
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
File: iXCkAMzM8BCTPDMMN2Ch7F204K0.mft (raw, json)
Hash identifier: cB7B4dYRByz1HOaa5UdwRhejHNO+6WWDC1RjS6d8laA=
Subject key identifier: 1F:31:33:63:3A:18:01:75:E9:CA:7B:02:69:F6:A0:60:26:21:50:A2
Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD
Certificate issuer: /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD
Certificate serial: 0643
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
Manifest number: 0633
Signing time: Fri 02 Oct 2026 23:02:26 +0000
Manifest this update: Fri 02 Oct 2026 23:02:26 +0000
Manifest next update: Fri 09 Oct 2026 23:02:26 +0000
Files and hashes: 1: iXCkAMzM8BCTPDMMN2Ch7F204K0.crl (hash: +eYInGNn1AZ2TQxibdsBg6dqpR3hRqivXxAkXCLNYFE=)
2: AD1469EC7A3911ECB5639D41C4F9AE02.roa (hash: 96gxdKQyCmuf4UCiLnFZLLSpfBwM2iUrQWCesjIYcd0=)
3: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (hash: Wnvaq8Ww3Bk3d2vemeHqavsME8uCxGuZGCjNCIrVG9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl
rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 23:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1603 (0x643)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C92DC, serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD
Validity
Not Before: Oct 2 23:02:26 2026 GMT
Not After : Oct 9 23:02:26 2026 GMT
Subject: CN=6ac03802-96f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:20:f7:52:ba:da:21:e4:af:c1:36:5d:03:16:
ef:b7:41:2c:a5:d1:b5:54:53:bb:b1:95:60:c5:cc:
46:96:aa:c1:31:00:c7:ec:d8:03:db:02:eb:dc:22:
6e:7c:9c:6e:ac:a4:aa:34:fc:6a:65:2e:ca:bf:d0:
6f:18:f5:42:b0:98:78:ef:83:82:f9:0f:3c:bb:4f:
dd:dd:e3:fe:51:bf:96:0c:06:5c:f5:32:6b:e1:5c:
6f:1a:6d:5b:ac:4f:ba:83:9f:e9:5e:55:19:12:90:
79:37:b7:ea:7b:a6:60:bf:14:52:0d:08:3b:4a:6a:
21:1c:a5:05:8f:34:a0:66:e5:cd:fe:1a:e8:22:de:
2f:1c:2a:ac:11:dd:3b:de:3d:cc:1f:2b:73:c5:bb:
24:e4:18:44:f4:5b:01:66:71:f5:72:dd:15:48:8c:
5d:9a:0d:0f:bf:14:cb:7d:9e:e7:0e:bd:e8:33:53:
3d:ae:6f:07:c7:3e:1c:83:5e:25:f9:89:c2:f0:7b:
88:73:64:76:a9:71:1b:ae:4c:0e:52:04:ed:05:dd:
23:b6:ab:93:d2:ed:b8:e8:da:a9:e6:76:a4:ee:57:
9f:3b:38:d7:a2:a5:39:aa:37:58:55:92:31:27:9c:
1f:10:43:04:9c:6c:f2:97:aa:8d:9a:e0:1e:18:6d:
7b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:31:33:63:3A:18:01:75:E9:CA:7B:02:69:F6:A0:60:26:21:50:A2
X509v3 Authority Key Identifier:
keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:15:ae:a7:15:13:4c:24:26:6c:0b:6e:4c:09:8a:b7:ef:84:
49:0b:73:57:6d:8c:00:07:f9:c5:45:59:7e:35:20:de:89:bf:
51:cf:64:39:f8:4a:24:d1:c8:f7:07:f4:b4:c1:cb:16:ec:c6:
f5:f8:5e:71:ce:cf:f0:ff:69:f9:a9:c1:a0:bf:7c:1f:d8:c1:
4b:74:c8:36:c9:83:3c:2d:88:bb:b8:d1:bc:c0:58:5b:09:1b:
e5:1c:96:96:cc:e4:63:c6:68:d3:13:85:81:48:b0:6a:b1:28:
ed:d7:35:ba:95:6d:51:0f:e9:7b:c5:27:93:be:90:c8:fa:2f:
f0:67:93:73:7a:98:1e:3d:ed:aa:e5:4a:b1:9a:71:b5:00:ad:
93:69:91:d6:bf:a9:c2:7f:89:5d:d5:7a:93:94:20:ce:e9:5e:
8a:67:c0:7b:bb:29:5c:44:0e:45:40:e9:77:d8:27:2d:fc:03:
fc:70:a8:b1:57:33:e9:80:86:e9:3f:f2:a0:73:ec:00:f3:c0:
95:35:dd:50:d0:90:dc:8d:77:dc:52:a5:c2:63:82:fd:9d:7d:
d9:53:38:1e:1d:b8:83:65:47:d5:cf:93:b6:89:8b:f2:3b:61:
18:b5:80:60:36:a6:ef:de:bf:f6:c0:1d:d3:1b:51:76:a9:35:
a4:d9:2c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:37:54 2026 by rpki-client