
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
File: I8MbHNaMzE0c6105mlAbYFD9HUY.mft (raw, json)
Hash identifier: iU2R/aPA8/RlJYr/7KZpP/f4UnIPcPkuWux/gNaWbeg=
Subject key identifier: 6B:C6:79:66:0A:C0:CB:BC:B9:46:FC:AB:6F:30:D3:DE:61:C8:04:DF
Authority key identifier: 23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46
Certificate issuer: /CN=A91A0FC0/serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46
Certificate serial: 0479
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
Manifest number: 0604
Signing time: Tue 23 Jun 2026 00:09:35 +0000
Manifest this update: Tue 23 Jun 2026 00:09:35 +0000
Manifest next update: Tue 30 Jun 2026 00:09:35 +0000
Files and hashes: 1: I8MbHNaMzE0c6105mlAbYFD9HUY.crl (hash: JNyyPSPeJTpxGi8jGEQR2KHbym+9RwvCY6jTil4hmdQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl
rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 00:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1145 (0x479)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0FC0, serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46
Validity
Not Before: Jun 23 00:09:35 2026 GMT
Not After : Jun 30 00:09:35 2026 GMT
Subject: CN=6a39cebf-2405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f1:6e:06:cd:b6:ec:10:d0:fd:06:97:dc:ba:
de:79:4f:7b:25:32:08:1b:3b:de:f0:74:1f:e6:ef:
58:3f:f7:f5:71:d0:6c:97:77:03:a3:86:06:e1:51:
8e:c8:80:d3:b6:d1:62:1d:fd:01:06:b8:47:2d:e2:
0c:19:51:6d:e8:59:1b:07:a4:8c:36:4b:e2:7a:ee:
43:b5:09:a2:d8:b1:db:b9:92:17:c0:5c:c0:b5:7e:
14:5a:f6:c2:a8:31:d2:9b:c0:79:85:d2:a5:7e:2a:
a5:0c:43:de:34:d2:2e:41:dc:1c:21:44:91:5a:bb:
17:20:1b:5b:d1:dc:97:6b:e1:fe:79:4f:c7:b5:5c:
78:b7:b6:7f:fd:f1:8e:85:1c:ce:f8:6a:77:40:27:
8d:6a:d9:05:b5:da:3b:09:2b:95:0c:ed:c4:09:7b:
a0:9c:ba:ed:ea:2b:cd:3b:8b:3d:32:bf:6f:20:68:
ba:fb:67:96:83:d7:12:75:36:61:a8:8d:e6:55:c1:
78:bf:b6:de:62:9c:15:5b:af:27:04:07:0c:bb:2c:
64:60:2b:82:32:c9:ba:81:b5:27:c9:5b:11:fe:9a:
75:ec:43:fc:82:c2:ad:b6:80:15:da:1d:8e:d0:8d:
a1:75:93:9b:b5:a5:9b:4f:46:a3:35:33:b5:fb:40:
81:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C6:79:66:0A:C0:CB:BC:B9:46:FC:AB:6F:30:D3:DE:61:C8:04:DF
X509v3 Authority Key Identifier:
keyid:23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:58:b6:c0:d7:3f:ec:2d:a4:35:3b:41:2e:e4:31:4b:ae:4c:
61:21:28:33:ba:f6:8e:d6:b7:4d:b7:d4:49:5b:2f:73:76:d9:
b4:6f:b0:b6:c4:17:e3:3a:a5:49:f1:27:5f:1a:ae:2c:36:9a:
54:9f:03:c0:17:ed:62:db:05:19:ce:67:18:0e:b4:82:11:ca:
12:3d:c1:5b:98:2a:a8:e5:07:c0:12:ac:5f:8e:28:6a:12:09:
7f:8f:8b:a2:c9:18:83:ad:e8:12:97:46:56:4e:ef:37:a4:7b:
03:aa:a8:be:c9:1d:0e:6c:f0:02:6f:aa:57:06:4a:87:98:39:
54:4c:43:57:3e:7a:d5:6b:af:3a:89:5a:59:13:25:4f:c5:6b:
f4:b7:ab:a4:89:fe:71:9f:87:8e:c1:c6:2e:ca:4c:3d:b7:d8:
a8:af:20:22:da:5e:87:67:7a:83:77:02:18:86:04:64:6a:d0:
a7:1d:43:e6:6b:8e:e2:aa:39:9b:69:de:d9:7c:ea:2f:52:08:
d8:9c:13:b2:4a:7b:e6:72:dc:32:e0:0f:57:52:a6:fd:48:f8:
4a:43:7e:fe:43:00:4f:1c:bd:89:80:bc:a6:97:f4:64:69:68:
23:48:1a:82:fc:4e:2f:fd:17:c8:cb:7d:5f:2f:4f:88:b1:de:
e7:e0:7e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:14:15 2026 by rpki-client