
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
File: i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json)
Hash identifier: AAZHLi2Y1CkwHUPs/nc80NRexMaFjYN84SIdCuqrfPo=
Subject key identifier: 0D:B2:AA:9B:2C:5C:08:5B:87:B9:92:4A:C7:9B:FD:93:89:93:D7:2C
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial: 085E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
Manifest number: 07B7
Signing time: Mon 20 Jul 2026 22:35:19 +0000
Manifest this update: Mon 20 Jul 2026 22:35:18 +0000
Manifest next update: Mon 27 Jul 2026 22:35:18 +0000
Files and hashes: 1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: BBk87dWWKBJW8sehuHDmuYPvV3PkXgblGnF3omU4g68=)
2: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: y2QzsDAAMtUIeIRXNVIyp+738veR++Jv2+SSsvzATjs=)
3: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: +RLs5CzvZXqI61CAHfurXr4hcnlLMlz6cCq54j5zw2Q=)
4: 317095E0A28911ECBC355360C4F9AE02.roa (hash: ebFlaRUmZcQJUtMsrS9rZ+TKHMBWxmuEuoPHS8qzaoo=)
5: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: 23FlzfUUG2o+yV463/MzqJtyKQ1WBczJHj5IsGh6xFI=)
6: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: Z0VkCYZ1R/4kbKogoS7s0rDtQor1LJugR/SNxu4FzT0=)
7: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: bkBhWlpijpoPZQCX/fri8xyFsJ4YVWckTUwmgGDvtWw=)
8: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: Q6rfj53pf8UB4FBvHHs00agRED73Fq/tWE6oYVaqkaw=)
9: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: n0M+4sPO2I1QxTqzwDfkxMGQeXxQFFjm9haxwLReuy4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 22:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2142 (0x85e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Validity
Not Before: Jul 20 22:35:18 2026 GMT
Not After : Jul 27 22:35:18 2026 GMT
Subject: CN=6a5ea2a6-0fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f9:d1:bd:1f:42:89:72:5a:59:3e:71:0d:9c:
24:01:71:37:e2:b2:de:21:19:b0:8c:92:c1:62:6c:
57:9b:b3:a0:1c:d1:3a:e5:9e:b5:b4:aa:25:e9:37:
c8:f7:5b:fc:c0:82:c6:cb:42:a2:81:0b:6b:49:06:
8f:19:a0:95:a3:1b:40:fa:8a:0c:c7:8a:fe:e0:90:
61:26:f7:76:a9:31:08:ad:2b:38:e5:fe:20:9d:e2:
ff:67:8f:8a:36:bc:92:43:6e:d0:10:7f:a7:9d:10:
83:80:74:41:5d:22:9a:df:d4:ce:4b:d7:0b:fc:1f:
30:9f:50:a4:52:0e:f3:b5:4b:7e:fd:26:9c:2f:05:
5c:0a:24:62:d7:4f:fd:99:af:37:10:cb:cd:d4:69:
f4:93:8d:f1:83:6c:6c:ed:00:39:ea:74:1e:8b:a1:
11:2e:6e:d6:75:9a:a4:00:1d:3d:f5:bb:6d:ce:fb:
5b:8c:e9:1b:fa:d0:0c:33:3e:57:64:b3:a6:fa:73:
66:e3:bb:83:6f:13:2a:ee:74:d2:a7:f9:43:fa:5b:
e1:98:f1:80:22:c4:84:c3:b5:92:49:82:f1:b7:c9:
23:e4:ad:01:9f:8c:79:ca:70:d1:1f:42:be:c8:03:
ca:9d:0f:e2:af:74:dd:a3:fd:e8:4a:d1:6a:b4:c9:
d8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B2:AA:9B:2C:5C:08:5B:87:B9:92:4A:C7:9B:FD:93:89:93:D7:2C
X509v3 Authority Key Identifier:
keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:4f:57:d6:a7:d3:61:b6:57:89:88:8a:2d:3f:35:e6:26:58:
5f:f3:9d:e3:96:3c:bf:4a:d1:86:76:8d:e0:0d:3f:43:0c:cf:
2e:78:13:93:52:22:2c:7b:10:da:e3:f4:95:69:a9:de:54:78:
dc:9a:84:ad:71:6e:1d:05:36:cc:38:60:4a:39:49:22:cf:79:
8d:19:2f:cc:f0:0d:d7:ea:6a:97:23:9b:ac:cb:8b:ca:77:b0:
8a:7e:db:49:9e:e6:06:7d:50:cb:b2:d3:f4:de:6b:e1:fd:93:
16:48:7f:37:6c:d3:9e:35:26:a9:de:d5:0e:ea:5a:b1:9d:27:
41:f2:bb:bc:ac:8d:04:75:2e:06:41:87:44:59:1a:ac:87:0c:
a3:34:80:df:19:e4:fc:74:de:84:a1:47:03:a4:2c:29:e8:ff:
fa:a6:c0:e4:af:b8:3a:79:87:b3:47:0c:eb:f3:20:31:a3:59:
06:8e:1c:ac:14:fb:af:80:15:3b:2c:c5:db:77:1b:b0:8f:e3:
df:17:96:e4:34:e6:10:58:d4:cc:59:14:6e:e0:d0:fd:d5:4b:
f4:f8:cd:2f:0a:f0:cf:bb:02:d8:d9:bd:06:89:e9:2d:c0:49:
19:59:f5:45:d3:a9:cb:1d:d3:f9:f7:1e:3f:5f:d3:c3:ed:79:
a7:b0:96:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:39:25 2026 by rpki-client