
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
File: iX261kcCN4pu4YYw4Yv3Whcpgmk.mft (raw, json)
Hash identifier: QXl7y2JwzRDgpyiKZVIvFWj7Rwz2jVRnC2g4T+dzagQ=
Subject key identifier: 85:5F:C9:AC:88:AA:91:D7:BE:13:46:F8:B0:80:14:BC:C4:A1:5E:99
Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69
Certificate issuer: /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269
Certificate serial: 01C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
Manifest number: 01BA
Signing time: Thu 21 May 2026 04:02:23 +0000
Manifest this update: Thu 21 May 2026 04:02:22 +0000
Manifest next update: Thu 28 May 2026 04:02:22 +0000
Files and hashes: 1: iX261kcCN4pu4YYw4Yv3Whcpgmk.crl (hash: yMD7XXn7rhXEl8AK7HifYlvaetr2FYHFIOZuzQ/VGrQ=)
2: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (hash: RzTaCvSWMhcAn1QVwJbuqA3HBhTH7/SoovljwgVLgeA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl
rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8117, serialNumber=897DBAD64702378A6EE18630E18BF75A17298269
Validity
Not Before: May 21 04:02:22 2026 GMT
Not After : May 28 04:02:22 2026 GMT
Subject: CN=6a0e83cf-c338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:a8:ff:01:d2:a7:df:76:62:3f:e2:96:33:
d7:ab:0d:4b:6a:a5:a9:74:2b:37:c2:13:1b:40:ac:
4f:c7:ac:35:8d:5e:77:2b:50:66:d3:fc:65:a0:78:
a3:4d:a9:35:34:79:fd:4b:7c:c0:22:2b:a6:47:f9:
4d:51:a9:59:2a:5d:04:ae:42:fe:9d:d8:5a:70:3c:
df:57:14:9c:a9:55:22:30:83:e6:7c:f3:d5:52:f9:
ab:f6:14:ca:f5:ce:49:15:30:1d:7b:6f:3e:5d:21:
f8:68:7b:9d:5e:4c:4a:ef:e4:7b:19:9e:d0:7c:22:
80:2a:ef:61:e7:9d:ba:f7:29:1e:b5:60:bf:f5:79:
84:2d:d8:02:fa:46:26:24:1e:6f:4e:17:9e:b9:13:
ec:0f:5e:70:07:78:45:03:1c:ef:fc:74:ed:97:0f:
a2:93:4e:d2:4d:05:f7:f7:18:66:ee:1f:52:4f:fe:
f9:cc:75:c6:fa:96:4d:e5:f9:53:a0:06:89:f8:34:
ea:38:7d:c6:57:b5:d7:e0:87:b8:e7:f0:50:ce:7a:
e0:b2:c8:aa:ac:2e:34:00:8f:38:7c:0e:25:0d:cd:
17:09:d3:f3:0e:38:f9:f7:7d:fc:6b:b0:53:09:e0:
9f:da:98:f3:97:c8:10:fa:09:81:83:23:bb:f8:b9:
ff:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5F:C9:AC:88:AA:91:D7:BE:13:46:F8:B0:80:14:BC:C4:A1:5E:99
X509v3 Authority Key Identifier:
keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:33:e9:b7:9e:57:9f:f9:85:ca:29:af:1f:22:83:f7:df:27:
16:bf:a0:04:a8:ca:6b:4a:ad:ae:cf:ef:1b:a2:9f:fc:dd:7c:
32:c7:8f:64:63:62:b5:95:f1:25:cd:95:ef:1a:fa:30:8b:c5:
03:11:a2:25:ed:24:7b:c4:cd:e4:85:cb:50:9a:e1:7e:61:fe:
9f:f6:73:82:8c:9b:87:37:64:40:9f:38:bb:f5:51:9d:46:73:
ad:25:8a:cf:3d:0d:7d:ac:32:81:39:8a:2d:42:8b:76:d5:f6:
b9:88:88:c3:e6:5f:27:a7:03:95:c9:c6:ed:f6:fe:a1:dd:75:
ec:2d:69:30:e5:b8:05:fd:d9:ee:89:f0:87:90:3b:93:29:9f:
3e:74:c5:27:1b:74:3f:2a:b8:42:5a:32:c5:91:7b:b3:37:17:
5e:cc:24:46:f8:ec:f6:72:5f:6c:41:8a:01:2d:9e:cf:98:70:
bc:ea:ff:e8:20:09:5d:64:0c:34:e9:41:d1:95:e6:fe:6d:9b:
ad:ea:ec:25:3f:b6:c4:20:74:a6:c1:b3:84:3a:47:a2:94:92:
65:f2:2f:fe:65:57:45:69:8f:d9:ed:46:3c:c4:b4:53:60:a3:
d3:52:84:7c:64:ce:3e:f8:81:08:28:a3:aa:be:8b:a4:32:e3:
63:20:fb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:39:33 2026 by rpki-client