
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
File: iH554lttHTfvHzG8WgIy-OdlFUU.mft (raw, json)
Hash identifier: j24/qbzeuXz+kihN4wN2XE0qGLsxZbqKnCtOXXd67lM=
Subject key identifier: 71:0A:6E:43:C5:AF:7F:0B:CE:E3:B3:A9:03:0E:12:6A:CD:A0:C1:80
Authority key identifier: 88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45
Certificate issuer: /CN=A91D9F5A/serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
Manifest number: 094C
Signing time: Fri 04 Sep 2026 20:41:52 +0000
Manifest this update: Fri 04 Sep 2026 20:41:52 +0000
Manifest next update: Fri 11 Sep 2026 20:41:52 +0000
Files and hashes: 1: iH554lttHTfvHzG8WgIy-OdlFUU.crl (hash: K8LvxEzYpCrHwHPGPMnjtSSD3/N9ZsbuZz6wDUqTZL8=)
2: CEFEDAB26B3D11F0A0837D7FC4F9AE02.roa (hash: B8m2ePIUCgEMFkUqEdw865bj5KYfUZe6gW5FvbGFIPQ=)
3: CF6A89D86B3D11F0A0837D7FC4F9AE02.roa (hash: w4kX8b17fTC2s9BhESajxJlKj2QyQzvAORehV2EbPSs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl
rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 20:41:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9F5A, serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545
Validity
Not Before: Sep 4 20:41:52 2026 GMT
Not After : Sep 11 20:41:52 2026 GMT
Subject: CN=6a9b2d10-d465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:de:da:0f:f7:2f:35:84:35:df:23:c6:d4:
bc:80:cb:1e:79:1e:45:8a:23:69:75:af:09:36:1d:
9b:35:b9:fd:fc:58:64:0a:94:64:f6:ac:98:63:3f:
0f:c4:60:33:cc:77:d8:00:5c:d4:c2:11:4b:30:6c:
c2:be:92:78:75:97:13:98:99:7f:48:09:f6:fc:96:
59:fd:cf:c4:82:10:e1:21:99:7e:3a:c2:b2:0a:85:
65:35:05:5e:bd:32:5b:5c:6b:ee:f5:6c:21:e0:e2:
4e:f6:bd:7b:51:e7:e1:ca:a1:29:f5:21:17:0d:9f:
9c:16:43:7e:7e:8f:6f:9d:35:4b:3f:e6:db:ec:d1:
2b:be:44:fe:5b:a8:31:aa:a9:8c:65:0c:06:be:ca:
9d:27:63:4a:58:db:fb:d1:4f:b5:0a:04:6d:24:a2:
be:34:61:b4:a1:69:b7:25:30:96:b4:6d:fc:29:53:
49:b9:01:6b:a6:d5:27:47:dc:3a:36:81:a3:5f:72:
8c:ab:06:c8:7e:8b:cc:e3:08:18:8f:0a:76:3e:4e:
39:44:56:97:d9:ba:19:ba:50:69:56:ce:52:ca:f5:
ad:d7:62:5b:1b:7e:12:40:fe:c4:77:b4:a9:7b:62:
c5:4c:9d:9e:1c:0f:a5:f5:29:7c:1e:dc:02:4c:60:
c6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0A:6E:43:C5:AF:7F:0B:CE:E3:B3:A9:03:0E:12:6A:CD:A0:C1:80
X509v3 Authority Key Identifier:
keyid:88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:78:cf:46:bf:37:10:53:94:f0:cb:35:ad:b4:6a:10:f2:0e:
31:60:2f:a4:e7:11:59:62:d3:a3:dc:84:65:25:29:4e:96:fb:
f4:04:c3:78:bc:13:c4:7b:1d:fa:58:c9:30:1d:5f:dd:3d:1c:
3b:99:06:59:a5:7b:8b:bc:5a:66:d6:0f:24:32:56:08:0b:63:
38:ac:d3:da:f3:6f:04:94:a6:bd:93:5d:4b:bf:c7:21:cb:e1:
84:65:a9:b1:45:ed:fc:c6:6b:19:7d:08:98:c1:bf:c8:81:90:
b8:41:ff:0c:df:47:9f:c8:ff:c5:df:96:33:1a:ea:78:d0:7f:
c9:e2:f8:3d:92:55:dc:57:d3:40:6c:e2:bd:c4:2b:0b:49:62:
b8:75:4f:54:ec:8a:e6:79:45:37:85:1b:bf:41:0d:dd:56:2a:
d6:dc:a1:f1:54:d0:13:e5:ef:4f:8a:cf:3d:a4:dc:e8:f3:c1:
2e:e5:a1:a9:bd:b8:48:39:ce:eb:b9:9c:ed:87:c8:67:3b:0a:
0f:f5:86:41:98:cb:03:29:8a:24:6e:59:c0:97:20:7a:40:7b:
aa:fa:dc:37:07:31:c4:a0:44:57:49:40:69:f7:a9:07:6c:78:
0d:c6:c4:c5:06:30:a3:21:39:0a:6a:95:01:0b:0d:78:82:9e:
0a:20:3f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:18:36 2026 by rpki-client