
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
File: i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json)
Hash identifier: VkMlt/QKISIlaVR11Ar33uHBMal6MqMyAmUPDdt951s=
Subject key identifier: 55:46:69:7D:C9:16:5D:3E:8F:2A:EA:85:DA:5D:8F:27:BF:6C:F3:7A
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial: 0847
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
Manifest number: 07A0
Signing time: Thu 04 Jun 2026 22:04:20 +0000
Manifest this update: Thu 04 Jun 2026 22:04:20 +0000
Manifest next update: Thu 11 Jun 2026 22:04:20 +0000
Files and hashes: 1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: 3HDN8RsCH7nz81g+IFXMvm3m3s/dTpGxtXJvQ4ZMwLc=)
2: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: 23FlzfUUG2o+yV463/MzqJtyKQ1WBczJHj5IsGh6xFI=)
3: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: Q6rfj53pf8UB4FBvHHs00agRED73Fq/tWE6oYVaqkaw=)
4: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: +RLs5CzvZXqI61CAHfurXr4hcnlLMlz6cCq54j5zw2Q=)
5: 317095E0A28911ECBC355360C4F9AE02.roa (hash: ebFlaRUmZcQJUtMsrS9rZ+TKHMBWxmuEuoPHS8qzaoo=)
6: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: Z0VkCYZ1R/4kbKogoS7s0rDtQor1LJugR/SNxu4FzT0=)
7: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: n0M+4sPO2I1QxTqzwDfkxMGQeXxQFFjm9haxwLReuy4=)
8: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: bkBhWlpijpoPZQCX/fri8xyFsJ4YVWckTUwmgGDvtWw=)
9: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: y2QzsDAAMtUIeIRXNVIyp+738veR++Jv2+SSsvzATjs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 22:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2119 (0x847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Validity
Not Before: Jun 4 22:04:20 2026 GMT
Not After : Jun 11 22:04:20 2026 GMT
Subject: CN=6a21f664-b356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:93:8c:ee:9e:96:7b:87:ce:f0:30:58:92:
37:d4:3e:ad:b8:e7:85:5c:bd:89:df:ae:63:89:8e:
a2:c1:da:a8:a2:b4:4d:1c:ef:c0:a9:4d:db:53:5b:
4a:76:4c:53:4b:1a:b1:63:12:f7:aa:b9:c2:f8:8f:
ba:1f:20:94:b6:bb:6f:24:14:18:a6:94:29:9d:7f:
a3:98:76:57:bd:e6:77:be:9b:8c:68:b7:40:16:6a:
01:28:d9:f4:96:64:3d:3f:6f:a5:1d:fa:67:98:aa:
c0:b7:cb:4f:85:96:af:45:48:71:ab:a8:39:62:1b:
20:49:62:04:b7:f9:27:f9:67:e4:0b:a6:47:88:ba:
68:e2:b6:00:cb:c2:6f:61:a9:14:55:e2:69:c9:c6:
ec:59:65:b1:93:43:a2:ef:3c:43:02:b6:46:b8:97:
26:3d:0c:80:eb:9f:61:cf:32:01:17:b9:23:4c:a6:
2a:d7:40:90:1b:10:41:a0:87:f1:a4:85:63:bb:b4:
af:d5:f5:d4:39:41:44:53:16:5a:15:ba:3d:be:0b:
e0:54:6c:56:0c:10:e6:2f:02:ac:ee:b2:4f:5f:72:
1f:a2:08:3d:b2:7a:fb:e1:58:30:bb:e4:df:be:68:
14:e3:da:7e:e2:c0:9b:4d:bc:14:76:d9:52:1f:7d:
32:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:46:69:7D:C9:16:5D:3E:8F:2A:EA:85:DA:5D:8F:27:BF:6C:F3:7A
X509v3 Authority Key Identifier:
keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:0b:4a:51:22:cb:ad:6c:0e:49:1a:ac:7a:ba:93:91:4c:ca:
f7:0a:27:95:c3:0e:76:3c:17:08:1a:d8:66:84:99:8a:ce:48:
37:8c:11:7e:dd:b4:a1:ad:d8:52:24:79:81:78:25:8f:06:8a:
07:a5:60:87:11:9e:8d:db:14:cc:f1:43:de:3a:9a:57:2f:41:
10:8e:e5:a5:12:0a:3f:05:22:9d:0f:ad:f3:76:b2:be:95:3a:
96:d4:53:74:4e:f8:f1:48:2a:36:c6:e1:dc:ef:95:0e:24:1e:
a6:ef:1e:e2:f4:6f:05:37:e1:a4:bf:18:a5:38:90:a3:6e:8d:
0c:84:7d:b7:be:47:1b:c7:ed:de:e5:de:b8:08:af:9b:46:e7:
89:4f:72:eb:01:d6:99:55:52:57:04:4e:d3:18:5e:d8:ce:33:
0a:a3:16:2e:b2:fa:f1:71:6c:22:3b:04:b8:f5:33:d2:ed:27:
2b:b3:3e:cf:9e:50:be:99:4a:66:a9:e6:6d:97:f0:e2:49:9e:
1e:75:64:75:cb:6d:04:21:1e:b0:05:7d:72:87:1b:69:c4:a7:
53:cb:d5:f4:c9:57:76:3b:3a:a9:ac:32:b6:e6:4e:c6:bb:bf:
02:71:cd:a2:10:c9:8f:3b:a1:5d:66:4a:91:85:9f:f2:4c:ba:
22:4d:9d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:02:41 2026 by rpki-client