
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
File: IcjytuAdCoLRPDUYjDyT5vUUupQ.mft (raw, json)
Hash identifier: y5KvTNGcxx6+Sj6fiupucPrGkPkYMvQlbjC8Dmchk58=
Subject key identifier: 90:5B:A9:27:20:3A:2A:B7:3B:2B:92:2D:31:E3:75:0E:10:81:48:1A
Authority key identifier: 21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94
Certificate issuer: /CN=A91A9C62/serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94
Certificate serial: A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
Manifest number: 9D
Signing time: Thu 21 May 2026 07:30:17 +0000
Manifest this update: Thu 21 May 2026 07:30:16 +0000
Manifest next update: Thu 28 May 2026 07:30:16 +0000
Files and hashes: 1: IcjytuAdCoLRPDUYjDyT5vUUupQ.crl (hash: 3Q1D6rEOXWCWhGfT+z8AvMZZTBtDON/D3HqhQboiBOA=)
2: 08EAF5106C2111F0B46AAC57C4F9AE02.roa (hash: yNRoRcrSs2idnKKKQBvpZT7hGrIPyAJ/BqXKminAWZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl
rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9C62, serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94
Validity
Not Before: May 21 07:30:16 2026 GMT
Not After : May 28 07:30:16 2026 GMT
Subject: CN=6a0eb489-a652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d6:6c:f7:a5:e2:30:1e:b0:60:f3:a4:e2:2f:
34:f0:87:22:90:ac:81:e5:9a:0e:50:96:f5:1e:23:
b8:d3:eb:11:46:42:03:84:9a:1d:2d:1e:5f:25:7a:
54:65:24:e2:b6:db:c9:b3:02:43:0e:2a:45:a7:94:
30:3d:15:4d:34:60:f5:ad:3b:37:c3:46:1a:11:04:
a0:f4:b2:ed:8e:5e:07:51:87:59:bb:cc:55:bb:a8:
29:a9:4a:1a:ff:ce:42:39:6f:5f:97:48:4a:61:9c:
e1:0c:10:25:74:4e:9b:72:6b:a4:bb:7a:d2:c4:9f:
a0:b1:9a:82:99:d4:c5:4e:33:32:42:bb:72:01:74:
41:0a:76:2e:a4:d5:78:12:a9:bf:7a:3c:5a:d7:d4:
e0:8c:9e:41:e5:4d:c7:c8:e0:28:71:b1:5b:82:8d:
73:ea:35:e6:b2:ca:6b:e5:8d:4f:44:7c:4d:73:e6:
2c:42:9e:e1:92:15:24:fe:11:c3:bc:0d:33:3d:b3:
05:e7:8f:3b:ce:fc:2b:0f:85:5b:aa:38:af:55:11:
f7:71:da:a9:65:12:3e:8f:5b:e8:bd:4c:52:11:c3:
e0:7f:d8:33:00:85:37:db:0c:91:66:3e:31:f5:a6:
02:b0:51:6c:82:04:7e:d6:49:20:8e:22:44:71:d5:
11:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5B:A9:27:20:3A:2A:B7:3B:2B:92:2D:31:E3:75:0E:10:81:48:1A
X509v3 Authority Key Identifier:
keyid:21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ec:ec:3c:3e:83:92:14:29:f7:01:f6:d0:84:ac:87:8c:2b:
e3:00:48:e2:46:e2:aa:dc:a3:41:71:2b:b5:2b:3a:1e:08:1a:
1f:d0:f9:6a:22:1a:4d:85:eb:eb:9a:1c:91:29:f4:9c:03:b3:
9d:e7:20:17:fc:a6:d4:64:a1:59:88:76:55:41:5c:f2:88:a8:
26:ff:2b:a3:d1:07:2e:1b:dc:60:c1:7d:69:d0:ff:47:18:78:
30:9a:5a:a0:f6:b3:c8:ae:b2:46:a0:79:bf:e3:94:2a:95:05:
5b:dc:2c:ac:2f:49:c0:a0:43:bd:37:25:44:12:24:79:e4:14:
b9:50:53:50:41:68:d0:88:b2:6c:b0:cb:68:3c:d1:16:5b:1e:
3f:8b:d4:82:bf:e6:e2:34:06:eb:b4:cd:4a:da:cc:dd:2f:d0:
bf:fa:90:9c:58:fa:5d:b1:ce:90:fb:d3:11:7c:20:c6:8f:e0:
68:3a:83:f4:57:64:74:1b:d0:cb:90:16:9c:10:d5:b3:5c:9e:
62:80:da:f9:72:e6:8f:87:a4:cd:ed:23:a7:ce:7e:16:1a:25:
06:05:1b:ca:08:af:d3:32:04:cb:66:96:17:9a:2e:4a:5e:f7:
d6:41:14:21:da:89:34:4d:83:25:05:eb:3f:f5:79:cf:d2:bb:
81:0f:f9:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTlDNjIxMTAvBgNVBAUTKDIxQzhGMkI2RTAxRDBBODJEMTNDMzUxODhDM0M5M0U2
RjUxNEJBOTQwHhcNMjYwNTIxMDczMDE2WhcNMjYwNTI4MDczMDE2WjAYMRYwFAYD
VQQDEw02YTBlYjQ4OS1hNjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3tZs96XiMB6wYPOk4i808IcikKyB5ZoOUJb1HiO40+sRRkIDhJodLR5fJXpU
ZSTittvJswJDDipFp5QwPRVNNGD1rTs3w0YaEQSg9LLtjl4HUYdZu8xVu6gpqUoa
/85COW9fl0hKYZzhDBAldE6bcmuku3rSxJ+gsZqCmdTFTjMyQrtyAXRBCnYupNV4
Eqm/ejxa19TgjJ5B5U3HyOAocbFbgo1z6jXmsspr5Y1PRHxNc+YsQp7hkhUk/hHD
vA0zPbMF5487zvwrD4VbqjivVRH3cdqpZRI+j1vovUxSEcPgf9gzAIU32wyRZj4x
9aYCsFFsggR+1kkgjiJEcdURCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJBbqScg
Oiq3OyuSLTHjdQ4QgUgaMB8GA1UdIwQYMBaAFCHI8rbgHQqC0Tw1GIw8k+b1FLqU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUM2Mi8wQUVBQUNENjZC
NjYxMUYwQjdGOEVCNDBDNEY5QUUwMi9JY2p5dHVBZENvTFJQRFVZakR5VDV2VVV1
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ljanl0dUFkQ29MUlBEVVlqRHlUNXZVVXVwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OUM2Mi8wQUVBQUNENjZCNjYxMUYwQjdGOEVCNDBDNEY5QUUwMi9JY2p5dHVBZENv
TFJQRFVZakR5VDV2VVV1cFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADuzsPD6DkhQp9wH20ISsh4wr4wBI4kbiqtyjQXErtSs6HggaH9D5aiIaTYXr
65ockSn0nAOznecgF/ym1GShWYh2VUFc8oioJv8ro9EHLhvcYMF9adD/Rxh4MJpa
oPazyK6yRqB5v+OUKpUFW9wsrC9JwKBDvTclRBIkeeQUuVBTUEFo0IiybLDLaDzR
FlseP4vUgr/m4jQG67TNStrM3S/Qv/qQnFj6XbHOkPvTEXwgxo/gaDqD9FdkdBvQ
y5AWnBDVs1yeYoDa+XLmj4ekze0jp85+FholBgUbygiv0zIEy2aWF5ouSl731kEU
IdqJNE2DJQXrP/V5z9K7gQ/5xw==
-----END CERTIFICATE-----
Generated at Thu May 21 10:19:47 2026 by rpki-client