:89:C2:A8:B3:23:E3:B9:41:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f7:eb:57:07:87:71:35:fc:76:8f:1f:b3:35:ef:86:6e:61:
08:54:d7:f6:e9:0c:93:71:ea:25:ac:5d:48:da:e0:02:00:06:
86:a0:5b:2c:cf:e7:23:ed:a8:1b:59:5d:c6:4c:7c:2e:09:33:
62:c3:77:0a:f7:28:23:3e:42:48:3e:60:d5:c6:76:5c:0a:41:
b8:13:d1:b2:03:11:c1:90:08:31:fc:d4:2a:7c:7a:fd:33:e3:
9c:92:e3:60:63:c3:ef:04:67:3e:13:4e:79:8e:a6:57:a0:02:
2d:a0:b8:bb:21:34:a9:9f:5b:01:77:49:c8:c4:26:10:c4:da:
71:06:ab:4a:37:a8:66:46:c7:72:b7:b4:cc:74:56:21:a3:78:
20:42:9b:40:a7:17:75:a0:bd:1e:11:d1:cb:42:fe:16:a1:84:
d7:21:72:23:83:a7:14:94:69:d6:11:9f:4b:32:e8:68:8d:ad:
75:05:3c:3b:60:56:d5:0f:02:5d:be:30:72:b9:34:d0:58:44:
a3:0b:b0:9b:aa:43:b5:1b:07:6a:92:ec:e9:48:06:2d:6e:52:
74:2f:89:f3:d4:48:d4:e4:07:18:3a:55:d2:60:2c:39:45:be:
6e:ce:12:3f:d1:b6:53:56:d9:8f:71:a6:ee:bc:71:dc:d5:3f:
15:57:38:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:55 2026 by rpki-client