
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft
File: iS3iAjP9DGSOLnuflZUPOpaBfL8.mft (raw, json)
Hash identifier: HjS3J5T+lCj7alv67g50iKqjO1hxb/PnRd6E+PnJQVk=
Subject key identifier: 01:C7:93:EC:C3:2C:8D:08:D3:E7:C1:E6:43:52:A6:AE:AC:0F:80:90
Authority key identifier: 89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF
Certificate issuer: /CN=A91C7175/serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF
Certificate serial: 0172
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft
Manifest number: 0172
Signing time: Wed 19 Aug 2026 05:24:18 +0000
Manifest this update: Wed 19 Aug 2026 05:24:18 +0000
Manifest next update: Wed 26 Aug 2026 05:24:18 +0000
Files and hashes: 1: iS3iAjP9DGSOLnuflZUPOpaBfL8.crl (hash: b3dQ/FpT/S6Pll8YMkwgHeItcqHFKyvLT7gKtikrtjM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl
rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 05:24:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7175, serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF
Validity
Not Before: Aug 19 05:24:18 2026 GMT
Not After : Aug 26 05:24:18 2026 GMT
Subject: CN=6a853e02-8e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:3a:78:d7:77:f6:92:75:f9:9a:76:96:0a:
f2:7d:42:4e:0f:18:b3:cf:a5:d9:e9:58:db:df:c6:
36:1e:a2:65:f1:e4:b6:38:6c:89:4f:92:5a:7a:c1:
3c:15:4b:8a:fe:01:8d:ef:3d:92:80:d6:48:8c:1b:
4a:1d:59:6f:cd:97:dd:29:35:4c:85:72:e4:03:83:
64:24:08:0b:2c:04:1a:02:9e:2f:65:ac:13:fe:c9:
a0:20:e1:5c:69:d3:c2:f1:54:b0:c6:d8:47:7d:3d:
6f:25:55:44:0f:06:11:8e:98:0c:98:4c:b9:7e:0c:
12:4e:77:83:0c:ae:64:cc:24:fa:a2:50:bb:90:bb:
41:9a:81:52:39:2a:07:2d:f0:fa:7a:44:f4:08:55:
17:99:5e:15:3c:89:81:7c:24:dc:4b:8d:05:9a:d0:
eb:5e:7a:90:b9:6c:3d:c3:87:87:a0:37:66:ac:de:
11:dc:c8:6d:f4:b5:7d:24:a2:93:dd:f8:8b:db:e9:
96:6a:9a:82:ce:13:13:32:97:e3:ca:cf:10:e1:2c:
9d:5d:ad:ef:7c:ce:bf:24:95:69:23:ee:3f:00:cf:
2d:06:89:ef:11:0c:0b:09:a2:08:02:8f:56:50:dc:
2a:4c:b3:b6:3a:4e:36:12:9f:51:c1:a9:93:d5:9e:
fa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C7:93:EC:C3:2C:8D:08:D3:E7:C1:E6:43:52:A6:AE:AC:0F:80:90
X509v3 Authority Key Identifier:
keyid:89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:0f:f2:18:a5:da:a4:e9:dc:22:47:61:aa:92:85:f3:d7:27:
42:ac:f1:b3:f2:ce:f2:6a:a8:02:f5:3c:3d:3f:1c:cc:6a:8c:
30:6c:07:a2:37:43:c6:c8:81:50:5e:bc:6c:e0:86:f3:29:e6:
c8:e6:38:7e:a8:cc:e4:96:ec:a7:6b:98:d0:57:11:c4:77:e9:
7b:85:83:de:58:28:bd:68:f2:34:aa:d5:68:9b:07:f2:1e:ab:
6a:b1:2f:1e:89:ae:47:a0:4b:42:a1:03:f1:b3:63:96:7b:e7:
c4:c8:52:89:50:31:5f:a5:ff:9a:f6:1e:0e:da:74:d2:61:55:
e3:fd:0d:2f:3e:d2:4a:74:79:c8:e1:4d:09:1a:ca:f3:b3:dd:
eb:80:42:f7:b5:44:49:bb:b6:83:f5:22:8f:0b:0c:00:78:87:
86:3c:1e:a5:64:9e:e6:71:63:6e:95:c5:24:49:36:b0:24:a5:
60:2f:78:2a:92:c0:b3:07:92:5c:0d:be:0e:84:9d:7b:13:aa:
cd:1e:c2:d4:51:c1:32:7c:3a:fa:c1:2b:db:db:71:d6:c9:be:
7b:da:22:ad:b8:d1:76:e4:7e:60:71:b5:43:cc:b4:e0:11:b6:
eb:16:65:78:9c:48:55:62:c2:1d:0f:fc:60:f2:0e:a3:e1:8e:
82:fe:5b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:02 2026 by rpki-client