
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft
File: iZOTjIV1ACgOj15T3As-kweu1Kc.mft (raw, json)
Hash identifier: VyHkFgaK47Q5784Zuc94IB/ZTpGqJKaFKPl/q/9PB5E=
Subject key identifier: D2:4E:E4:54:1D:19:ED:38:24:76:8B:FF:97:81:BA:C1:55:79:BE:DA
Authority key identifier: 89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7
Certificate issuer: /CN=A91BD3E1/serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft
Manifest number: FE
Signing time: Tue 23 Jun 2026 06:27:41 +0000
Manifest this update: Tue 23 Jun 2026 06:27:41 +0000
Manifest next update: Tue 30 Jun 2026 06:27:41 +0000
Files and hashes: 1: iZOTjIV1ACgOj15T3As-kweu1Kc.crl (hash: hVc2pp+k/PmBBSUzFc8I9QGBwuOQyODnFOzHcp/9SD4=)
2: 459FAF10EF4811EF8F4B9284C4F9AE02.roa (hash: wgm/K3czk438q8wY+F8Senpx6ebVl18VJSckLP4XIDo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl
rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD3E1, serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7
Validity
Not Before: Jun 23 06:27:41 2026 GMT
Not After : Jun 30 06:27:41 2026 GMT
Subject: CN=6a3a275d-ae26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:45:f5:f2:31:bd:56:9c:f0:fa:7d:a5:a3:9e:
30:6e:cd:a8:3a:a5:fb:99:97:2d:53:ce:b9:3d:03:
bb:43:33:c0:1e:26:df:f3:70:d0:6e:89:63:3b:5f:
2f:27:8e:c7:50:ad:21:4f:27:1a:7e:dc:f5:5f:42:
67:b9:9e:4a:5b:1c:78:0c:78:dc:c4:ce:cb:f5:ba:
31:66:0e:5d:b3:a4:17:2e:ec:16:9d:65:0a:97:d4:
45:4c:16:37:30:28:de:2b:81:a8:4a:04:e3:a9:e5:
18:2f:e7:9f:85:a7:39:9a:2d:d2:af:fd:f2:ab:53:
e9:ec:da:62:59:ad:53:75:3c:dc:7b:a5:35:5e:a9:
63:3c:b4:84:a1:78:01:7d:aa:95:68:53:95:b2:48:
5f:50:0f:5b:51:9b:cc:a9:98:4c:a0:05:38:40:1a:
dc:b8:c3:a0:37:18:75:45:2b:eb:f5:2e:68:5e:12:
bd:38:0f:f2:87:3d:57:1c:31:3b:12:c0:42:5d:2e:
80:ac:0d:13:48:ec:a2:da:62:34:b9:d0:88:46:c7:
4a:2e:a3:d5:3a:f6:90:f9:af:81:a1:67:b9:3f:64:
cc:47:49:2f:48:20:6e:13:01:96:45:bd:01:69:b9:
c6:c8:cb:a1:6f:b1:17:fe:2f:91:96:a7:4e:44:a0:
f5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4E:E4:54:1D:19:ED:38:24:76:8B:FF:97:81:BA:C1:55:79:BE:DA
X509v3 Authority Key Identifier:
keyid:89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:00:48:d5:7d:ef:b1:06:66:27:45:3f:40:a2:d2:57:55:43:
36:09:a2:aa:73:c2:de:0f:b7:f4:2b:b7:cd:25:79:9e:7d:0f:
f3:3c:8d:c4:a5:09:95:fc:d2:3d:6d:2f:c9:12:9f:fd:46:7f:
97:ab:6e:42:91:c4:f4:99:2f:5d:70:75:90:fe:da:86:59:c1:
5e:a7:a7:86:71:fa:88:00:b8:8e:26:4e:a0:ed:e9:66:bf:bd:
91:45:e7:dd:76:63:17:2d:c6:e9:46:9a:22:58:e3:d4:c2:92:
cb:01:fc:de:41:8b:fe:47:b7:fa:7b:93:ea:b1:83:c7:d6:80:
aa:a2:79:3d:4a:1e:c3:8c:e0:d3:36:1c:85:78:94:d8:8e:06:
d0:1c:8b:7c:cb:44:77:01:ef:9b:98:f8:c5:11:f5:43:9f:45:
d3:a8:94:d8:91:59:2d:7b:84:04:f4:3e:d2:a8:9a:16:f1:b5:
73:ab:71:d5:99:7e:2e:67:c8:9c:54:1b:0c:42:7e:af:34:e1:
69:f8:65:1e:e6:b4:47:73:a6:37:33:11:61:02:89:4a:41:d0:
c9:e7:fe:c2:9b:9d:91:3e:a5:7f:d1:b8:a2:c9:74:58:bf:8e:
e7:eb:0a:93:10:15:8c:88:ed:6b:b5:8f:27:42:ad:f0:78:2c:
93:a7:2b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:56 2026 by rpki-client