
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft
File: iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft (raw, json)
Hash identifier: 1N9fJvQMdq2lFVIT8PRlODQsuTbulxVonzu6mWAdc2s=
Subject key identifier: 7B:F1:60:69:E8:05:00:7E:06:EF:E9:D3:97:E4:A6:93:C9:C1:D5:BA
Authority key identifier: 89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70
Certificate issuer: /CN=A91D8185/serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70
Certificate serial: AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft
Manifest number: AA
Signing time: Fri 17 Jul 2026 08:25:47 +0000
Manifest this update: Fri 17 Jul 2026 08:25:46 +0000
Manifest next update: Fri 24 Jul 2026 08:25:46 +0000
Files and hashes: 1: iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl (hash: lLwUpYSbhCaPMT0fDlHjoF8yOUTJwJSowf4+x+6Koog=)
2: CC2C3CB684AC11F0B7B8977DC4F9AE02.roa (hash: MctOJZfpNmGzytE5FJJXm650+JtZjVtwencqZk15AMs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl
rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8185, serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70
Validity
Not Before: Jul 17 08:25:46 2026 GMT
Not After : Jul 24 08:25:46 2026 GMT
Subject: CN=6a59e70b-a666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:07:d5:07:a0:2c:4c:ff:a3:2f:5a:e6:07:54:
c5:85:d3:a2:cb:58:de:ba:06:cd:68:15:eb:36:5b:
15:eb:b9:21:f7:80:9f:6f:00:07:49:22:6c:05:6f:
3b:89:76:82:3d:aa:6c:c1:c7:e6:13:d4:9e:18:4d:
3b:25:2a:f5:9c:b0:be:98:3c:25:9a:f0:ce:71:94:
19:2d:b9:d2:c9:a1:c7:8b:75:9b:2f:8c:9e:33:45:
da:1b:36:02:e0:91:20:d1:be:bc:8c:1a:00:82:17:
1b:ff:12:5d:83:1c:4b:d0:d9:c2:47:9b:d9:a1:d6:
d6:68:ec:10:40:40:ee:02:85:b2:7c:b7:a8:af:68:
d4:d9:a1:90:dd:b0:84:a7:1d:e9:a4:5c:d6:57:5d:
89:4e:53:56:2a:0d:83:f3:97:c8:b6:45:21:c3:6f:
cd:ff:92:65:01:11:9e:27:33:0b:3c:c7:ba:30:1c:
a1:a9:7d:ed:43:ae:57:84:e7:be:b1:ca:8c:32:66:
9e:1d:8e:d2:92:1a:ee:a9:bd:07:43:e9:46:b5:6b:
43:d6:32:92:75:71:1c:9b:fa:d9:da:cc:f1:62:4f:
89:47:d0:e5:8b:19:b1:9b:0e:eb:f1:3a:b5:c7:d5:
a4:e1:bf:6b:2c:e8:65:ce:15:4d:03:8f:1b:57:2a:
cb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F1:60:69:E8:05:00:7E:06:EF:E9:D3:97:E4:A6:93:C9:C1:D5:BA
X509v3 Authority Key Identifier:
keyid:89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:1a:32:3a:35:71:e3:25:ba:2c:36:9d:30:42:f0:07:0f:56:
57:41:e9:68:c6:bb:dc:fa:3b:bb:d7:c4:3b:14:57:4b:72:01:
3a:c2:2a:a3:57:d9:98:c0:79:bc:54:3d:2b:e4:8a:c5:f3:ee:
e8:44:bf:d0:ec:44:e8:11:d5:60:55:fe:ce:b1:dd:71:76:c6:
99:08:ec:89:4b:cb:fa:42:91:ac:1a:6e:62:e2:0a:a7:99:8c:
f8:1c:12:68:4b:b9:12:71:61:6e:06:19:8c:51:93:8f:f6:88:
32:c7:b7:f4:9f:e4:8c:a1:0b:11:ac:78:39:18:a5:05:d3:54:
fa:86:11:a5:06:0a:72:c2:9d:a5:a3:9f:79:1e:60:c3:26:6b:
16:eb:38:22:49:2a:86:39:11:3a:d1:4e:58:1e:24:9d:40:6a:
d9:b0:19:e8:cf:6c:2e:5d:c8:54:f3:67:17:e3:78:1b:c1:e9:
5d:af:3e:eb:08:a6:67:7c:f8:34:d3:f6:9f:65:5b:bb:d3:c7:
d8:99:95:4b:e9:63:c4:4c:95:f6:37:29:2b:b4:18:84:6b:56:
8c:e9:7a:98:c3:2f:19:3b:f4:bf:59:3e:bd:08:c0:9e:c5:66:
d5:2f:5b:69:78:31:38:ed:5d:fd:c3:8b:d3:aa:68:93:2b:cd:
b3:df:b2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:12:47 2026 by rpki-client