
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft
File: IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft (raw, json)
Hash identifier: 9DKB6PyPxwQtNq5a2iSHteWnCAgastT6dAS8yCSKwc4=
Subject key identifier: 3B:F1:A4:B6:49:ED:B3:8E:0F:FE:CB:69:84:7C:13:6E:46:14:8B:5D
Authority key identifier: 21:76:05:A5:DE:DE:2D:62:2F:98:AE:A6:C2:F6:F9:5D:8F:AE:1B:66
Certificate issuer: /CN=A91AE81E/serialNumber=217605A5DEDE2D622F98AEA6C2F6F95D8FAE1B66
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 07:26:08 +0000
Manifest this update: Thu 03 Sep 2026 07:26:08 +0000
Manifest next update: Thu 10 Sep 2026 07:26:08 +0000
Files and hashes: 1: IXYFpd7eLWIvmK6mwvb5XY-uG2Y.crl (hash: NyB92Gz33BSLl0yIB6jH8B5bZZ4F55A0KsflYT0yyK0=)
2: 06048736B08B11F087892851C4F9AE02.roa (hash: lH1PbCUckjd4Z/IAYvlhe3AJ9Dotnfr+gAbzTEeakhg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.crl
rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 07:26:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE81E, serialNumber=217605A5DEDE2D622F98AEA6C2F6F95D8FAE1B66
Validity
Not Before: Sep 3 07:26:08 2026 GMT
Not After : Sep 10 07:26:08 2026 GMT
Subject: CN=6a992110-f242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:91:3c:3b:32:c5:17:93:93:96:5b:02:6a:2d:
95:6e:b6:f3:e4:f9:56:77:53:b8:7e:e0:7f:bd:1c:
eb:aa:67:64:9b:b2:ec:e0:cf:20:d6:39:3a:e9:ea:
e4:d5:9b:c9:3e:4c:bd:53:99:d5:77:30:1c:c5:f5:
74:ca:42:a8:fa:38:b7:d2:19:34:95:f1:a3:b3:30:
c2:8f:9b:bf:1c:0d:11:c6:28:9e:20:b9:de:7f:51:
30:da:7a:1e:b6:b4:dd:00:85:77:e2:80:97:20:d4:
f9:45:b3:17:59:a1:5c:b4:de:9a:fa:ab:4e:65:d6:
ec:54:04:30:d8:b9:d0:4a:a7:e1:9c:65:24:f8:29:
64:d7:6e:f5:f8:01:5a:0a:03:4a:f0:98:c7:35:a5:
19:82:8c:62:0e:c7:0e:25:5b:17:95:27:50:c5:6e:
f2:d2:7a:8c:7e:dd:52:fd:c4:1d:e2:7e:bb:d7:ed:
98:17:fd:37:52:c2:02:b9:c4:c7:2f:87:a9:24:46:
12:88:fc:1f:e9:50:7d:41:1e:53:ae:f8:b1:0f:9a:
e3:80:31:82:27:30:39:5b:8b:e4:4b:22:16:e4:ef:
88:e5:e7:65:6b:a8:07:8b:ab:f0:04:07:c9:6a:67:
1e:63:72:d8:6a:e2:35:88:e1:01:08:bc:b7:ea:7c:
6b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F1:A4:B6:49:ED:B3:8E:0F:FE:CB:69:84:7C:13:6E:46:14:8B:5D
X509v3 Authority Key Identifier:
keyid:21:76:05:A5:DE:DE:2D:62:2F:98:AE:A6:C2:F6:F9:5D:8F:AE:1B:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:6e:90:6c:17:13:48:2a:3d:ac:e0:72:27:a6:e3:9a:25:93:
21:89:3f:8e:91:a9:85:27:58:0a:ab:63:be:39:0d:9a:f1:a1:
3d:89:15:9f:a6:0c:1b:15:8f:a4:6c:68:1b:be:c7:8f:11:d7:
56:52:25:f9:5a:8b:3a:b0:b4:bf:67:dc:73:0b:b9:e4:34:93:
30:d8:55:a9:90:3f:c1:14:81:7d:57:34:f6:33:d9:93:63:ea:
ee:57:5a:0e:20:ce:01:3c:e0:c0:b5:d1:79:41:34:c8:55:2d:
66:dc:8c:62:3e:44:eb:46:9d:c1:3b:e7:06:b0:66:a3:b3:f4:
75:c7:7e:fd:ab:0f:27:75:4b:a8:33:3e:54:15:e3:eb:aa:21:
5f:4d:84:ab:8b:23:33:d2:a7:d1:fa:fe:d1:ad:b7:d8:cb:08:
ba:ac:a9:da:10:5f:f6:56:17:d7:ce:1e:54:11:61:53:56:50:
8b:21:59:bc:14:28:0b:48:d2:a2:8b:00:a9:b9:ed:73:58:4b:
a6:53:6f:01:31:cc:99:e1:12:b1:98:75:2a:64:81:ec:a7:3d:
1e:28:fb:90:17:3c:d8:3a:69:03:88:03:cf:3c:06:85:43:8e:
20:04:90:b7:1a:a1:2f:e9:a0:32:d7:35:67:7a:c8:fd:0c:cc:
fc:95:b6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:59:41 2026 by rpki-client