
$ rpki-client -vvf rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
File: iCJHhVdMHyPKnEOe2PVTiPamjOI.mft (raw, json)
Hash identifier: 9LaHGjRvoAmo8wR7f/Sg1sfyDUjCC1g8XnmIUlKJHd8=
Subject key identifier: 38:08:40:72:B2:72:74:67:7A:1F:1C:B1:A2:77:11:75:83:39:E5:67
Authority key identifier: 88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2
Certificate issuer: /CN=A91689B7/serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2
Certificate serial: 02D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
Manifest number: 02CE
Signing time: Wed 19 Aug 2026 01:44:26 +0000
Manifest this update: Wed 19 Aug 2026 01:44:26 +0000
Manifest next update: Wed 26 Aug 2026 01:44:26 +0000
Files and hashes: 1: iCJHhVdMHyPKnEOe2PVTiPamjOI.crl (hash: GbQmUQoTTNS7kjKF2498EOhuoXSnujgZ1NWgwpzM39o=)
2: 2455276E39B311EEA6DFE66BC4F9AE02.roa (hash: Ot9ybUKOEhuNzPb2fA0AHKITpD0tgf/ehRwyWkuwPQQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl
rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727 (0x2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91689B7, serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2
Validity
Not Before: Aug 19 01:44:26 2026 GMT
Not After : Aug 26 01:44:26 2026 GMT
Subject: CN=6a850a7a-ef0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:66:fb:ec:8e:e2:f1:4b:8f:b9:5a:f2:13:
33:f6:37:12:0c:32:fb:44:da:3f:d5:cd:d8:29:5e:
f1:b9:1e:71:cc:ba:1e:8d:13:69:4c:4d:47:82:0c:
9d:69:ef:57:c8:9b:16:79:8d:47:5c:e7:32:67:2b:
f8:84:74:2c:e1:be:d1:5a:b7:c6:91:78:d3:a7:89:
d0:64:ae:12:c0:c4:78:df:fe:a1:7a:55:13:21:be:
28:93:a6:13:8c:fb:a8:1c:8b:08:7d:4a:55:a0:bf:
ba:31:c5:ae:21:1e:ab:34:4c:22:40:30:7a:5f:df:
60:51:a6:6a:38:77:7b:94:b5:46:5f:e7:12:12:b0:
62:cb:34:62:9a:59:32:d2:22:07:8a:7f:c9:5f:bd:
1d:3e:47:63:75:70:3b:2f:5c:d0:f5:c4:60:8e:d4:
3a:3f:a8:d9:a3:4e:9f:04:0f:40:7a:eb:32:db:08:
95:ae:34:06:6c:af:42:01:37:9d:6d:6d:09:77:31:
45:56:0f:bf:48:91:b2:87:72:29:4c:11:51:e2:9c:
a3:cd:db:ad:a9:ac:de:72:6f:e1:eb:b1:5f:b9:08:
8f:37:52:53:73:a1:85:c2:3b:f9:96:d9:2b:16:25:
66:b4:a3:60:fa:4e:73:69:18:8b:ab:18:ba:91:70:
56:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:08:40:72:B2:72:74:67:7A:1F:1C:B1:A2:77:11:75:83:39:E5:67
X509v3 Authority Key Identifier:
keyid:88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:3e:bf:41:af:24:19:38:1c:1b:5e:d0:09:d7:a5:3d:07:46:
62:b8:78:9a:ee:fa:03:58:c7:ed:50:61:4b:19:20:32:77:8d:
9e:ef:4a:31:59:73:a8:dd:37:16:0c:97:07:e6:a9:a5:b5:8d:
c6:c9:92:5b:2d:df:9b:30:1f:dd:7c:f3:a5:61:fe:b3:d2:f4:
e9:cc:a6:36:a6:2b:58:2f:a0:46:12:1a:9c:2b:ab:d8:d8:c1:
95:18:21:5e:ab:7e:b7:43:ab:e9:eb:14:cd:43:84:64:fb:a5:
20:33:88:40:80:a7:01:e9:fa:c3:92:6d:cc:4f:eb:2f:a0:f0:
4c:f0:77:49:6f:4e:f8:85:11:91:51:b7:80:29:a3:25:9d:d0:
59:12:85:9e:61:12:f4:3e:86:72:df:08:51:8a:3e:5b:b8:c4:
e0:06:86:17:72:94:6c:23:f1:f2:cb:66:45:35:9f:ec:12:1f:
a6:b7:29:c8:a3:9c:1b:30:bf:55:39:d8:1e:6c:62:d3:f4:85:
4e:cd:ab:93:4e:0e:6f:13:a1:a2:73:d7:87:48:37:40:34:e4:
1c:60:33:b6:2b:27:a9:26:6c:84:cd:b9:a0:ba:7f:8b:cd:4e:
e9:4d:dc:16:e4:23:25:53:aa:fe:00:52:76:6b:01:0f:96:21:
2c:da:fd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:44 2026 by rpki-client