
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
File: IQlGzanedd75YJiV-_Ie2Exy9Oc.mft (raw, json)
Hash identifier: FkQG50ETVCNGvLmh5QnLDSHAjy4Mv9Wsf88kjBp6zr0=
Subject key identifier: EF:64:FE:0C:8E:CE:35:EC:81:B4:17:07:4E:34:27:D1:6A:76:A4:A0
Authority key identifier: 21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7
Certificate issuer: /CN=A91F7537/serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7
Certificate serial: 0169
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
Manifest number: 0165
Signing time: Wed 07 Oct 2026 05:29:28 +0000
Manifest this update: Wed 07 Oct 2026 05:29:27 +0000
Manifest next update: Wed 14 Oct 2026 05:29:27 +0000
Files and hashes: 1: IQlGzanedd75YJiV-_Ie2Exy9Oc.crl (hash: MDLIhRYQsSn7AmpkAnwiQtxJMWoZZyt311cDRiXh1Lw=)
2: 6156C7F6A27311EFBF7D5E22C4F9AE02.roa (hash: vy7IODG07pz73pTj0pY/9n2zcuO8v2L2DLhKfTMR+yA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl
rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 05:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7537, serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7
Validity
Not Before: Oct 7 05:29:27 2026 GMT
Not After : Oct 14 05:29:27 2026 GMT
Subject: CN=6ac5d8b7-4101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:e9:bd:46:fc:55:41:b2:3e:46:9f:30:93:
1d:a0:26:8f:0c:b9:77:b6:e4:61:96:47:8a:71:a8:
8b:9e:a6:2d:4f:b3:a8:a3:56:d8:aa:ae:13:19:0d:
d5:bc:0b:ef:9c:92:82:24:4a:4c:53:32:22:c0:8a:
5c:b8:9d:85:22:3b:be:c2:78:a8:89:f5:d3:0d:b4:
4f:3d:ee:c4:51:ab:d1:62:e9:e4:44:59:43:f7:d8:
06:ec:9c:7b:ca:84:05:a5:ed:de:21:73:6e:37:05:
9a:eb:57:7f:04:6d:b8:df:d9:17:4d:f0:47:1d:45:
ab:1d:24:80:65:e6:9c:3e:a8:0a:69:e4:04:e1:62:
ac:42:46:08:9b:84:dd:bd:e9:f7:f6:7f:12:51:80:
68:aa:6d:68:92:5e:8a:19:22:e3:6a:37:a5:b3:80:
a0:b3:c2:73:6d:b4:71:2f:20:e4:f6:ad:b0:35:a7:
31:d0:b8:fc:66:c4:ad:a6:36:58:e8:8e:eb:5d:51:
ef:d6:e1:1a:71:5c:db:ba:2a:1e:ce:09:c7:09:8c:
70:f4:86:05:a8:8e:06:71:de:fb:42:bf:7d:cf:62:
67:c6:04:92:90:8a:fd:97:ea:75:58:9f:71:14:61:
6c:3d:13:5f:45:c3:49:1b:4e:52:28:de:d9:ba:8c:
cd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:64:FE:0C:8E:CE:35:EC:81:B4:17:07:4E:34:27:D1:6A:76:A4:A0
X509v3 Authority Key Identifier:
keyid:21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:c5:3c:31:c0:d4:7e:99:16:07:c7:5e:16:92:bb:d8:1c:71:
a0:be:a8:25:b6:87:11:1e:e6:82:65:39:3c:38:7c:13:48:f0:
27:19:6d:60:14:3d:63:96:7f:f5:bd:21:22:a4:a6:39:a9:4f:
d6:7e:2f:3f:29:9a:6a:28:c9:f9:49:4f:55:90:29:a0:fd:2b:
75:54:ae:9a:cf:6e:57:3d:b7:95:ff:e9:0f:43:d2:f0:e5:c1:
fb:ce:25:a3:8e:97:58:4c:94:61:c8:36:e1:47:99:e2:88:86:
ff:9b:41:66:68:a9:0a:11:2b:8b:b0:01:cc:af:04:1e:bd:04:
14:62:9c:f1:7f:06:de:2a:1a:5e:a4:13:df:96:8e:7f:79:4b:
0b:20:d5:9c:5c:47:7e:fb:6c:b2:dd:a3:95:16:13:3b:69:97:
dc:f0:1d:86:6c:97:0d:cb:c9:a6:42:b7:ba:99:04:97:cf:c8:
22:87:37:6a:be:16:84:2b:60:cb:17:c3:fe:72:e0:a7:52:09:
9c:af:d6:65:f4:54:62:c2:d0:d6:f5:56:5b:fe:0f:e4:6c:e3:
c1:5e:80:26:66:95:84:ee:59:00:5e:f7:b8:e6:3b:28:92:22:
17:03:97:db:f4:56:53:67:b5:65:43:13:92:52:54:e3:4e:2e:
f6:fa:04:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:05:01 2026 by rpki-client