
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
File: iHgvgx82npb5eaJYXPJzyRbHtP0.mft (raw, json)
Hash identifier: FGmp2cLH8q9m+rQtsQletncQamwu8OaAXq1bQ6Y1vic=
Subject key identifier: AF:28:14:C7:0E:69:4D:C6:B7:5F:87:9C:A5:6B:5D:2E:2B:40:49:D7
Authority key identifier: 88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
Certificate issuer: /CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
Certificate serial: 0787
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
Manifest number: 076D
Signing time: Wed 26 Aug 2026 21:33:41 +0000
Manifest this update: Wed 26 Aug 2026 21:33:41 +0000
Manifest next update: Wed 02 Sep 2026 21:33:41 +0000
Files and hashes: 1: iHgvgx82npb5eaJYXPJzyRbHtP0.crl (hash: btK+xhKwcrF07h3wsIJQovW4MT+pkQ8mmhxPlK4/pm8=)
2: 0F425E96346711EFA663CD51C4F9AE02.roa (hash: W7HbZgiurIous/dkOII7Zs+KL83NW7eUE5Qjtxcpxno=)
3: 2BC67A2A346711EF9EEB0F52C4F9AE02.roa (hash: QKYaxLpX/SQs5/c2F5OMS0OrA2VZBlIsKBf0LDbK85o=)
4: A0A96F80AD8511F08B0A1857C4F9AE02.roa (hash: E4mvIp0TY49n7Ku16oPaGsPeRK5kr/jdVq6qAjBUp9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl
rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 21:33:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1927 (0x787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B65E6, serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
Validity
Not Before: Aug 26 21:33:41 2026 GMT
Not After : Sep 2 21:33:41 2026 GMT
Subject: CN=6a8f5bb5-167f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:ac:22:fc:7a:60:e8:73:cb:fe:db:da:4b:
3b:df:83:68:50:d3:2d:e2:0c:63:78:76:23:76:0f:
07:a9:1f:a3:28:66:cf:27:2f:e3:d0:68:8c:6e:0b:
2f:af:03:ab:c5:83:84:7a:30:aa:72:26:50:32:2e:
87:18:d4:b2:12:a3:24:21:e8:09:68:51:77:cb:60:
99:0c:d3:13:86:6a:27:21:f5:7c:cb:73:ee:aa:42:
ce:0c:5e:80:58:8e:d5:1c:ab:e5:5d:d7:7d:9f:3e:
63:a7:cd:32:b2:0f:3f:31:cd:ee:fe:66:e8:d8:90:
c5:bb:2b:ef:55:fe:1b:d6:cf:dc:23:3b:ee:f2:ab:
21:e4:80:3b:75:49:d9:6b:de:74:07:45:c3:d2:ae:
7b:17:b4:20:d6:93:d8:d5:e6:a3:9d:19:85:fd:bd:
f1:6a:65:ad:a1:7b:aa:ec:ed:b2:23:5c:cc:30:5b:
34:28:10:f4:20:4b:9a:72:ee:ff:e8:55:8f:9d:ca:
2e:6d:4d:1a:b1:f2:7a:c6:e5:7f:4e:1c:15:1f:3f:
99:90:42:80:cd:87:02:f6:7b:87:80:e2:4d:c9:00:
1f:26:55:55:57:80:15:85:ca:43:18:6c:0a:bf:09:
a3:38:90:f5:bc:3d:08:62:15:40:56:b1:53:78:84:
72:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:28:14:C7:0E:69:4D:C6:B7:5F:87:9C:A5:6B:5D:2E:2B:40:49:D7
X509v3 Authority Key Identifier:
keyid:88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:42:c1:39:f8:97:8c:71:47:15:d5:9e:36:1b:d3:33:00:dc:
a3:f6:7f:9e:61:69:0e:49:5c:18:44:59:40:8c:88:45:a0:66:
49:f0:77:c1:d0:78:59:85:38:dd:5a:9e:d4:de:73:11:86:88:
ed:10:bc:d4:07:b0:7a:c0:f7:be:b8:22:fa:2e:c3:79:03:76:
53:33:bf:c2:88:b6:09:7a:31:22:91:fb:cc:bf:97:92:a2:75:
51:20:5c:67:51:4b:db:96:83:dc:7e:61:a5:42:97:c5:1e:d6:
45:5d:ed:91:0a:9c:c7:90:87:1b:5d:ce:a4:ef:61:93:aa:31:
fc:b2:7f:94:fb:61:ba:19:f5:54:38:30:5f:93:a7:08:fc:24:
88:cf:8f:75:91:3e:e5:5c:c1:a1:8c:86:78:ec:50:6a:f4:21:
d5:03:ca:81:70:0b:75:12:29:2c:7d:87:84:4e:8c:9c:0e:5d:
32:e1:94:dd:e7:1a:f5:b9:07:47:ed:ca:75:8c:b5:f8:d4:cc:
3f:7b:dd:c0:f2:b9:25:75:9c:df:65:ba:c8:bd:1e:f7:ad:ca:
c7:34:a9:89:9e:ec:c1:53:58:d4:31:29:92:67:12:ca:fd:64:
bd:51:27:21:66:4b:25:bf:95:0e:76:b1:cd:e6:a8:b7:f4:aa:
07:13:a9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:03:51 2026 by rpki-client