
$ rpki-client -vvf rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
File: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft (raw, json)
Hash identifier: f3/NCDKSvRQBsWJ2+4jgXUhgeO5UCIiEOeuCZZvcIuY=
Subject key identifier: 92:80:F5:C7:EC:3E:DF:2A:E0:4C:24:43:3D:21:41:A0:6F:B5:52:CF
Authority key identifier: FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6
Certificate issuer: /CN=A91820AF/serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6
Certificate serial: 072C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
Manifest number: 0722
Signing time: Wed 20 May 2026 21:56:20 +0000
Manifest this update: Wed 20 May 2026 21:56:19 +0000
Manifest next update: Wed 27 May 2026 21:56:19 +0000
Files and hashes: 1: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl (hash: LUAdkJzzcxWIxHqdw1ZIOnm0LnAuEhuJkibFkROjufg=)
2: D4DE5FF8A01F11EC87D72549C4F9AE02.roa (hash: aA6Dw3R9kVAHSoiUlastCf/DMZ8hslWGyzDMB+ksQeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl
rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:56:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1836 (0x72c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91820AF, serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6
Validity
Not Before: May 20 21:56:19 2026 GMT
Not After : May 27 21:56:19 2026 GMT
Subject: CN=6a0e2e03-7073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b2:c9:0a:1c:78:6e:20:2b:52:76:1a:12:4e:
14:3d:d5:3a:8a:60:e7:d6:fe:59:a9:f1:eb:aa:97:
96:dd:1c:0a:90:8d:ce:0d:10:b9:7b:49:f4:53:72:
b7:a1:17:5c:8d:11:1a:ef:82:56:f7:ca:43:2a:90:
bf:29:ad:95:a5:7f:cc:f8:7b:cd:4d:52:19:38:01:
3a:35:d9:9f:27:b9:5a:2a:9d:a8:62:4d:45:54:5e:
51:64:22:cd:56:44:26:ff:20:b2:da:a2:b1:ce:28:
a3:66:91:13:ee:fb:1e:d5:f8:ed:59:ee:ca:7f:9a:
e6:59:61:f5:5f:9a:76:b8:8f:5a:5f:cd:84:d8:ae:
b4:e4:63:4a:7a:5c:de:66:8a:dc:f6:53:61:ad:13:
33:fc:44:bd:72:76:d6:8c:0b:cf:e0:1c:79:34:86:
11:b9:d2:03:a5:08:52:04:19:97:ad:17:a8:eb:6b:
7a:61:a7:53:50:69:bb:a2:6b:cf:e3:a8:55:22:d4:
eb:20:03:53:61:65:93:67:e8:c5:b6:4e:80:00:76:
21:e2:a5:10:be:f9:b9:02:4d:72:27:48:a3:50:10:
86:f9:21:17:2d:5f:8b:40:c9:1f:d6:5e:30:1e:99:
5d:22:bf:ae:ba:be:39:70:99:a5:dd:72:3b:de:9f:
2f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:80:F5:C7:EC:3E:DF:2A:E0:4C:24:43:3D:21:41:A0:6F:B5:52:CF
X509v3 Authority Key Identifier:
keyid:FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:b0:00:b3:4a:ea:47:eb:76:75:00:92:98:c4:af:4c:b8:32:
4a:a2:91:28:78:cb:df:d7:cb:b0:e7:f5:59:39:ab:9f:62:d1:
1e:68:56:bc:d2:cc:e2:19:14:77:46:13:f4:23:29:32:64:20:
ac:8f:31:28:99:5d:27:ad:92:6c:ea:e4:6f:ee:46:b7:d5:b2:
0d:53:af:a0:6f:42:44:41:03:32:7b:e4:43:06:1e:35:e1:f0:
5a:0a:74:e9:3b:9c:be:c5:54:f3:2f:d1:6f:70:e6:00:18:d4:
22:82:e4:8d:1b:0f:3b:cf:0f:61:59:47:b0:e2:e9:8c:2e:0b:
f8:73:b6:ba:c2:3d:3f:53:46:bd:be:a8:46:2c:b6:cc:f1:ac:
de:c3:b8:fb:1b:e2:ae:19:2f:a9:63:bd:2b:62:1c:20:7a:69:
c8:2e:72:54:ab:ab:91:cb:11:31:e8:6f:0a:ea:de:0d:87:7d:
86:46:51:b3:ac:48:ff:f9:ad:78:60:95:3d:95:c5:33:07:db:
df:8f:8b:31:8c:cb:99:bb:83:6a:5c:39:01:c6:34:ee:19:97:
6c:28:9f:32:6b:ce:0e:e1:09:58:24:f3:0f:88:29:59:61:46:
0a:e7:f1:29:d7:77:d2:2e:71:49:89:3a:a7:db:50:91:e5:a6:
6a:58:60:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:20:22 2026 by rpki-client