
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft
File: IlPgspHkNQSp2iaP28xaDjF-bME.mft (raw, json)
Hash identifier: LynyG0AFMOewwwGegP/LRi6jz4eBTbiO3lYfsc88KSI=
Subject key identifier: FC:44:45:23:15:40:A0:4F:7C:D5:B6:F0:74:42:C6:26:9C:9E:C3:1B
Authority key identifier: 22:53:E0:B2:91:E4:35:04:A9:DA:26:8F:DB:CC:5A:0E:31:7E:6C:C1
Certificate issuer: /CN=A91D1FD2/serialNumber=2253E0B291E43504A9DA268FDBCC5A0E317E6CC1
Certificate serial: 59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft
Manifest number: 56
Signing time: Thu 29 Oct 2026 09:00:22 +0000
Manifest this update: Thu 29 Oct 2026 09:00:22 +0000
Manifest next update: Thu 05 Nov 2026 09:00:22 +0000
Files and hashes: 1: IlPgspHkNQSp2iaP28xaDjF-bME.crl (hash: iitS91YyHrBc/slOdt3vyR+H7zFZot4lYA0b0/KBh0o=)
2: A213FF8E535211F184FC032898833773.roa (hash: /sb5ONI+bRGD73MyIUMkM893RApQNOS9VkRgEjeAKps=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.crl
rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 09:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1FD2, serialNumber=2253E0B291E43504A9DA268FDBCC5A0E317E6CC1
Validity
Not Before: Oct 29 09:00:22 2026 GMT
Not After : Nov 5 09:00:22 2026 GMT
Subject: CN=6ae30b26-465a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:52:1d:1a:34:c8:8e:05:a0:e3:93:09:f9:
dc:9b:de:4a:97:64:c1:98:63:c1:a2:75:94:2a:70:
b6:91:d7:7a:c1:cc:c3:21:f7:f1:1d:d1:c4:39:fa:
a8:f8:09:51:44:39:be:0e:e8:b4:c0:03:56:21:df:
22:6f:0d:81:08:46:14:b4:a6:bf:12:aa:19:29:c8:
21:ae:de:f2:da:06:25:e2:1f:ca:8b:1f:e2:e6:04:
df:06:26:e6:38:8e:e9:09:e0:c0:cf:8d:11:77:22:
0d:be:bd:bf:a3:d7:19:a4:5e:85:a1:d6:7f:20:74:
1e:f9:af:96:16:57:33:55:6a:7d:a3:43:f0:c5:8f:
9c:be:d9:99:c0:29:37:ad:51:b1:a9:44:e8:68:38:
35:d1:6c:ae:f2:5c:2f:48:09:c7:07:7b:73:c6:3d:
a9:e3:70:b3:dc:cb:1b:e0:6d:56:bd:89:8d:73:f1:
6f:22:37:df:fd:06:65:50:6e:13:13:2f:05:9f:27:
2b:c9:16:d9:34:e9:f5:9f:97:2f:f6:0b:ce:f9:0f:
a4:6b:75:36:fa:ab:d1:58:9b:d9:40:f8:21:1a:8b:
54:f1:40:8f:2e:67:ca:df:9d:5e:ef:e7:f3:77:46:
9a:08:70:60:20:e4:d4:95:fa:26:2d:4c:c1:57:65:
78:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:44:45:23:15:40:A0:4F:7C:D5:B6:F0:74:42:C6:26:9C:9E:C3:1B
X509v3 Authority Key Identifier:
keyid:22:53:E0:B2:91:E4:35:04:A9:DA:26:8F:DB:CC:5A:0E:31:7E:6C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f7:5a:ab:7e:6f:02:0d:10:c5:7f:23:e3:b5:41:ba:65:eb:
42:55:db:75:a8:b9:ab:3e:39:f0:b3:ce:86:31:26:07:11:48:
22:a5:12:d3:cd:1b:f3:d5:44:76:46:c9:8f:43:9a:a8:49:c3:
d2:9e:39:1d:bf:0b:36:95:8e:ae:97:68:d6:ca:90:6f:47:bb:
a6:6b:5f:90:e2:5e:34:e2:98:14:e9:69:66:f4:ef:c7:21:65:
cb:f7:01:ee:4a:24:98:45:0a:e9:41:8b:1a:28:cb:00:cd:b2:
0b:4b:25:63:a3:6a:ca:a8:cf:94:ed:63:e2:06:1f:6d:09:69:
15:a3:d4:b6:96:3d:13:e4:fd:ee:e4:16:fb:0c:a7:47:a6:bf:
34:6d:c1:60:91:5b:19:3a:51:37:e0:c7:ed:54:0b:b7:07:94:
ed:61:94:f2:5b:c8:58:95:3b:59:80:31:5e:21:d8:c5:02:a7:
bd:1e:e7:a7:bc:1b:a5:9b:b3:10:38:7f:55:42:9e:9b:bd:68:
03:5e:97:46:99:a7:af:dc:30:38:94:db:2a:1d:58:c9:18:80:
38:73:9b:8d:94:d2:3e:b2:15:60:34:e5:6d:67:33:b6:bd:fd:
c4:40:88:1d:dd:88:8f:0c:40:54:ec:5d:7e:59:55:3d:d4:dc:
86:ed:6e:9e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MUZEMjExMC8GA1UEBRMoMjI1M0UwQjI5MUU0MzUwNEE5REEyNjhGREJDQzVBMEUz
MTdFNkNDMTAeFw0yNjEwMjkwOTAwMjJaFw0yNjExMDUwOTAwMjJaMBgxFjAUBgNV
BAMTDTZhZTMwYjI2LTQ2NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCYx1IdGjTIjgWg45MJ+dyb3kqXZMGYY8GidZQqcLaR13rBzMMh9/Ed0cQ5+qj4
CVFEOb4O6LTAA1Yh3yJvDYEIRhS0pr8SqhkpyCGu3vLaBiXiH8qLH+LmBN8GJuY4
jukJ4MDPjRF3Ig2+vb+j1xmkXoWh1n8gdB75r5YWVzNVan2jQ/DFj5y+2ZnAKTet
UbGpROhoODXRbK7yXC9ICccHe3PGPanjcLPcyxvgbVa9iY1z8W8iN9/9BmVQbhMT
LwWfJyvJFtk06fWfly/2C875D6RrdTb6q9FYm9lA+CEai1TxQI8uZ8rfnV7v5/N3
RpoIcGAg5NSV+iYtTMFXZXhHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/ERFIxVA
oE981bbwdELGJpyewxswHwYDVR0jBBgwFoAUIlPgspHkNQSp2iaP28xaDjF+bMEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQxRkQyLzAzQTM2RjMyNTM0
RTExRjE4OERGNjg1OTk1ODMzNzczL0lsUGdzcEhrTlFTcDJpYVAyOHhhRGpGLWJN
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSWxQZ3NwSGtOUVNwMmlhUDI4eGFEakYtYk1FLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQx
RkQyLzAzQTM2RjMyNTM0RTExRjE4OERGNjg1OTk1ODMzNzczL0lsUGdzcEhrTlFT
cDJpYVAyOHhhRGpGLWJNRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCs91qrfm8CDRDFfyPjtUG6ZetCVdt1qLmrPjnws86GMSYHEUgipRLTzRvz1UR2
RsmPQ5qoScPSnjkdvws2lY6ul2jWypBvR7uma1+Q4l404pgU6Wlm9O/HIWXL9wHu
SiSYRQrpQYsaKMsAzbILSyVjo2rKqM+U7WPiBh9tCWkVo9S2lj0T5P3u5Bb7DKdH
pr80bcFgkVsZOlE34MftVAu3B5TtYZTyW8hYlTtZgDFeIdjFAqe9HuenvBulm7MQ
OH9VQp6bvWgDXpdGmaev3DA4lNsqHVjJGIA4c5uNlNI+shVgNOVtZzO2vf3EQIgd
3YiPDEBU7F1+WVU91NyG7W6e
-----END CERTIFICATE-----
Generated at Fri Oct 30 04:09:23 2026 by rpki-client