
$ rpki-client -vvf rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
File: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft (raw, json)
Hash identifier: vY2UjcrWrr3o+dn+RsWrw3cDtxOBT4zy6ncPU6XfTQA=
Subject key identifier: 24:DC:EF:74:A2:93:AA:40:71:FE:03:A1:F0:E3:08:1E:7C:61:1A:49
Authority key identifier: FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6
Certificate issuer: /CN=A91820AF/serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6
Certificate serial: 0715
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
Manifest number: 070B
Signing time: Sat 04 Apr 2026 21:45:31 +0000
Manifest this update: Sat 04 Apr 2026 21:45:31 +0000
Manifest next update: Sat 11 Apr 2026 21:45:31 +0000
Files and hashes: 1: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl (hash: XYXizDUMvSZ/XIJBRsU7/tWzn0oTzFKTT5sZwOnbG7w=)
2: D4DE5FF8A01F11EC87D72549C4F9AE02.roa (hash: aA6Dw3R9kVAHSoiUlastCf/DMZ8hslWGyzDMB+ksQeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl
rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1813 (0x715)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91820AF, serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6
Validity
Not Before: Apr 4 21:45:31 2026 GMT
Not After : Apr 11 21:45:31 2026 GMT
Subject: CN=69d1867b-aa96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:82:69:9c:15:4e:a9:7e:ec:af:42:04:08:
34:d0:8c:e1:f6:87:4f:63:18:42:3e:c0:da:97:46:
7a:80:0c:5c:25:3c:b9:47:6c:60:4f:88:11:4b:ea:
77:06:08:47:ca:5b:dd:d0:99:27:4b:8e:71:1b:71:
cd:f5:a4:0e:3f:dd:55:1f:2e:88:a8:e8:a0:c1:d7:
91:ae:81:12:be:1b:25:9a:5f:9e:03:31:1f:d7:b5:
e5:b8:55:fd:7e:ff:2f:52:8e:de:65:97:0f:42:8f:
78:c8:9b:54:35:da:48:84:b0:4a:a5:77:dc:30:26:
ea:ae:05:a8:d0:28:30:63:4a:85:8d:b6:06:cb:88:
37:06:f3:2d:0b:f1:ec:4b:66:87:ba:c5:32:f9:92:
54:58:db:50:6f:4e:9e:a5:0a:42:0c:83:cd:65:06:
af:26:13:d5:c9:b2:a1:69:59:1a:ac:30:e8:59:4b:
e5:92:aa:93:30:81:15:7b:64:67:ff:7d:12:5d:29:
89:6b:db:dc:b0:c2:b0:e9:db:79:5b:05:20:8c:d3:
ea:6d:17:93:2b:82:bf:96:ab:8e:d2:84:c8:9e:1c:
25:0f:f4:ba:25:39:f1:b3:2e:a5:f3:e0:2e:6c:0d:
24:c6:94:11:2b:eb:62:57:0e:94:9d:32:0c:fa:04:
5a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DC:EF:74:A2:93:AA:40:71:FE:03:A1:F0:E3:08:1E:7C:61:1A:49
X509v3 Authority Key Identifier:
keyid:FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:31:f9:89:96:62:48:6e:a4:55:23:40:a9:ae:1e:7a:41:ee:
6c:24:15:fc:5b:1a:73:08:cd:7b:a2:f6:20:8e:b2:47:7c:ef:
c7:80:4d:62:a9:53:28:39:9f:7b:92:7e:5b:b2:cd:78:56:18:
6a:c1:81:ff:fa:b1:8b:2e:64:58:2b:94:c2:4e:78:09:3c:9c:
d0:ef:fe:01:a8:da:1c:33:2a:be:ad:10:d8:0d:a3:33:a6:75:
7b:df:86:f3:df:2f:28:3f:f0:3d:57:8e:ad:75:29:e9:62:77:
05:5a:b6:fc:f8:dd:07:cb:cb:b4:5a:e0:77:8d:77:76:d1:aa:
69:42:54:b7:01:74:b9:5a:c1:58:dd:fc:70:c0:f9:4d:70:58:
ee:01:fb:0f:a9:e3:f2:36:29:e9:93:95:d8:97:38:6d:3b:dd:
a4:04:26:d1:73:4e:0d:81:f7:a6:3f:43:1e:d2:c2:7a:c4:e4:
a3:f1:d3:9d:bb:f4:10:82:4a:4b:61:37:07:a0:a7:72:06:77:
cc:16:70:07:c5:4d:90:99:dd:28:90:dd:2d:b3:e5:ac:36:f8:
80:39:b6:7d:82:30:e7:0f:fd:b1:87:9a:2e:bb:40:20:08:9f:
8d:a9:bc:f9:7c:d5:8c:07:ba:e1:1b:0f:b2:97:4a:52:59:bc:
21:32:68:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:46 2026 by rpki-client