
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json)
Hash identifier: GROLcZRa6VEmawP25rKpzFn6sWBI5JXObbp5YSuQQyE=
Subject key identifier: D8:53:75:EC:2A:A1:23:98:DC:AE:9E:65:61:ED:75:51:A4:FC:75:8C
Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63
Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63
Certificate serial: 02CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
Manifest number: 02B7
Signing time: Sat 15 Aug 2026 01:31:32 +0000
Manifest this update: Sat 15 Aug 2026 01:31:32 +0000
Manifest next update: Sat 22 Aug 2026 01:31:32 +0000
Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: 7UO82UVih0idxqgcEef90d4VfrX+5t7XBu2H04/VHgM=)
2: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: Pu3HSh7UAJem3mpQag6OD//H7HzHFiNKKj+xFn4gXBM=)
3: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: FAsv4u0lMC/I3QYc2qVpW+Zdc9wxgYJL7HZ2HtRyWFE=)
4: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: A7VcLCIr/FcjJaPxb9fLesSTHqaiYIJD5WUKTmg4W9Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl
rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 01:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 715 (0x2cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63
Validity
Not Before: Aug 15 01:31:32 2026 GMT
Not After : Aug 22 01:31:32 2026 GMT
Subject: CN=6a7fc174-3149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:f7:b3:9d:87:40:1e:fa:7b:dd:56:9b:35:
9a:bc:94:a1:ad:4d:37:2f:8b:1b:38:72:f2:54:dc:
6e:5a:8e:09:9e:4a:21:b2:1b:09:d7:bc:76:2b:fa:
a5:d0:d4:69:5c:8c:6d:64:e0:66:7b:1a:ef:db:93:
42:16:a3:f4:30:24:f4:f2:b1:9c:5a:06:e0:9b:cf:
8a:9a:91:a0:64:9b:3a:3c:1f:a8:14:ee:dc:a2:2a:
01:2c:e4:27:51:0f:8c:98:68:d8:72:67:a7:dd:b8:
c0:40:c3:f5:c9:43:9e:72:83:38:e1:c7:50:93:e8:
43:86:3d:87:84:3d:da:23:2a:6a:01:67:97:7f:c9:
bc:c6:7c:31:99:0b:6c:b4:53:24:6d:99:7d:45:72:
f0:73:cf:5b:0b:70:ae:84:36:66:22:31:1a:10:d0:
eb:f0:f2:c3:74:03:16:91:ee:09:7e:68:07:71:d2:
e9:ff:c9:a8:75:3f:bf:90:68:b7:8f:8c:ff:20:46:
36:4c:a2:32:b2:bb:e7:2e:d0:8a:53:a7:fe:8d:24:
9e:c8:44:3e:53:ae:4c:ae:85:dc:40:9c:58:12:6c:
0a:fe:92:e0:c0:46:c4:b0:4a:fc:c6:bb:ee:b3:d6:
da:f6:3c:3d:35:f6:9c:07:36:c3:1f:60:7a:8b:b6:
25:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:53:75:EC:2A:A1:23:98:DC:AE:9E:65:61:ED:75:51:A4:FC:75:8C
X509v3 Authority Key Identifier:
keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:f8:7e:0a:44:ee:0f:4c:77:49:f8:11:1b:f7:be:b2:d1:a9:
75:99:0a:ec:c3:4e:60:be:f5:f4:51:84:a6:50:26:a4:51:ba:
66:97:3c:55:07:93:4f:7c:fe:93:83:3a:31:98:1e:fe:15:1f:
c6:dc:61:19:f7:51:3a:20:a2:fd:92:4f:bc:1e:d3:13:26:a3:
a9:d9:d4:c5:07:50:aa:42:24:fc:5d:4a:15:bd:85:0c:8d:d0:
b0:0c:5e:f6:ab:fb:8b:5f:78:30:9b:2f:77:a2:76:2d:be:af:
c7:04:34:1d:9f:8b:e2:15:42:0f:9a:fa:a2:91:06:cc:f2:22:
ee:0e:cf:a6:e1:34:21:5f:26:62:f3:1f:fc:4f:cd:48:e2:ef:
c9:ef:c4:b0:38:a9:f4:84:7c:a6:13:1c:e4:e9:da:23:9b:80:
03:0b:5d:a3:f4:32:3f:e2:da:64:6c:db:83:1d:8b:56:62:da:
b7:ee:b0:6f:2a:18:95:e7:13:71:5a:f2:7a:b9:1c:62:82:cf:
13:ce:8d:65:3a:0a:55:ff:47:30:f9:aa:71:cc:64:53:a0:16:
b4:87:71:16:3a:aa:42:70:f3:a9:dc:9e:4b:d9:8b:f2:b4:2c:
c8:62:73:57:a5:58:8b:bb:00:ab:73:fa:cd:40:cd:ac:6e:71:
c0:2f:e3:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1
QjA4RDZCNjMwHhcNMjYwODE1MDEzMTMyWhcNMjYwODIyMDEzMTMyWjAYMRYwFAYD
VQQDEw02YTdmYzE3NC0zMTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt4v3s52HQB76e91WmzWavJShrU03L4sbOHLyVNxuWo4JnkohshsJ17x2K/ql
0NRpXIxtZOBmexrv25NCFqP0MCT08rGcWgbgm8+KmpGgZJs6PB+oFO7coioBLOQn
UQ+MmGjYcmen3bjAQMP1yUOecoM44cdQk+hDhj2HhD3aIypqAWeXf8m8xnwxmQts
tFMkbZl9RXLwc89bC3CuhDZmIjEaENDr8PLDdAMWke4JfmgHcdLp/8modT+/kGi3
j4z/IEY2TKIysrvnLtCKU6f+jSSeyEQ+U65MroXcQJxYEmwK/pLgwEbEsEr8xrvu
s9ba9jw9NfacBzbDH2B6i7Yl7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNhTdewq
oSOY3K6eZWHtdVGk/HWMMB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy
MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h
Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjE3Mi9CQTU0QzEzNDcyMkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1
Njh6dk9aaDVEajliQ05hMk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmfh+CkTuD0x3SfgRG/e+stGpdZkK7MNOYL719FGEplAmpFG6Zpc8VQeTT3z+
k4M6MZge/hUfxtxhGfdROiCi/ZJPvB7TEyajqdnUxQdQqkIk/F1KFb2FDI3QsAxe
9qv7i194MJsvd6J2Lb6vxwQ0HZ+L4hVCD5r6opEGzPIi7g7PpuE0IV8mYvMf/E/N
SOLvye/EsDip9IR8phMc5OnaI5uAAwtdo/QyP+LaZGzbgx2LVmLat+6wbyoYlecT
cVryerkcYoLPE86NZToKVf9HMPmqccxkU6AWtIdxFjqqQnDzqdyeS9mL8rQsyGJz
V6VYi7sAq3P6zUDNrG5xwC/jAA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:39 2026 by rpki-client