
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft
File: IHitW73x1MW5cLvik02aNV2zHOg.mft (raw, json)
Hash identifier: PblWUm1Q8VPd7y16EuC0eXvz/EF9GOUJ6HydqJhfUbQ=
Subject key identifier: CA:D8:9F:27:BF:42:3F:C0:C4:69:C6:D9:D2:D4:7A:9E:B1:BF:9D:57
Authority key identifier: 20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8
Certificate issuer: /CN=A91E4DFA/serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8
Certificate serial: 05C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft
Manifest number: 05B3
Signing time: Sun 14 Jun 2026 23:12:14 +0000
Manifest this update: Sun 14 Jun 2026 23:12:13 +0000
Manifest next update: Sun 21 Jun 2026 23:12:13 +0000
Files and hashes: 1: IHitW73x1MW5cLvik02aNV2zHOg.crl (hash: 7RSo6u7D1Z+dEecubzWKuE9t0YBN79Jz5Z4IGoaO6L0=)
2: 6D506318F1E711F0A2FD0FF1416F56BC.roa (hash: 0zuqIS8hbfV5A711MSih3uxG9p+AWNnca2aMV8NXs2I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl
rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 23:12:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1473 (0x5c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4DFA, serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8
Validity
Not Before: Jun 14 23:12:13 2026 GMT
Not After : Jun 21 23:12:13 2026 GMT
Subject: CN=6a2f354e-9870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:35:84:de:43:47:fe:bd:3a:78:bf:03:25:3a:
d7:47:7b:5f:05:3a:22:8d:17:4f:23:55:df:ae:3f:
ab:35:6b:5e:78:4e:46:82:b4:4a:b1:1f:bd:ac:00:
5d:40:8d:22:aa:05:57:16:33:30:2d:6e:24:5c:43:
dd:7a:bc:38:f7:2d:95:15:82:5a:67:35:a5:00:25:
2e:fd:c7:39:55:23:ef:25:82:af:12:cf:dc:65:81:
d1:0b:6a:11:9b:0f:71:c0:8a:8b:04:e4:a1:0f:be:
39:88:36:5e:14:68:11:01:87:c4:37:09:dd:12:fc:
1f:6c:ab:21:20:35:f9:66:2c:eb:be:d8:0c:83:5d:
f0:fb:d2:1b:5a:ec:70:13:2a:01:05:8b:b8:7c:9e:
ee:15:9b:b1:e4:50:7f:b4:98:5f:9f:aa:cc:59:7c:
5b:c4:46:f5:d9:b6:01:22:66:07:8a:50:8f:59:77:
25:a4:3a:c0:b1:f6:5e:a8:83:95:18:a6:f3:67:1e:
01:fa:48:cc:4c:9b:72:90:75:a8:a7:76:a8:e3:76:
50:8b:18:b0:6d:5a:b8:bd:a1:2e:38:81:26:e8:50:
20:1b:eb:15:53:fc:6f:47:c4:8e:e3:f5:3b:45:5a:
ee:a0:05:ae:dc:3c:19:d3:cd:df:0e:c2:d7:4c:59:
84:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D8:9F:27:BF:42:3F:C0:C4:69:C6:D9:D2:D4:7A:9E:B1:BF:9D:57
X509v3 Authority Key Identifier:
keyid:20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:77:2f:a8:f0:d2:97:b2:1f:4d:6d:16:89:40:03:b6:30:56:
28:17:10:38:09:40:04:80:fa:2f:b6:f5:d0:3e:bf:a0:0c:ad:
fc:60:90:a3:05:83:50:a2:e1:a2:06:b6:29:c3:3d:96:bf:66:
20:ee:01:48:06:e5:e9:ed:45:74:f5:5d:09:dd:37:38:dd:b5:
a1:5f:90:4e:9d:c3:0a:a0:70:22:dc:eb:fa:0d:d0:0e:73:76:
66:26:6f:78:7a:43:9a:42:04:29:ee:64:1a:7a:dc:e2:f6:33:
e3:1b:95:99:81:38:08:55:9f:34:2d:a7:da:08:b0:9a:26:6d:
bb:f6:86:38:ef:d1:95:69:25:d8:9d:a5:96:ea:da:8d:ee:a8:
ee:da:14:20:ad:97:a7:c6:27:5a:b8:82:ac:a3:ef:63:65:f8:
ea:c2:cf:7f:9c:fe:d6:15:e3:c9:76:96:ca:55:4f:8d:02:a0:
e5:a9:99:b7:34:82:5d:84:19:56:c3:1e:cb:7e:93:59:82:86:
52:f6:da:eb:f7:c7:96:c0:5f:64:21:e9:bf:87:d7:2e:86:d4:
2a:f4:56:98:9e:d8:83:ea:31:55:ca:30:10:e5:d0:84:39:9d:
fb:c7:a7:6e:03:a7:9e:3e:ef:39:61:25:ce:aa:8f:f2:9d:01:
26:55:28:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 16:07:10 2026 by rpki-client