
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
File: IkB3DhUcdBqE3pTijHUgArg5--0.mft (raw, json)
Hash identifier: rstWpONVesB91er6kGiF/qqIu9kG6PZjnwGNXAhlTrI=
Subject key identifier: C8:5A:E6:C7:82:34:69:42:CF:B4:55:8D:5C:41:63:51:40:49:08:35
Authority key identifier: 22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED
Certificate issuer: /CN=A91A665A/serialNumber=2240770E151C741A84DE94E28C752002B839FBED
Certificate serial: 0819
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
Manifest number: 080C
Signing time: Sun 14 Jun 2026 21:10:08 +0000
Manifest this update: Sun 14 Jun 2026 21:10:08 +0000
Manifest next update: Sun 21 Jun 2026 21:10:08 +0000
Files and hashes: 1: IkB3DhUcdBqE3pTijHUgArg5--0.crl (hash: Jd9Kuhvnq7YOQOWzVTVzBFALvMErPgSMrVgPIuRsBTM=)
2: 8224075A293711EB9DE16C62C4F9AE02.roa (hash: pYQQWevua0AS/DnR7jQgYAc7go0rrhJf56jb391i7kE=)
3: 05E355AEA03811EDBC101B49C4F9AE02.roa (hash: wEVKzo/06lgCcRwDbGVatHG5G3Gc2ADy2oBpbkeEK8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl
rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 21:10:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2073 (0x819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A665A, serialNumber=2240770E151C741A84DE94E28C752002B839FBED
Validity
Not Before: Jun 14 21:10:08 2026 GMT
Not After : Jun 21 21:10:08 2026 GMT
Subject: CN=6a2f18b0-a0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:4c:99:55:2f:a6:b4:ff:b0:ec:7d:01:e5:
52:9e:99:68:00:d4:9d:a4:f5:32:e4:36:74:0f:35:
53:f8:55:36:4c:ad:9f:47:23:4b:1f:25:e7:3a:83:
5b:34:f3:91:ef:0c:78:88:ed:54:80:8f:db:60:ba:
4a:0e:55:ba:35:d7:0e:c1:8b:59:04:d3:23:6e:31:
4d:fa:35:16:3a:1b:46:78:97:8b:7e:8c:7a:5e:f8:
9c:de:37:32:dd:82:28:59:89:cf:b0:cb:05:bb:75:
93:9a:16:b2:d1:22:58:16:37:9c:c6:d5:9e:85:25:
96:3b:b3:88:fa:1f:46:0b:a9:5c:30:bf:d6:d5:6b:
21:b0:f3:76:ca:e4:92:77:d5:df:2d:31:4a:57:92:
43:a9:7d:c5:9d:72:c5:0d:57:ba:1f:bc:94:25:83:
6b:cd:30:28:96:d8:d6:52:17:8c:8b:10:e3:3a:6d:
b7:17:58:a1:23:72:1b:76:23:48:73:9f:85:99:d0:
99:03:e2:7a:ed:92:b2:19:03:1d:31:aa:44:1f:aa:
29:59:e4:36:0a:03:f4:c5:60:6f:89:bf:32:81:df:
44:23:c7:31:8f:05:59:e4:34:e6:be:26:df:f9:d8:
03:10:93:fc:92:d0:b9:38:4e:c6:e7:a7:de:27:f8:
70:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5A:E6:C7:82:34:69:42:CF:B4:55:8D:5C:41:63:51:40:49:08:35
X509v3 Authority Key Identifier:
keyid:22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f6:15:ba:5a:4f:89:8f:ef:c6:77:ea:9b:54:79:db:62:97:
64:55:e0:24:93:b9:eb:98:00:ed:0d:20:79:79:c7:e0:c6:a1:
6a:ca:53:96:d0:fd:fe:38:5c:2a:64:26:67:63:15:e5:b9:68:
83:c9:13:fd:33:69:fc:2b:a4:98:88:ea:9c:cd:5e:ed:5e:d1:
16:a8:de:c1:fe:56:c9:f7:22:1e:14:45:c6:93:9f:cc:c1:2f:
ea:ec:16:06:a1:e6:c7:4c:f3:b0:0c:97:33:54:92:46:b9:53:
7e:bb:a1:d1:14:a7:7b:69:b4:6c:1e:5d:98:d7:d5:4d:af:b1:
6a:53:04:57:b7:b6:35:39:a9:77:11:79:f1:e1:62:23:2c:3c:
07:54:d7:07:28:01:15:dc:1b:0e:fe:eb:e4:68:d5:27:f7:b0:
db:f6:d2:fb:ba:f9:87:08:d9:01:ae:b3:a7:84:08:6d:7b:88:
d6:d8:bc:4a:b0:47:4d:79:d1:f9:56:de:23:6c:a4:da:71:76:
a8:86:96:f2:10:23:45:9c:47:c3:49:ca:f6:9e:78:ce:c1:77:
f8:59:5e:3b:d6:e4:f0:f8:bb:3f:5d:b2:e2:f2:ad:a5:0f:41:
d0:8e:8e:50:3f:12:f6:0d:71:ba:94:ee:b2:55:45:4b:8b:17:
58:02:49:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 13:23:43 2026 by rpki-client