
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json)
Hash identifier: YMPjNK5pZMHa0pXSEmhsmDAEIH0qp+XpRXoEdpx9mso=
Subject key identifier: 0D:75:2C:99:1E:B6:BC:81:72:ED:F7:B7:8A:A1:F9:34:25:63:81:61
Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7
Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7
Certificate serial: 02A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
Manifest number: 0293
Signing time: Sat 23 May 2026 01:46:37 +0000
Manifest this update: Sat 23 May 2026 01:46:36 +0000
Manifest next update: Sat 30 May 2026 01:46:36 +0000
Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: mfVQPAhFQHwOFifXQqLyOFwgOFIKBQUUS/EHGRzrvkI=)
2: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: UWH1x8giA5CUDbuKn5hiEaz+aWmWPo/dG0Iot9P77PQ=)
3: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: Unh6vvgI1wlU5PdNLje9/sZrH6mvqXrjcdflctfvmwM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl
rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 01:46:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675 (0x2a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7
Validity
Not Before: May 23 01:46:36 2026 GMT
Not After : May 30 01:46:36 2026 GMT
Subject: CN=6a1106fd-61a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c4:d0:b4:08:b1:20:bd:a6:8f:f7:bf:ea:96:
bb:e7:9b:28:01:49:fd:90:80:63:b1:82:64:2d:25:
aa:75:ae:c9:72:34:86:d9:a4:15:de:0a:c2:fb:e4:
6a:b1:40:c9:51:2b:b3:63:2e:1f:ae:a3:3e:18:10:
9d:e5:48:40:11:a9:b3:98:fc:01:a4:b5:45:c3:d3:
83:2a:74:87:4c:6c:4f:a0:de:f2:07:75:c6:f5:64:
4e:ad:f6:ab:a5:5d:d5:a3:18:90:e1:96:33:f5:9a:
8e:89:b9:84:ce:6c:ae:29:e0:60:49:ed:f5:87:94:
2b:35:91:95:7e:db:ba:d5:c6:a2:fe:cb:56:c7:0d:
56:52:4f:96:97:e5:04:53:b3:21:e0:d0:cf:a9:34:
5d:bf:88:e0:e7:36:63:a3:5c:5d:d9:3c:d6:49:08:
9f:42:f7:28:f3:1c:e6:e3:9e:c7:13:7c:47:85:6e:
df:1b:c1:b1:63:42:ab:1e:5c:d3:cd:6c:fc:e3:19:
64:20:0b:43:86:7e:27:82:3b:3a:36:d8:b1:40:51:
1c:d5:4f:90:9b:e8:fd:76:da:19:ce:5a:aa:cc:75:
7e:27:fb:23:84:aa:ec:4d:fd:47:90:5a:f6:4b:f2:
3d:35:c6:af:36:7a:e2:12:06:34:06:c0:c7:77:62:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:75:2C:99:1E:B6:BC:81:72:ED:F7:B7:8A:A1:F9:34:25:63:81:61
X509v3 Authority Key Identifier:
keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:b4:e4:c7:07:47:b1:c4:b1:61:26:75:93:6b:af:0d:f7:9b:
4b:cb:51:c7:cf:6b:1c:fa:f8:80:8b:64:b1:e9:fc:b0:8b:57:
a7:be:7e:b4:6e:96:ff:03:8d:8a:0b:4e:ea:56:5b:3b:bb:88:
f8:67:81:1e:ae:89:da:ce:e5:ef:41:ce:6e:9c:8d:24:7b:2c:
a9:19:fb:62:a8:ae:89:57:b7:f9:74:01:61:0d:30:1d:4d:01:
3d:2e:75:22:01:15:74:55:63:e9:7f:5c:ad:18:77:fb:97:56:
15:d2:08:43:92:d3:b1:ae:b9:01:1f:a2:36:a5:a9:8a:7a:8f:
7b:0b:32:b3:cc:32:38:16:ca:28:f2:76:37:6a:45:f6:f2:76:
73:99:4c:cf:35:da:b2:d6:63:60:cb:4d:32:32:da:a4:f1:26:
dc:88:22:0b:1f:5b:60:d0:c0:41:ab:e9:b9:1c:d6:c2:0c:8e:
d4:34:71:a2:b3:60:4e:6d:eb:57:06:14:11:b4:9e:b6:65:d7:
fa:69:4a:7c:b6:00:34:91:69:0d:88:18:94:8e:c9:cf:9a:7f:
e6:cd:05:ea:2a:ae:be:53:9b:0d:fe:05:d5:27:27:85:19:61:
49:b1:7d:64:39:c9:7a:eb:a6:ca:2a:33:e6:81:45:95:c6:27:
af:77:4f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:37:56 2026 by rpki-client