
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft
File: IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft (raw, json)
Hash identifier: qBgNEBZakvP4rz7HxAYd/Fukn525WdsAaanHzyRCoXE=
Subject key identifier: 51:56:CE:93:B9:A9:7A:B2:83:18:0B:3F:0A:F2:FB:F8:A9:17:F7:A7
Authority key identifier: 22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7
Certificate issuer: /CN=A91A42A4/serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7
Certificate serial: 025C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft
Manifest number: 0257
Signing time: Wed 19 Aug 2026 02:47:41 +0000
Manifest this update: Wed 19 Aug 2026 02:47:40 +0000
Manifest next update: Wed 26 Aug 2026 02:47:40 +0000
Files and hashes: 1: IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl (hash: PaQf9nI/NU5OGvGm42yJNRY5huGfkBeNMKaxiL2mDIw=)
2: 73E56336069E11EE9D687712C4F9AE02.roa (hash: om7Sq6Lx++CTZo3S6TXHABbbtVLGwtLuoqtkbUG/ymw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl
rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 604 (0x25c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A42A4, serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7
Validity
Not Before: Aug 19 02:47:40 2026 GMT
Not After : Aug 26 02:47:40 2026 GMT
Subject: CN=6a85194d-233f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:ba:f5:db:5a:e9:c0:51:a0:40:c5:91:ae:
af:b7:6a:62:30:0a:90:e1:e1:ce:ce:5f:12:f4:41:
1e:e7:41:38:44:04:bc:5c:33:c1:1b:f4:de:bc:b4:
86:0f:7e:5f:64:eb:41:f0:d6:53:db:12:a2:2a:1f:
cd:66:85:c8:2d:be:18:64:34:f5:d8:ab:78:c0:7b:
67:e3:7d:fd:c1:94:ad:1d:4a:73:e5:32:6c:85:93:
a7:51:e5:9c:0f:69:fc:85:6d:cf:5e:f1:7d:ae:b1:
3c:ff:eb:3d:fb:d8:26:a1:64:e6:b0:20:35:ce:47:
50:fb:f4:84:c8:6f:8b:0c:e1:50:35:b8:39:5d:fe:
f5:f3:dd:f5:af:50:4a:57:54:9f:68:fe:c9:28:b7:
2d:ee:d5:b8:41:af:8d:06:b4:76:22:98:31:77:49:
7c:2f:21:4d:c6:5c:bc:62:d2:ef:53:45:99:40:2e:
db:5d:d4:41:7a:c6:50:9b:64:84:9b:48:00:eb:6d:
3f:f1:13:70:6c:e5:e3:44:b9:f0:01:51:e9:76:e6:
25:fc:bf:89:29:94:7f:82:50:e7:57:c4:fe:6c:cd:
4e:fa:eb:5c:d5:c4:3e:5f:87:22:94:45:80:8c:cb:
00:b2:a5:03:4f:6b:e0:8e:dd:15:f1:44:e3:51:97:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:56:CE:93:B9:A9:7A:B2:83:18:0B:3F:0A:F2:FB:F8:A9:17:F7:A7
X509v3 Authority Key Identifier:
keyid:22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a9:69:86:98:79:27:76:6d:d5:be:0b:ee:b0:b2:e3:f8:c8:
6c:f6:9f:ac:3b:0e:13:77:a6:5b:6b:4e:40:c3:1f:87:dc:ef:
fd:c9:5d:5a:e0:a9:14:3a:79:3b:9d:ef:5f:1b:cc:37:52:24:
b1:a5:4e:da:a6:76:3a:05:e6:2d:88:aa:ef:11:39:f8:3d:a0:
cc:1c:f2:06:ef:7f:78:ea:21:7a:29:1e:ff:98:aa:92:9a:d7:
0c:24:d1:6a:55:8b:c5:31:eb:22:fe:d5:5a:74:28:e5:c3:25:
9a:cd:1f:0d:db:78:ad:fb:84:e9:20:c4:64:62:34:79:8e:cb:
c0:34:08:d3:f4:98:0c:ba:c9:1f:cb:97:c9:d1:44:a7:d0:12:
d2:dd:59:cd:c9:d4:ca:b9:23:ba:e0:60:bb:12:00:1d:60:5e:
74:87:0f:b0:f9:42:72:b3:fc:45:0b:92:0d:f9:b6:b6:53:63:
3b:ff:2a:b1:c3:30:66:e3:b9:b1:b6:a7:d5:54:2e:52:b1:83:
19:dd:2a:b7:ea:1d:0d:4e:6f:4b:d2:3a:9f:73:d7:6b:9d:4d:
15:d2:93:7d:3f:e1:6a:94:a3:0e:13:9b:94:44:7a:d1:c5:59:
64:0d:2c:8f:fd:17:42:ba:d2:8b:6e:01:dd:34:89:24:b9:92:
d6:72:9a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:49 2026 by rpki-client