
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json)
Hash identifier: tIth+9rTJOSK4tQaGHrpWgIejhYgYMp4BKRY+mGVG8E=
Subject key identifier: C9:8A:38:24:72:28:76:15:8D:F4:D6:2C:04:D6:CA:A1:65:8E:59:29
Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
Certificate serial: 0410
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
Manifest number: 03EF
Signing time: Mon 27 Apr 2026 00:27:07 +0000
Manifest this update: Mon 27 Apr 2026 00:27:07 +0000
Manifest next update: Mon 04 May 2026 00:27:07 +0000
Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: wKItE+dI8p2RsTejQluO3zKWejv+HHP/PPu3kFW1Tz0=)
2: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: rOANBQKPsfQ6Tk+3BJxQVcGQ9b8/ioqyWVW5xCF9Omw=)
3: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: s1eXFpPP1drLzWYFfSWX2mxgRfaTxGb5Di3eSFyUmzk=)
4: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: a/OjejWguoz8SOjUqilIOKY73TJSTeqh0jYpuVfKqTM=)
5: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: RGbQplIoBoixh77E1ML8kaMqxyukkROuY8CpRD/mvKs=)
6: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: 3gy1qN11JcP8FRxi5dz6npPXSjCXwvC3iutXG65AMSI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 00:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1040 (0x410)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005
Validity
Not Before: Apr 27 00:27:07 2026 GMT
Not After : May 4 00:27:07 2026 GMT
Subject: CN=69eead5b-86fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4d:44:9a:df:d8:35:42:99:77:21:07:a7:80:
f5:f7:e2:d3:a7:e2:9c:c1:1a:04:c1:4c:0f:87:e9:
fe:1e:28:7d:cc:33:8e:90:97:84:ea:b2:91:03:62:
7b:95:5e:12:5e:7e:82:a7:e3:27:eb:e1:3e:e9:20:
c8:48:c8:ce:d0:05:4f:36:97:0c:ed:78:bd:97:50:
c4:1a:9a:ff:63:85:47:d7:70:e4:03:73:24:d1:fa:
f9:15:ab:64:e5:b2:6d:b1:6a:34:cf:58:6e:00:d8:
87:96:d1:5c:7c:70:5f:20:12:02:22:1e:63:29:1e:
50:f3:eb:ec:2b:75:de:f0:90:d4:f4:f7:97:99:f3:
0e:77:e4:f4:36:8d:c7:ef:08:90:43:27:fa:7d:91:
89:38:e7:4b:fd:f8:cc:e3:ed:c9:68:2c:9c:32:cb:
6e:2a:9e:7f:a8:89:97:41:b8:14:c9:f4:3b:cc:c5:
e1:79:71:0e:7f:0e:f7:3b:83:df:13:21:be:65:22:
71:b6:4a:a5:c0:66:ac:d9:1d:b7:02:fc:48:98:d8:
80:8a:9a:60:5b:95:24:0b:a9:18:51:2f:dd:db:08:
01:c1:7e:05:66:e9:ff:6c:d6:3d:fd:e7:3f:59:c5:
1c:51:01:c9:76:b2:b9:cc:5c:0f:58:fd:71:ff:00:
45:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8A:38:24:72:28:76:15:8D:F4:D6:2C:04:D6:CA:A1:65:8E:59:29
X509v3 Authority Key Identifier:
keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:fe:7a:79:29:66:5b:4d:b1:b4:98:a5:9e:48:ce:f1:dc:04:
ee:e6:2a:b5:01:48:37:54:93:74:c7:a9:14:78:2f:c9:03:01:
3a:16:16:32:05:f3:39:98:d5:57:c8:fa:a4:66:28:bd:75:db:
16:9f:3d:8c:13:f3:57:28:de:57:cf:ef:4d:73:19:d4:b9:13:
33:b1:de:d1:46:39:ae:76:d6:9d:ca:f8:b7:12:da:21:93:83:
e6:1f:9e:72:36:bb:17:74:f9:f0:7a:bf:8c:e8:81:d6:06:3b:
b3:b0:34:02:0a:27:b6:ab:bc:70:c9:50:e0:ea:ce:b6:fa:e9:
70:e3:e0:ad:49:67:34:36:22:a8:d4:80:74:71:c0:54:05:c9:
5e:3e:69:ff:5e:99:42:e3:c9:4c:3d:54:63:ef:20:c9:a8:f0:
2e:1f:99:ef:4c:4d:af:94:8c:07:3d:e8:9c:d7:52:97:c6:9f:
23:06:6a:71:c4:8b:16:bf:a2:4a:02:37:e9:ed:e2:32:b6:65:
90:ea:ea:64:84:6e:69:be:d9:28:e4:da:96:a7:30:f3:03:9b:
f1:12:69:ab:dc:f8:1a:1f:73:0c:8d:c2:50:d2:73:62:44:00:
52:94:c0:0e:6e:dc:ca:34:c2:be:9d:96:6d:f3:b7:17:f7:bf:
fa:de:4a:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0Y3RjYxMTAvBgNVBAUTKDhBMzkxNDYwQ0E2RjY0NEE1ODkxMURCNzM4MzQ2MTg0
RTM3OEQwMDUwHhcNMjYwNDI3MDAyNzA3WhcNMjYwNTA0MDAyNzA3WjAYMRYwFAYD
VQQDEw02OWVlYWQ1Yi04NmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkk1Emt/YNUKZdyEHp4D19+LTp+KcwRoEwUwPh+n+Hih9zDOOkJeE6rKRA2J7
lV4SXn6Cp+Mn6+E+6SDISMjO0AVPNpcM7Xi9l1DEGpr/Y4VH13DkA3Mk0fr5Fatk
5bJtsWo0z1huANiHltFcfHBfIBICIh5jKR5Q8+vsK3Xe8JDU9PeXmfMOd+T0No3H
7wiQQyf6fZGJOOdL/fjM4+3JaCycMstuKp5/qImXQbgUyfQ7zMXheXEOfw73O4Pf
EyG+ZSJxtkqlwGas2R23AvxImNiAippgW5UkC6kYUS/d2wgBwX4FZun/bNY9/ec/
WcUcUQHJdrK5zFwPWP1x/wBF5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMmKOCRy
KHYVjfTWLATWyqFljlkpMB8GA1UdIwQYMBaAFIo5FGDKb2RKWJEdtzg0YYTjeNAF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjdGNi83ODI0RUJENEJG
QkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpFcFlrUjIzT0RSaGhPTjQw
QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lqa1VZTXB2WkVwWWtSMjNPRFJoaE9ONDBBVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RjdGNi83ODI0RUJENEJGQkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpF
cFlrUjIzT0RSaGhPTjQwQVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU/56eSlmW02xtJilnkjO8dwE7uYqtQFIN1STdMepFHgvyQMBOhYWMgXzOZjV
V8j6pGYovXXbFp89jBPzVyjeV8/vTXMZ1LkTM7He0UY5rnbWncr4txLaIZOD5h+e
cja7F3T58Hq/jOiB1gY7s7A0Agontqu8cMlQ4OrOtvrpcOPgrUlnNDYiqNSAdHHA
VAXJXj5p/16ZQuPJTD1UY+8gyajwLh+Z70xNr5SMBz3onNdSl8afIwZqccSLFr+i
SgI36e3iMrZlkOrqZIRuab7ZKOTalqcw8wOb8RJpq9z4Gh9zDI3CUNJzYkQAUpTA
Dm7cyjTCvp2WbfO3F/e/+t5K8A==
-----END CERTIFICATE-----
Generated at Mon Apr 27 23:34:47 2026 by rpki-client