
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft
File: I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json)
Hash identifier: zVREH8qcNJwPz1UbT3CFAqp8iGAZHE3M4PYLNliVXo8=
Subject key identifier: 97:84:14:27:20:31:C3:28:09:92:24:16:4D:5B:72:BB:E2:F7:66:B8
Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB
Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB
Certificate serial: 19E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft
Manifest number: 19D4
Signing time: Tue 18 Aug 2026 16:31:01 +0000
Manifest this update: Tue 18 Aug 2026 16:31:00 +0000
Manifest next update: Tue 25 Aug 2026 16:31:00 +0000
Files and hashes: 1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: 8i7nbn5oO7p7YJw+nFuIX6nM3lbOKlorENN99IOgYlU=)
2: D421D958881611E78B9B0850C4F9AE02.roa (hash: 8Nuoull25KblVQ1PNDvmoNwHbwhuQ64gaT6vwAXGPpc=)
3: D57C98A88C0311EFAA53FF12C4F9AE02.roa (hash: sk/aWgMAKHJV+S5wciXhAIcHYQF2Px3Gvke4ka59rbI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl
rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 16:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6628 (0x19e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E892A, serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB
Validity
Not Before: Aug 18 16:31:00 2026 GMT
Not After : Aug 25 16:31:00 2026 GMT
Subject: CN=6a8488c5-9e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:87:43:20:5d:5c:7e:1e:19:1a:f1:cf:b0:bc:
21:2c:c1:cd:82:d5:7a:51:19:56:12:0d:d3:89:e8:
23:01:4e:4e:8d:65:c7:e2:c9:93:db:8d:5d:17:75:
02:94:0f:a3:71:e1:68:a5:77:a4:89:08:94:79:3e:
21:d2:0d:a8:15:7f:94:69:ed:8c:c5:33:7b:e3:a8:
a2:2d:95:a3:20:57:1f:96:6c:c8:9b:fa:0a:00:ca:
b0:23:17:9e:8c:10:84:5d:6c:54:f0:b0:61:ac:ed:
7c:80:56:a0:73:5b:ff:b3:ac:ba:4c:e5:13:18:bf:
e4:b5:ae:71:7d:04:fd:05:49:7a:4a:2e:e6:86:e9:
56:11:73:89:81:2e:04:d8:57:cc:9a:33:35:4b:a6:
99:69:d2:78:f9:e6:db:d9:4c:de:0b:a3:24:6f:52:
df:59:20:37:e1:98:05:bc:56:b7:5f:f6:42:2a:1c:
06:ac:2f:14:3a:f7:35:43:a1:97:95:fe:99:96:bb:
b5:69:1a:2e:1d:2f:a3:69:38:af:ff:be:aa:13:62:
73:db:6a:a6:83:46:30:91:0d:c9:10:ca:45:93:94:
f7:07:42:4a:35:10:c5:4f:fe:17:d1:14:94:c2:43:
ce:6e:75:6a:20:85:be:73:1e:4c:7b:6f:f7:51:f2:
0b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:84:14:27:20:31:C3:28:09:92:24:16:4D:5B:72:BB:E2:F7:66:B8
X509v3 Authority Key Identifier:
keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:9e:3d:0b:96:46:11:0d:ca:4a:00:dc:9a:60:26:48:bf:31:
d9:2d:04:45:31:2e:a0:7b:48:2b:e2:bd:06:d1:72:c3:d8:bd:
53:a1:8d:14:22:88:05:ca:30:cf:8e:db:e4:5e:0b:0e:c2:ad:
19:13:a4:6a:6d:4f:08:6f:1d:ed:ab:ff:f4:01:90:18:d3:66:
45:a6:9c:6e:86:e8:46:cf:4d:f3:bc:09:55:64:05:72:0c:f3:
29:1e:02:c1:10:6b:5a:c3:c4:e0:ba:d3:fa:c7:c3:39:f6:f7:
39:7e:f2:5e:b8:a1:31:08:16:00:2c:2a:d3:f1:ce:0f:9f:13:
a7:91:cd:f6:6e:cb:12:1e:50:4d:23:75:d9:51:a3:22:d7:84:
1b:a4:90:5f:64:bf:fc:4a:12:59:ed:ef:fa:0b:10:95:c2:09:
11:f7:e1:91:23:b0:4c:15:0e:6d:d8:2c:25:77:a4:9d:b8:33:
0c:22:f7:02:59:64:3a:34:d0:80:93:c5:93:61:f4:b9:fb:ce:
a6:c4:01:a7:90:84:df:c4:39:c0:6c:a5:6a:03:6c:4c:d1:fd:
b1:81:15:b8:cf:7b:59:c5:ec:03:a2:81:c5:57:ef:1a:d6:13:
34:b7:70:cc:6c:77:70:3a:31:d2:e8:ed:bc:ed:e2:f1:5f:ea:
c7:00:bb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:31 2026 by rpki-client