
$ rpki-client -vvf rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
File: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft (raw, json)
Hash identifier: kXYt3pY96fEJoGXEH+Ii8Ctr/jMCiDNFZSFRoJlLq4E=
Subject key identifier: A2:F0:90:CF:CD:1E:9C:8E:57:82:20:1E:B8:33:55:5E:D0:6E:7C:90
Authority key identifier: FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6
Certificate issuer: /CN=A91820AF/serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6
Certificate serial: 075A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
Manifest number: 0750
Signing time: Tue 18 Aug 2026 22:07:22 +0000
Manifest this update: Tue 18 Aug 2026 22:07:21 +0000
Manifest next update: Tue 25 Aug 2026 22:07:21 +0000
Files and hashes: 1: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl (hash: axSp8VAEARg+jEva+Po8LfTjncaCS7OVBUDyw3Hnwh4=)
2: D4DE5FF8A01F11EC87D72549C4F9AE02.roa (hash: aA6Dw3R9kVAHSoiUlastCf/DMZ8hslWGyzDMB+ksQeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl
rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1882 (0x75a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91820AF, serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6
Validity
Not Before: Aug 18 22:07:21 2026 GMT
Not After : Aug 25 22:07:21 2026 GMT
Subject: CN=6a84d799-3fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:60:74:35:e8:df:61:88:d4:38:2c:16:e2:10:
9c:4b:58:94:8c:ca:55:3d:42:11:34:9e:39:8c:39:
52:36:7d:fe:07:c4:96:3e:18:74:b7:20:91:db:8a:
c7:5b:12:34:fb:76:4d:10:dd:f1:78:a4:d4:40:4a:
30:6f:ce:6d:b0:d4:e4:51:d1:7b:fd:0d:9a:b1:7c:
06:18:f9:19:87:b0:da:f5:19:3a:9f:7a:cb:e8:a2:
3e:e4:a7:f7:c5:a3:7c:11:9a:d2:9e:33:97:7c:67:
3a:2d:b1:d8:fb:a5:67:2e:03:92:c5:de:e0:c4:b7:
09:1f:30:1b:c2:c6:8e:80:dc:48:2f:a7:de:7c:f8:
a2:cd:90:1a:79:e7:92:6e:ec:f2:38:e7:cb:33:ab:
f1:1e:db:8b:97:83:cb:fd:f1:f7:a0:75:b0:18:27:
a2:52:ed:f5:fb:46:fd:b1:72:6b:fc:06:76:d0:ca:
8e:32:e9:ab:f6:e1:4a:c2:54:fd:25:a0:34:d6:1b:
44:78:86:9f:c9:67:ce:c8:4e:78:1b:27:95:6d:c4:
14:64:db:c3:e5:01:e3:46:d8:a9:cf:c7:ee:43:c1:
a6:61:8a:c7:c4:21:81:14:d4:99:2b:38:d8:84:7e:
f6:f5:fa:77:4b:fc:d1:9b:b7:9c:57:3f:31:d0:88:
71:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F0:90:CF:CD:1E:9C:8E:57:82:20:1E:B8:33:55:5E:D0:6E:7C:90
X509v3 Authority Key Identifier:
keyid:FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:91:c4:a1:4a:12:76:24:72:d5:7c:b8:4c:4c:cd:8f:59:01:
1f:2a:53:0d:22:71:d3:81:e8:44:fb:89:22:e7:6d:4e:a5:5c:
13:a2:f5:6d:8f:31:e7:9f:69:bb:9b:d7:89:b6:c2:61:fb:1d:
46:2c:87:d2:ea:4d:a5:b5:59:74:d4:a5:88:7c:49:91:b8:b7:
46:8b:ed:17:82:3f:7b:ff:19:f1:de:32:d6:6a:6a:51:8c:71:
ba:88:76:8d:ce:2a:b9:be:b6:58:95:f2:1d:1b:79:b1:b7:80:
d5:4b:e1:09:a4:72:25:b1:4e:38:af:2d:59:5a:4a:dc:67:23:
95:59:d9:a8:c8:17:6e:3a:b4:e4:48:d2:d2:76:fd:49:81:ca:
b9:0b:71:f6:3a:9f:66:30:f7:ec:17:54:3a:ee:0f:4d:72:97:
71:83:03:f7:ff:9d:d4:41:2c:60:4c:a8:a7:03:bf:34:2e:85:
b0:10:3c:d9:32:32:72:4a:68:f1:87:95:51:2d:d5:59:9e:4d:
2d:d0:9e:ff:35:99:6a:7e:29:38:23:0c:b8:38:50:e2:03:9e:
70:16:a7:cb:ad:1e:30:1d:44:c2:2c:e9:09:06:5d:3f:54:bb:
a5:bc:66:59:38:ce:a0:b4:ea:9b:8b:58:4c:2d:af:0c:14:58:
ad:b9:e4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:06 2026 by rpki-client