
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
File: IO0KqyB1C4snqG35iadUv1cm3X4.mft (raw, json)
Hash identifier: GgdeP3c56h5f/iu/+9rtKNoFZw291JjEXw4V7TzvrHA=
Subject key identifier: A3:11:76:67:EE:77:5D:2E:49:C3:0B:B6:CB:14:12:B3:E9:B5:DA:7A
Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
Certificate issuer: /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Certificate serial: 0274
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
Manifest number: 06C7
Signing time: Thu 21 May 2026 00:10:51 +0000
Manifest this update: Thu 21 May 2026 00:10:51 +0000
Manifest next update: Thu 28 May 2026 00:10:51 +0000
Files and hashes: 1: IO0KqyB1C4snqG35iadUv1cm3X4.crl (hash: qKkIQVf+ys7KXfhAXcjrcoZMFzviQCROnzndoBpdZxU=)
2: D9FDBEA0FB5D11F0A7F971C0496F56BC.roa (hash: Wx61e/Tv8ZK5H7v83kwm5JdbJjGGNDdnnszpCWgUdM8=)
3: C7492CAEFB5D11F0B51531C0496F56BC.roa (hash: Cu6/ZN4pLVVwgFBXhJX48sJtoPNZuRZAmRy+tg9HKHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl
rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 00:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 628 (0x274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAB64, serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Validity
Not Before: May 21 00:10:51 2026 GMT
Not After : May 28 00:10:51 2026 GMT
Subject: CN=6a0e4d8b-b4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:9d:f2:d2:26:30:4f:a5:af:03:17:5a:85:
c7:d7:22:b5:4a:03:7d:b8:73:6c:60:6f:93:5a:0a:
26:28:25:02:01:a2:5a:b0:1f:80:2c:dc:3d:76:f2:
79:fa:9a:bc:9b:e6:87:d5:7b:30:28:ec:b3:4a:42:
7f:5f:5e:ef:d6:51:6c:99:4b:6b:93:04:b5:1c:df:
60:2f:e2:72:c2:d3:dc:36:6c:56:00:00:17:9f:f1:
0c:ee:46:03:16:ec:94:d4:39:6b:f2:79:77:c0:40:
1c:54:d7:82:e1:8b:54:91:90:af:40:aa:59:ef:00:
52:b3:10:b7:61:f4:96:c3:7c:8a:52:56:ae:e3:77:
1b:51:a1:52:33:8b:9d:80:e1:a2:cd:3c:aa:64:25:
2d:d2:ba:6f:8c:71:01:aa:51:66:59:6a:14:c5:2e:
cb:8a:1d:23:0a:0b:a4:f6:bc:db:84:30:e1:73:e4:
42:52:98:92:04:ac:58:9b:3d:49:dc:65:34:1e:68:
3e:09:1b:11:48:50:a5:5a:ca:93:38:81:6f:56:18:
fe:9a:e5:62:33:10:8b:59:90:5e:f8:af:f4:98:a0:
25:00:b3:4d:15:a2:c2:80:76:44:4b:ac:89:71:a9:
97:7b:5e:a4:b2:b5:24:14:e0:87:34:fb:c0:e1:ba:
26:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:11:76:67:EE:77:5D:2E:49:C3:0B:B6:CB:14:12:B3:E9:B5:DA:7A
X509v3 Authority Key Identifier:
keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a4:7b:09:9b:a4:6e:33:b0:67:fc:d0:4b:40:7b:eb:ca:84:
da:1f:2f:24:c1:25:5f:c0:af:9b:7d:55:12:01:d3:50:76:c8:
d2:69:7f:eb:e6:ff:be:74:5b:1e:36:af:64:5e:20:1c:44:93:
b9:51:65:db:6d:f1:d3:33:4d:1d:ae:81:c2:ec:42:6b:64:30:
9a:81:fc:c1:b5:9b:93:af:65:1f:89:8f:8c:90:cb:8f:f5:06:
ab:47:dc:19:24:6e:e9:e3:10:3f:d9:9d:0c:59:a4:e2:bd:b7:
13:13:f3:f3:ba:0a:98:bd:62:5c:f0:be:39:b5:f7:8f:f5:72:
a3:7e:41:f9:66:cb:73:3e:9a:eb:1a:31:e3:34:ca:cd:9d:12:
de:79:87:a5:45:31:e4:aa:a3:80:1f:07:ce:19:7f:64:6f:f0:
36:fb:c3:46:57:47:fc:ad:5f:47:90:72:a9:7c:5d:0a:75:41:
24:a8:43:b8:3c:e4:2c:35:b4:ce:27:6b:37:bf:92:be:0f:27:
8d:d8:bf:95:9c:63:aa:0b:1b:c1:bb:98:37:b5:16:b3:16:b5:
67:f8:84:12:4c:ff:c3:76:33:61:5d:39:5e:76:19:47:20:31:
52:70:7b:21:c6:62:ad:f7:ee:6c:44:7a:5f:b6:72:93:96:cd:
b4:bb:be:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:53 2026 by rpki-client