
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
File: IcjytuAdCoLRPDUYjDyT5vUUupQ.mft (raw, json)
Hash identifier: tKOhOLXWWyAZ4xo24WGBBsDLsKueg6aNLwQ08xFbEHw=
Subject key identifier: DB:61:24:2F:6F:AC:A5:7C:BB:6F:BD:65:91:7A:64:5B:4F:FB:A9:03
Authority key identifier: 21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94
Certificate issuer: /CN=A91A9C62/serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
Manifest number: 84
Signing time: Sun 05 Apr 2026 07:02:25 +0000
Manifest this update: Sun 05 Apr 2026 07:02:25 +0000
Manifest next update: Sun 12 Apr 2026 07:02:25 +0000
Files and hashes: 1: IcjytuAdCoLRPDUYjDyT5vUUupQ.crl (hash: 1e7KJ2vkh1SQ1OVEiy7SHI1iDHiVhRJdz+xZUTpzr9I=)
2: 08EAF5106C2111F0B46AAC57C4F9AE02.roa (hash: Z2FtvRw0zuR9Tn/KRZwJJwbzmRuiW6tEOkvTiYf9ZYY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl
rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9C62, serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94
Validity
Not Before: Apr 5 07:02:25 2026 GMT
Not After : Apr 12 07:02:25 2026 GMT
Subject: CN=69d20901-a359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8b:38:e7:f5:e3:f9:d3:0e:4a:33:cc:ca:b7:
8f:94:00:cb:5d:38:03:f0:6d:0f:00:c6:1e:0a:6e:
97:85:6b:fe:7c:82:3d:dc:b8:0b:2f:55:20:78:b2:
66:d6:b8:10:10:31:47:26:7c:13:9d:9b:74:2a:14:
2c:d7:d3:f5:a6:21:ea:d1:bf:f7:60:36:eb:ea:bb:
ab:88:e0:b7:4e:8f:ca:95:86:7d:45:c4:f4:c3:aa:
f0:ea:6e:75:bc:06:e8:64:49:3f:3c:bc:41:0f:c0:
0a:5b:3d:2a:a1:82:5c:64:f6:1e:90:d2:a3:30:a3:
20:38:e0:4b:d2:22:5f:a2:51:34:06:a7:91:21:b8:
ee:bd:a0:92:d1:3d:98:1c:24:f9:2d:e2:f1:0c:89:
ad:e4:d7:ad:bd:e6:86:93:d3:fd:68:b9:55:97:2d:
83:38:b9:d2:37:c6:94:6d:15:37:c2:2e:f2:ae:2e:
85:d4:03:2f:b4:56:e3:17:1e:45:82:db:4d:c6:c9:
b1:20:67:87:e7:1a:16:a8:b9:46:ba:84:37:39:17:
bc:c7:f9:e4:97:28:7c:86:12:3f:82:5a:97:dd:6d:
7a:f8:8c:c4:df:64:9b:df:c4:c2:9e:25:68:60:a8:
13:62:65:22:1a:d5:7f:3c:e8:5d:08:b8:4e:83:dd:
ee:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:61:24:2F:6F:AC:A5:7C:BB:6F:BD:65:91:7A:64:5B:4F:FB:A9:03
X509v3 Authority Key Identifier:
keyid:21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:94:bf:f1:e1:3e:40:b6:81:fb:5e:58:f9:d1:a0:31:70:e5:
7d:35:74:87:02:17:aa:f8:9c:b6:11:52:9b:1c:6b:f7:fc:eb:
0a:4a:33:53:fe:cb:6c:c2:e0:c8:76:6a:c2:ee:b5:1b:0a:54:
dd:22:37:ec:87:b1:f2:16:63:f5:16:e5:4b:95:65:c1:76:7d:
27:e6:1d:f6:37:e3:5b:8d:9e:70:2a:40:5c:9c:c4:83:bd:4d:
93:a0:ec:2c:b4:e8:ff:79:bd:d8:ce:8c:42:60:ba:6c:9f:39:
94:02:19:e6:02:16:1b:78:43:54:4d:48:43:57:ef:a1:80:e4:
b2:2b:76:35:69:6f:bc:40:59:75:80:8e:57:c9:f3:5c:cf:87:
55:90:0d:a4:8c:c4:13:cf:73:7f:5e:db:3d:51:38:ce:6e:ec:
85:5a:cd:72:d3:bd:73:c7:3e:50:f1:89:a3:d3:af:a1:34:2c:
51:db:93:66:cb:c2:88:a7:24:09:68:21:dd:c1:80:bf:4b:1b:
d2:1f:8c:ec:b6:5e:ef:21:dd:41:1d:1f:a7:cc:e2:f5:e5:22:
2f:aa:29:76:de:26:02:9e:6f:6b:2a:bd:56:73:17:44:4e:a4:
7e:33:25:53:94:e7:87:8d:81:97:74:38:e5:33:73:4a:27:22:
a5:da:04:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:55 2026 by rpki-client