
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft
File: iEiqzfKVEwPnCY9BnYygBCKJDGk.mft (raw, json)
Hash identifier: 8+6nppMdbPhWehfIINDQxitNoIEtPDjiDCT4C1rzQ3s=
Subject key identifier: F4:E2:20:2E:1B:40:FE:50:7A:10:04:A0:AB:CA:4B:13:C8:C4:A0:E8
Authority key identifier: 88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69
Certificate issuer: /CN=A91A8047/serialNumber=8848AACDF2951303E7098F419D8CA00422890C69
Certificate serial: 013E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft
Manifest number: 012D
Signing time: Thu 21 May 2026 05:48:20 +0000
Manifest this update: Thu 21 May 2026 05:48:20 +0000
Manifest next update: Thu 28 May 2026 05:48:20 +0000
Files and hashes: 1: iEiqzfKVEwPnCY9BnYygBCKJDGk.crl (hash: 2fsNtzG9dmCSSZ/6IuYdi3xUE4pIq9Ank22IHdgYsks=)
2: 07BAAB7C9B1611EFB5C28465C4F9AE02.roa (hash: 56jPZ3sozg97+OIj6pG3u2XuGIaHvsmkzxKJ4TjEACM=)
3: 029310329B1911EFA0BD6470C4F9AE02.roa (hash: sF4XH0IQ21oQ8m5K9x+3vDfpTIdkfnTIhVS8Hca4fYI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl
rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 05:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318 (0x13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8047, serialNumber=8848AACDF2951303E7098F419D8CA00422890C69
Validity
Not Before: May 21 05:48:20 2026 GMT
Not After : May 28 05:48:20 2026 GMT
Subject: CN=6a0e9ca4-60fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:d1:3f:c2:e2:9e:e2:89:ff:7f:72:2f:c3:
6f:eb:bb:7d:0b:c1:58:9d:9f:72:be:a6:da:63:c2:
34:a2:dd:fa:82:6e:ac:46:14:43:3e:f8:e1:f8:da:
07:f6:9d:5e:42:45:27:64:28:cd:1b:4c:73:b5:7a:
d4:5f:f8:10:e0:50:7e:99:b8:11:07:a8:d3:36:c4:
87:3b:bc:0d:bb:fe:05:fd:25:4b:b5:24:b0:80:75:
03:f1:6e:3a:8a:71:c2:14:f1:01:4b:ef:1b:b1:95:
04:a0:7e:a4:04:e7:1d:49:cb:f3:e8:0f:1e:b6:99:
b5:01:92:7c:62:5b:db:76:4c:b9:fc:d0:12:15:58:
5b:cd:90:55:fe:b6:b7:39:83:0d:cb:ae:96:1a:a0:
60:4c:23:c7:76:ad:50:9e:1e:a6:28:dc:d2:77:98:
44:30:9e:f6:16:19:35:45:6b:16:9a:95:25:f7:23:
b8:bf:0a:1f:86:1a:16:6e:14:07:5c:45:50:61:34:
a1:2b:9a:4d:1d:44:85:86:1d:56:51:52:1b:14:2d:
ca:d7:3f:f7:76:24:9a:4a:db:13:e5:db:5a:ae:19:
ba:2a:6f:40:c2:1f:01:fd:73:3b:4f:b4:40:96:1f:
cd:a3:12:1d:74:39:c6:00:4b:1f:3d:5f:01:1b:00:
3c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E2:20:2E:1B:40:FE:50:7A:10:04:A0:AB:CA:4B:13:C8:C4:A0:E8
X509v3 Authority Key Identifier:
keyid:88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:68:fb:a7:14:e4:96:cd:dd:e4:aa:a0:94:4e:d0:20:42:5e:
f1:0d:cd:b3:39:e8:b3:35:ae:cc:84:ab:40:68:7e:13:d5:41:
a9:fc:df:8c:0a:92:f0:af:eb:6e:77:dc:01:55:86:89:9a:08:
10:92:08:37:be:80:e8:b0:fa:15:ec:7b:80:b7:fa:0e:00:db:
b2:12:14:e0:c1:b1:c6:2e:1b:32:8e:ce:07:81:f2:bd:9a:8c:
ea:64:15:22:30:ff:1a:66:02:1d:80:ea:61:e2:ad:e4:e6:a9:
ec:be:b0:26:8e:f6:b1:7b:c7:bb:62:ac:15:ef:d5:d6:71:8c:
c6:d8:8a:a4:e5:5f:75:ea:c9:f5:de:30:57:27:d3:3e:4b:10:
da:de:18:eb:f9:3a:91:5e:7c:69:a7:32:46:41:54:c5:e3:ba:
18:90:ed:6e:d5:e3:23:99:59:6f:d8:08:9b:42:9d:1c:03:0c:
01:e2:89:02:b3:6e:53:d1:5c:1b:ba:7c:30:95:1b:43:53:35:
9c:8a:be:46:bc:20:7e:86:c5:42:40:c0:fe:af:4e:a5:c1:96:
30:f8:22:cf:b3:19:81:ea:34:30:2b:b7:e9:9d:f8:6f:df:28:
7a:25:f5:f9:e1:4c:fd:50:46:bb:12:cf:f8:ea:b2:56:40:3b:
b9:64:0e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:28:38 2026 by rpki-client