
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
File: ihprqbt2zysN7jXqTP0vX_jAieM.mft (raw, json)
Hash identifier: 9vI/UTB/1+To17nNueXhpsy7t86+WnjTHORwbb8rEC0=
Subject key identifier: 52:89:CD:4B:6E:8F:5A:E8:9D:BC:69:98:95:79:64:4A:2A:F2:00:6F
Authority key identifier: 8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3
Certificate issuer: /CN=A91C36EE/serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
Certificate serial: 0CA0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
Manifest number: 0C97
Signing time: Wed 20 May 2026 18:33:37 +0000
Manifest this update: Wed 20 May 2026 18:33:37 +0000
Manifest next update: Wed 27 May 2026 18:33:37 +0000
Files and hashes: 1: ihprqbt2zysN7jXqTP0vX_jAieM.crl (hash: b8+g7HGfD+4pTYOPk6wkehXXWY6b1uCBcd0m8VHaeNs=)
2: 6FCF7FF2180411EA9AA70A57C4F9AE02.roa (hash: Jmt3gOA3SMMnVdNR/G0V8b2lUdwKqb+fxUhA4ydziJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl
rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3232 (0xca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C36EE, serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
Validity
Not Before: May 20 18:33:37 2026 GMT
Not After : May 27 18:33:37 2026 GMT
Subject: CN=6a0dfe81-aded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cb:f2:14:60:b2:44:8b:f4:1b:55:de:36:b6:
83:bf:bf:19:1a:6e:7d:2a:e8:d2:ac:92:53:dc:8b:
09:98:1e:33:86:21:97:f7:c7:b2:d4:91:35:43:5e:
72:52:79:1f:a1:a4:18:2f:6a:4b:2b:d6:9a:08:38:
01:3e:4a:dc:98:1e:33:16:d2:eb:c0:bd:4d:79:55:
aa:0b:77:d3:a9:75:8d:61:0c:31:ff:b7:f1:18:af:
d5:ef:ab:aa:da:fc:90:e6:64:68:2e:8d:d0:82:84:
0f:48:f8:76:4e:5e:9a:e6:0a:c8:d2:97:4f:c0:05:
f0:e3:10:0f:4b:af:54:ee:ee:a1:64:a7:7d:d7:e6:
d1:34:ff:82:8e:88:11:00:79:d8:36:20:3b:68:a3:
26:4c:16:8c:eb:3b:34:16:9c:1a:ef:7c:b0:64:72:
a1:0a:b7:50:85:8c:f3:bf:48:bd:91:7d:6e:f8:c0:
ed:d6:e6:79:54:6a:b9:69:38:5c:e7:ed:25:0e:ea:
69:37:8f:6c:02:11:a9:79:cf:3c:fb:d8:8e:4a:a3:
87:ed:1e:a0:cd:43:a9:c5:de:95:c3:db:38:b3:69:
8e:2a:48:e4:7b:34:83:99:05:3d:49:b6:7d:c0:25:
cc:4a:91:91:46:17:78:14:8f:c8:e2:83:88:e0:c6:
35:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:89:CD:4B:6E:8F:5A:E8:9D:BC:69:98:95:79:64:4A:2A:F2:00:6F
X509v3 Authority Key Identifier:
keyid:8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:43:3a:1c:1c:58:57:e8:f1:b0:7e:cd:c1:b0:4f:33:db:80:
18:c5:fb:2b:59:59:d0:10:dd:27:08:b7:11:00:5f:1a:3b:89:
1d:bc:8c:50:28:10:d2:ea:96:0d:17:7e:79:16:24:b7:e8:3e:
d1:96:a8:39:1b:d4:ed:37:3f:ab:0c:b3:0f:06:85:c2:10:b6:
1e:41:50:ab:b9:c8:62:4d:73:32:30:be:43:3e:32:7a:f1:fa:
ea:ff:56:83:f2:de:c5:a6:31:f1:60:ea:77:75:56:83:c1:27:
08:14:06:09:5e:54:b7:7e:ab:0a:06:5d:60:2a:32:7c:1f:be:
19:67:f0:7a:2b:61:04:86:34:c1:66:46:9b:0f:7b:e0:db:ba:
a6:89:2a:f8:9e:a9:41:ac:63:0d:19:df:e3:89:af:f0:2d:15:
4a:31:51:87:5d:39:c0:2a:2b:01:65:f7:90:49:91:ad:6e:bb:
e3:34:21:91:a1:52:96:7c:20:fa:ba:61:4f:73:66:81:20:d8:
39:e7:77:e3:23:67:63:19:a3:ba:97:05:47:c9:1d:b2:6a:9e:
e9:af:b6:34:9e:ab:e1:9d:9e:fa:6d:48:fa:04:46:33:64:c6:
70:8a:0d:04:15:0b:60:de:48:aa:76:b5:9d:f8:1a:f7:04:ff:
f2:c7:65:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:07 2026 by rpki-client