
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json)
Hash identifier: e2gaUnYmlsnGQ/EbMEGA0WGVU4xDsWmzd024gO94P9I=
Subject key identifier: 41:35:C1:11:66:FB:68:B3:33:D3:56:37:E9:94:21:18:44:B7:5A:A5
Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7
Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7
Certificate serial: 02BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
Manifest number: 02AB
Signing time: Tue 07 Jul 2026 02:21:06 +0000
Manifest this update: Tue 07 Jul 2026 02:21:06 +0000
Manifest next update: Tue 14 Jul 2026 02:21:06 +0000
Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: v3X4ckN5wWhB3Pf7a2+DAP45MlchmkDK9EOt35thVvw=)
2: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: 63Mc6PfxkqkDwQtpOI9U8lomk1Cxh7mzQMzSOn5gi4U=)
3: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: 0C9mx4bIr2S3KsrxXmmh+6ZkoQeTAaGyUsfLf68eqPo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl
rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 02:21:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 701 (0x2bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7
Validity
Not Before: Jul 7 02:21:06 2026 GMT
Not After : Jul 14 02:21:06 2026 GMT
Subject: CN=6a4c6292-6e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:06:4d:a5:d4:82:1f:07:49:5d:d9:03:b2:19:
0a:84:ea:48:49:1a:54:e3:14:68:09:a2:93:e2:46:
1d:c9:4e:4d:10:03:37:f2:83:6a:34:08:6e:36:14:
71:c3:82:03:f9:e8:22:2f:14:5b:a3:a3:86:ad:35:
e3:ee:95:03:16:9a:a0:9c:1a:22:7b:9f:8a:ef:3b:
f9:b7:62:16:86:c3:22:0a:e4:8c:21:c2:f1:42:01:
ef:e1:25:f4:39:f5:32:ea:cc:16:1b:a1:cc:27:46:
8b:ad:82:21:26:98:d9:25:1a:2d:13:f6:cf:f9:14:
f1:9a:f4:fb:0a:c8:b3:f2:3d:f2:21:99:b8:ad:2e:
e5:c9:93:f6:1c:9a:a0:7d:a1:fc:03:9b:5d:89:88:
2c:30:55:fb:3a:27:09:0c:bb:da:b4:5e:3c:81:f6:
5c:ac:5b:70:1e:20:34:e6:54:11:c0:97:39:10:ef:
04:57:0d:af:a8:c6:25:a5:29:67:f1:f1:bb:4f:cb:
b9:42:c8:4d:34:d5:31:fd:63:ee:6d:9e:eb:ca:25:
c4:df:8a:00:4f:63:52:a9:c8:37:44:ad:e7:f3:2a:
92:77:e6:9f:67:09:f9:e6:b5:c9:93:b9:75:3a:26:
13:66:56:05:4f:22:7f:15:25:33:e3:3d:6c:14:64:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:35:C1:11:66:FB:68:B3:33:D3:56:37:E9:94:21:18:44:B7:5A:A5
X509v3 Authority Key Identifier:
keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:6c:ff:79:b2:54:4d:50:95:75:1a:23:9b:bb:01:ce:6e:b2:
f4:9e:68:15:93:15:03:cd:c4:3f:76:57:2f:01:5a:37:87:72:
8e:4e:25:5e:5b:a8:30:a0:7b:57:1d:73:18:f5:4b:33:9d:37:
e4:8f:eb:fb:8b:6d:f4:2d:43:bc:1c:85:1e:90:10:a6:2e:14:
85:ba:83:cc:8a:8e:28:b7:1f:70:78:44:b8:8d:c8:1f:e2:0f:
2c:75:a4:70:a8:24:14:df:95:5c:16:c5:42:01:7a:bf:67:35:
f9:0a:d8:c9:64:1c:28:c5:9a:b7:c0:26:77:8a:36:fb:64:93:
ce:ff:8e:dc:27:43:9c:67:bb:9c:f4:fa:4a:09:95:f1:a8:89:
b3:25:cf:ed:36:df:f8:76:d0:0d:07:a7:94:d9:24:c6:e3:49:
ea:e3:61:ae:d6:64:1f:41:09:e8:db:46:b6:96:2e:60:a4:86:
58:e7:0d:c0:46:62:5f:60:29:f5:70:15:5c:2d:0c:7e:ff:3e:
cc:2a:bc:f7:cd:89:70:29:d0:30:1d:f0:81:4f:92:07:fc:9c:
4d:82:5e:ab:ce:43:f1:bf:a2:19:27:17:39:50:a6:c9:d8:95:
d3:29:cd:03:f8:47:59:04:d4:fe:de:28:5e:2f:b1:ac:9c:38:
20:d4:fc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:30:34 2026 by rpki-client