
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft
File: iQoeXMwexsfOHqcfSRKRH1mShrI.mft (raw, json)
Hash identifier: 284lqlv2dCT2xgVvJMbDGiuj2jfsDegbnhWbaHBuCiE=
Subject key identifier: 60:7C:CE:05:66:C2:18:7D:4E:16:7D:4B:D1:1A:B4:DE:24:F8:3F:70
Authority key identifier: 89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2
Certificate issuer: /CN=A91E2234/serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2
Certificate serial: 3581
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft
Manifest number: 3581
Signing time: Tue 06 Oct 2026 14:50:06 +0000
Manifest this update: Tue 06 Oct 2026 14:50:05 +0000
Manifest next update: Tue 13 Oct 2026 14:50:05 +0000
Files and hashes: 1: iQoeXMwexsfOHqcfSRKRH1mShrI.crl (hash: Cl5O6LEkbPjudeuTY2sGgJUhUHVNhiwEICPww/4v34Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.crl
rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13697 (0x3581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2234, serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2
Validity
Not Before: Oct 6 14:50:05 2026 GMT
Not After : Oct 13 14:50:05 2026 GMT
Subject: CN=6ac50a9e-0250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:88:31:3b:3a:66:a3:e5:60:b7:a9:5d:11:
78:79:fc:77:7d:74:cd:dd:e5:66:6f:b7:c1:b0:08:
36:24:33:62:3b:4b:3f:5d:b7:eb:91:ad:fa:3a:5d:
a6:a5:68:d1:f6:86:ca:39:04:b0:2d:cd:fa:7f:4a:
58:9a:d8:2c:1b:22:92:8d:19:5a:8b:05:d0:f4:c4:
e5:9f:39:90:d4:46:f3:37:99:d8:76:1b:47:52:16:
fb:f2:e7:43:20:88:65:c0:26:a6:37:8e:db:a2:64:
44:ce:d5:e0:d2:63:42:dd:06:ac:23:aa:db:19:e8:
69:98:ad:9a:0e:35:60:05:a4:81:cd:bc:e7:eb:17:
67:3b:41:b1:39:55:41:3d:fd:5a:1e:36:d3:9b:7e:
b2:fb:7f:26:79:f3:48:20:54:23:48:c2:31:a2:c2:
85:10:98:c8:0f:07:2a:40:0d:5e:ea:a0:7c:fb:ab:
76:68:01:03:6f:6f:47:d9:f9:c9:d7:ea:c8:d6:a9:
73:74:28:ff:aa:8e:2e:40:18:dc:4d:58:95:35:8b:
e0:81:32:02:52:1e:f5:ad:9c:d4:53:73:0d:57:28:
9c:11:26:ac:8d:92:28:cf:90:91:ef:91:07:b6:7a:
6d:09:4d:73:1d:b2:a2:1d:bf:fa:b7:5c:0c:bc:bd:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7C:CE:05:66:C2:18:7D:4E:16:7D:4B:D1:1A:B4:DE:24:F8:3F:70
X509v3 Authority Key Identifier:
keyid:89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:97:88:12:10:7e:62:9a:c1:c0:d9:0e:37:13:db:15:bb:4a:
13:4d:55:16:48:a2:bf:89:04:57:21:bb:bf:20:ef:35:37:c2:
41:af:2e:e1:82:b8:2a:f7:4a:24:2f:15:18:cf:98:51:e5:c8:
80:11:de:e2:13:e9:3d:91:1d:35:94:89:e6:27:e9:ed:9a:dd:
78:2c:07:57:9c:cd:94:6b:69:22:4d:4e:6c:f7:1a:0e:cc:57:
de:a9:ac:c1:0b:83:79:24:c4:a7:e0:8f:6e:bc:5b:3a:1f:4f:
4b:a2:46:e4:40:cb:02:09:46:76:2a:96:00:86:a3:b0:30:ba:
f7:4e:1d:47:bf:b8:55:62:59:60:87:2a:ff:0c:39:ea:8b:e6:
5c:ba:fd:01:11:23:8f:a1:04:30:83:05:28:ed:1e:c4:24:2f:
f4:13:74:b8:7c:a5:2c:0c:a7:6f:1a:11:60:aa:4c:60:41:1d:
85:1a:0f:b7:06:0f:8f:bc:ab:42:c3:25:49:4f:2d:a7:64:ca:
d5:93:69:b0:93:4a:c4:11:bb:2f:5e:c1:26:07:6e:c3:e4:56:
72:d4:25:83:d5:19:50:14:70:d8:e4:64:83:85:c3:1e:f4:1c:
15:9e:90:79:28:d2:b4:8e:00:29:cb:33:c4:27:d6:c7:71:aa:
29:e5:02:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:11:30 2026 by rpki-client