
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft
File: IHitW73x1MW5cLvik02aNV2zHOg.mft (raw, json)
Hash identifier: +Y031ue8pKV4wlHfR6iMp2MLXaOE7uY8MudtwtHEU5U=
Subject key identifier: AD:05:1F:C4:10:BC:C1:69:A1:65:74:E7:87:9D:E0:5E:86:72:F9:FD
Authority key identifier: 20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8
Certificate issuer: /CN=A91E4DFA/serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8
Certificate serial: 05A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft
Manifest number: 0596
Signing time: Sat 18 Apr 2026 23:09:07 +0000
Manifest this update: Sat 18 Apr 2026 23:09:06 +0000
Manifest next update: Sat 25 Apr 2026 23:09:06 +0000
Files and hashes: 1: IHitW73x1MW5cLvik02aNV2zHOg.crl (hash: mo+l6TIlh61h3gz6Btf6LwaqHqEqhUvpkLb1sJLSxJQ=)
2: 6D506318F1E711F0A2FD0FF1416F56BC.roa (hash: 0zuqIS8hbfV5A711MSih3uxG9p+AWNnca2aMV8NXs2I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl
rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 23:09:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1444 (0x5a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4DFA, serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8
Validity
Not Before: Apr 18 23:09:06 2026 GMT
Not After : Apr 25 23:09:06 2026 GMT
Subject: CN=69e40f12-bf93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:85:22:1b:da:1c:05:dc:90:6f:47:53:a6:
d6:3f:d1:7a:25:d9:a3:4a:22:d7:56:8d:0e:8f:e9:
79:66:91:1c:64:37:24:dc:f6:41:46:c2:cb:85:2a:
81:40:57:95:04:8e:6b:46:ef:d4:06:07:02:bd:36:
08:58:30:e0:87:95:3e:96:81:05:7e:2a:7b:f7:fd:
fa:6f:51:f4:82:ec:c2:41:39:9d:d7:83:ea:e2:fa:
60:6c:d8:67:a5:a9:f2:c4:3a:42:74:79:35:f2:f2:
6b:53:90:cb:c5:b0:fc:95:dd:e0:53:40:75:f8:4e:
8c:49:76:2b:00:07:2e:56:03:55:ff:c4:c7:e2:23:
56:07:e5:92:2d:3c:8f:18:43:31:2f:be:41:0b:96:
1b:f3:70:28:8d:c5:46:72:b1:91:8e:75:d8:b0:b9:
60:32:e1:b6:cf:17:e5:15:f9:5e:d7:e2:9e:f4:6a:
75:af:5a:9b:6b:45:ec:fb:1a:18:7a:c3:ca:be:22:
42:14:5e:d6:24:85:50:04:18:81:f8:a9:a1:ef:a5:
8f:30:56:97:ca:24:50:2c:17:f9:ae:27:f6:76:8e:
03:81:f1:4a:18:fc:53:10:2c:fc:87:a4:9c:fe:93:
96:64:4e:ba:9c:4f:85:c3:49:89:50:58:13:57:78:
6f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:05:1F:C4:10:BC:C1:69:A1:65:74:E7:87:9D:E0:5E:86:72:F9:FD
X509v3 Authority Key Identifier:
keyid:20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:0e:f3:f5:59:30:b6:14:96:87:37:27:4a:75:ab:50:97:5e:
89:be:00:0c:bb:3b:9b:bb:76:fd:aa:9e:8d:00:d9:e8:95:53:
c8:c4:83:56:fa:c4:57:22:50:0b:92:80:2d:c1:d8:8c:3a:6a:
6f:fb:b6:d3:4a:40:9c:d2:c4:60:24:6d:93:08:77:7a:62:cf:
9a:3f:3c:4f:d9:05:52:c9:ce:7b:eb:50:91:f7:de:1c:bb:b3:
77:b9:15:1a:f9:49:5b:7b:2e:9a:81:ca:3f:ea:93:10:a2:c4:
cf:b9:e9:65:2e:d5:42:1e:d1:be:3f:46:3e:c0:ae:4e:ed:06:
62:d0:d5:31:99:01:e4:37:ee:47:64:53:59:6f:43:fc:3d:ab:
6a:23:2b:68:01:f1:14:90:1f:94:d8:2c:7b:e6:48:8d:85:90:
fb:ce:61:1d:04:6b:82:21:b0:86:d1:3c:0e:fc:1f:42:f1:05:
be:51:b3:64:2b:b7:f1:98:06:88:ec:c6:2a:06:70:38:1d:c4:
01:cd:99:77:52:59:57:a1:07:55:ff:9e:62:5c:94:ad:21:f3:
21:09:68:b5:6d:08:bc:34:04:76:ea:cc:f3:1f:00:f0:b5:14:
a6:6f:b1:49:7e:10:79:a6:48:65:2d:58:c4:ea:75:7a:d8:cf:
b4:b6:a5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 07:26:13 2026 by rpki-client