
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft
File: IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft (raw, json)
Hash identifier: UIUNzGJUq2mV6T3+YeBWRjYiSHQLWaNSaw2I1CnjITI=
Subject key identifier: 3F:4D:B7:65:9D:59:6B:48:4F:C8:6D:07:13:D0:B3:04:DF:23:26:43
Authority key identifier: 23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F
Certificate issuer: /CN=A91FE26E/serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F
Certificate serial: 1DB8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft
Manifest number: 1D9A
Signing time: Mon 06 Jul 2026 16:10:55 +0000
Manifest this update: Mon 06 Jul 2026 16:10:54 +0000
Manifest next update: Mon 13 Jul 2026 16:10:54 +0000
Files and hashes: 1: IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl (hash: GvCGVqbYRRmge1rY05lrv4AI1rTPGlANpj0Om9fqxdM=)
2: 40EAC2C0685111F0A688505EC4F9AE02.roa (hash: SMMdB5FfbHvQ8XxRMRHHqZDp8nFnCc1tqnhGm5C6OOg=)
3: 402AE4B4685111F0A688505EC4F9AE02.roa (hash: uLWtAzm0T2XZ8XrHmk3i4Qv1rCDDVOMUdZgDRK+R9AY=)
4: E8FF9A526FDE11E9AF945067C4F9AE02.roa (hash: 8mj54azzqhjHXfOWyNFC53u9e3MBttuOm97GXb6TaYE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl
rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 16:10:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7608 (0x1db8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE26E, serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F
Validity
Not Before: Jul 6 16:10:54 2026 GMT
Not After : Jul 13 16:10:54 2026 GMT
Subject: CN=6a4bd38f-bb5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:40:05:c6:10:b6:84:98:36:e7:73:c4:f8:77:
8f:82:7c:b1:72:33:0b:24:ae:e1:6f:c6:30:2f:71:
b0:ce:04:a8:06:72:7a:37:50:fc:5a:30:ff:20:5a:
5f:fb:a9:db:dc:51:90:21:3a:d4:a9:7a:fe:6c:bb:
5d:ab:03:1b:ba:35:ec:b5:0e:cd:10:2d:7a:69:cd:
3f:f5:38:07:da:01:2a:93:0a:87:8e:68:12:08:8d:
11:c0:cc:1a:82:bc:6e:c1:df:37:a7:46:06:41:d1:
40:e3:9f:7a:ff:28:47:b9:ce:c4:5f:f5:62:d6:ae:
17:9c:9b:7d:9f:67:40:bb:50:07:6e:4e:4a:c4:53:
33:82:90:a8:69:a6:76:31:c8:52:ca:0c:d8:37:de:
0b:35:17:79:4c:6b:8a:39:ac:88:ab:fa:5a:66:0e:
79:a6:4c:07:d2:b1:03:2e:16:2e:ed:fe:73:f6:80:
30:b6:b6:f9:dc:7d:4a:1b:8d:ba:d6:82:13:e5:47:
8e:8d:4a:b8:59:86:9f:fa:18:d7:94:44:ee:4b:ad:
e3:6f:3b:54:3f:d5:15:51:ce:d9:c3:a1:08:74:82:
35:e9:20:58:8a:c2:29:9d:f1:d8:d4:4f:04:9b:74:
04:b6:f0:95:ec:f3:69:2d:69:26:19:e1:b0:4b:57:
96:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4D:B7:65:9D:59:6B:48:4F:C8:6D:07:13:D0:B3:04:DF:23:26:43
X509v3 Authority Key Identifier:
keyid:23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:b2:03:a9:f9:ae:a8:d1:32:ce:6c:82:39:88:a1:8f:34:99:
00:71:a3:ab:d4:5e:06:9f:ed:20:b0:be:4d:f2:66:43:df:6d:
62:1a:9c:2f:c3:de:b2:25:72:85:a7:ce:2b:4a:b4:c2:8d:26:
44:c0:c3:cc:56:1e:2c:cf:c0:50:77:a6:df:ca:05:0b:88:1c:
8d:ec:e7:67:ab:26:19:7c:e2:f9:d6:2c:25:2f:1f:14:9d:4e:
de:bb:b9:0e:fb:d7:ea:5b:b5:1d:71:dc:1b:35:cd:58:a4:ec:
11:0c:ef:83:1c:23:61:a6:77:19:54:4c:9b:00:4a:e4:b6:8c:
68:a1:e5:0d:8e:42:43:be:16:4b:6b:97:52:53:ef:bd:8b:50:
97:70:5b:78:2b:08:7c:39:bf:a5:81:1e:98:76:89:6c:05:d5:
76:93:45:4e:76:84:4e:2c:34:32:e5:35:6f:21:52:14:53:19:
f4:05:29:af:b6:88:ac:6c:b5:be:5b:bb:2c:90:cd:39:07:98:
c4:66:99:4c:ba:f8:f8:9f:71:05:e5:80:ad:4a:d6:8b:8a:c9:
6e:a4:c5:e7:11:75:f2:d8:9b:3c:fa:c8:da:22:97:6b:f6:5d:
e1:1a:6e:ce:1d:ad:ef:90:7a:46:f1:54:50:ae:9b:4b:85:eb:
79:31:d7:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkUyNkUxMTAvBgNVBAUTKDIzM0MwRDNCMkE3NUM0MUFCODJFNUJFQjcwREJFMkU3
MzQyRDY2MUYwHhcNMjYwNzA2MTYxMDU0WhcNMjYwNzEzMTYxMDU0WjAYMRYwFAYD
VQQDEw02YTRiZDM4Zi1iYjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAokAFxhC2hJg253PE+HePgnyxcjMLJK7hb8YwL3GwzgSoBnJ6N1D8WjD/IFpf
+6nb3FGQITrUqXr+bLtdqwMbujXstQ7NEC16ac0/9TgH2gEqkwqHjmgSCI0RwMwa
grxuwd83p0YGQdFA4596/yhHuc7EX/Vi1q4XnJt9n2dAu1AHbk5KxFMzgpCoaaZ2
MchSygzYN94LNRd5TGuKOayIq/paZg55pkwH0rEDLhYu7f5z9oAwtrb53H1KG426
1oIT5UeOjUq4WYaf+hjXlETuS63jbztUP9UVUc7Zw6EIdII16SBYisIpnfHY1E8E
m3QEtvCV7PNpLWkmGeGwS1eWCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD9Nt2Wd
WWtIT8htBxPQswTfIyZDMB8GA1UdIwQYMBaAFCM8DTsqdcQauC5b63Db4uc0LWYf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI2RS84N0I1Q0Q1MEM4
NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhCcTRMbHZyY052aTV6UXRa
aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0l6d05PeXAxeEJxNExsdnJjTnZpNXpRdFpoOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RTI2RS84N0I1Q0Q1MEM4NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhC
cTRMbHZyY052aTV6UXRaaDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlLIDqfmuqNEyzmyCOYihjzSZAHGjq9ReBp/tILC+TfJmQ99tYhqcL8PesiVy
hafOK0q0wo0mRMDDzFYeLM/AUHem38oFC4gcjeznZ6smGXzi+dYsJS8fFJ1O3ru5
DvvX6lu1HXHcGzXNWKTsEQzvgxwjYaZ3GVRMmwBK5LaMaKHlDY5CQ74WS2uXUlPv
vYtQl3BbeCsIfDm/pYEemHaJbAXVdpNFTnaETiw0MuU1byFSFFMZ9AUpr7aIrGy1
vlu7LJDNOQeYxGaZTLr4+J9xBeWArUrWi4rJbqTF5xF18tibPPrI2iKXa/Zd4Rpu
zh2t75B6RvFUUK6bS4XreTHXTA==
-----END CERTIFICATE-----
Generated at Tue Jul 7 11:49:45 2026 by rpki-client