
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
File: IQlGzanedd75YJiV-_Ie2Exy9Oc.mft (raw, json)
Hash identifier: ADQ2fKoJ6+nqM9zEFwaRrD9dvZ7Vm5qrHHDr3zbjvSY=
Subject key identifier: E0:EA:0B:B6:BD:4E:14:2F:12:2B:46:7D:00:E1:F6:02:00:C6:98:C4
Authority key identifier: 21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7
Certificate issuer: /CN=A91F7537/serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7
Certificate serial: 010C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
Manifest number: 0108
Signing time: Sun 05 Apr 2026 05:29:23 +0000
Manifest this update: Sun 05 Apr 2026 05:29:23 +0000
Manifest next update: Sun 12 Apr 2026 05:29:23 +0000
Files and hashes: 1: IQlGzanedd75YJiV-_Ie2Exy9Oc.crl (hash: 9VvV1plD4Huljr8IULurhiSauayMjG+9sZsTGY18LME=)
2: 6156C7F6A27311EFBF7D5E22C4F9AE02.roa (hash: vy7IODG07pz73pTj0pY/9n2zcuO8v2L2DLhKfTMR+yA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl
rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7537, serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7
Validity
Not Before: Apr 5 05:29:23 2026 GMT
Not After : Apr 12 05:29:23 2026 GMT
Subject: CN=69d1f333-c854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ff:d3:c0:5e:13:60:b5:f4:df:67:06:8c:de:
ea:ee:c6:4b:f9:3d:e0:4f:12:f0:48:95:c3:82:fe:
a3:9c:b0:08:ee:c7:de:84:da:a8:cd:db:1c:39:2d:
d4:93:a6:df:07:10:7a:5e:63:e0:67:84:01:f6:f5:
8d:ed:24:b3:9f:87:0a:ba:0d:d2:22:25:50:a4:b5:
0c:f5:bf:18:a3:97:fd:56:6a:30:b8:51:91:01:b9:
52:d5:dc:7c:1c:00:d2:7f:36:8c:63:12:10:37:cd:
d7:28:ed:17:14:61:91:7f:44:f3:f9:bf:33:6b:22:
49:54:d0:9d:af:3a:09:5c:82:ae:2f:74:8a:82:a4:
d6:48:7a:1a:4e:0c:f8:4c:62:d1:a1:61:7e:b9:35:
52:54:d1:3c:8b:d9:61:3b:fa:b4:32:8e:be:46:53:
62:72:09:ef:43:aa:31:a8:a7:5c:b5:70:1b:da:79:
81:1b:87:77:53:8e:f7:8f:c1:22:28:a8:4f:62:95:
d0:3f:9b:ff:df:0e:c5:43:fd:a7:96:b5:71:35:a6:
17:37:8b:86:bc:d8:11:f3:d6:fe:8c:57:9a:de:c3:
c3:8d:0b:e4:71:cc:6a:b6:8b:02:61:2c:d3:5c:22:
fb:13:29:e6:b2:76:f0:45:86:e1:83:0d:85:88:70:
14:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EA:0B:B6:BD:4E:14:2F:12:2B:46:7D:00:E1:F6:02:00:C6:98:C4
X509v3 Authority Key Identifier:
keyid:21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:28:ce:3d:f2:8f:0b:26:bd:4f:13:cf:41:73:c4:a8:57:73:
e2:3f:bd:c1:55:69:4a:e5:f7:39:d9:02:f1:9e:0e:87:ff:d8:
e2:39:da:6f:50:63:63:1a:98:81:f0:b1:c2:59:98:6a:7a:f1:
a4:24:da:81:78:ca:68:52:4c:05:8f:0a:73:ce:6b:87:6a:d3:
99:39:54:89:b7:94:40:52:b4:7d:34:f1:c2:49:21:47:46:d4:
69:5a:19:0b:32:4e:3b:d4:f4:6f:5e:d2:c7:fc:78:77:de:4f:
f9:f6:45:43:21:2b:97:7b:4a:1e:4e:e4:b4:8e:f5:e8:87:32:
29:ab:b6:d6:ca:a7:04:95:4d:c2:cf:b8:11:ac:0f:59:31:59:
3f:38:23:e9:43:1d:b7:d1:8c:97:24:47:02:44:5a:d4:82:72:
70:00:87:76:16:0f:ce:05:1b:88:55:28:1c:67:78:9b:66:9c:
70:34:04:44:dd:dd:11:ae:0f:4a:78:ff:2d:5b:69:c5:8c:55:
f3:03:d9:f6:5c:8b:0e:7c:9b:30:87:98:83:a1:53:51:23:04:
04:93:ad:78:2d:ca:4c:7c:c1:de:c3:ae:78:bf:03:de:a8:51:
d6:62:a1:3c:cf:72:35:c7:9e:1b:a1:16:26:b2:0f:9f:04:9e:
4e:fc:d4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:35 2026 by rpki-client