
$ rpki-client -vvf rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
File: iUNmPc-DCfonSkZS-oOr0m2EJk8.mft (raw, json)
Hash identifier: r+ITVr8N205yaYovQzs1YlkKXPOqx8WdN4we9F+KHCE=
Subject key identifier: C1:F8:AC:0E:4F:0E:55:09:01:DF:1A:95:1C:71:36:6B:CD:E6:B8:0F
Authority key identifier: 89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F
Certificate issuer: /CN=A913097A/serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F
Certificate serial: 057A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
Manifest number: 056E
Signing time: Mon 27 Jul 2026 00:17:09 +0000
Manifest this update: Mon 27 Jul 2026 00:17:09 +0000
Manifest next update: Mon 03 Aug 2026 00:17:09 +0000
Files and hashes: 1: iUNmPc-DCfonSkZS-oOr0m2EJk8.crl (hash: W6X9IPL4YWhvTsxCzW5Wj5d1ciWs+VS3dn/J6NfxBpM=)
2: D19C3D9CCB9F11F090C50D0BC4F9AE02.roa (hash: uGlOlq0hoAHAqivL5Gx3x5YPd18McYYtsJimOV3Kgqs=)
3: A18054D6CB9F11F088CB660AC4F9AE02.roa (hash: K1f/qaJuEbUdhfD0uMMWW5s85D2uyNgYsK07EHXQMGc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl
rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1402 (0x57a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913097A, serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F
Validity
Not Before: Jul 27 00:17:09 2026 GMT
Not After : Aug 3 00:17:09 2026 GMT
Subject: CN=6a66a385-d265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:98:d7:57:dc:42:0a:2d:5d:eb:74:87:d1:5d:
b2:91:34:52:e6:0b:32:7e:a2:f2:2a:36:c7:16:87:
57:0f:9a:c2:2b:96:20:f9:aa:14:da:9c:df:c6:a2:
84:c9:bc:2b:49:0c:f6:ea:cc:a1:c4:d2:ff:e9:4e:
dd:92:58:13:f9:be:37:55:13:07:95:8e:49:07:6c:
33:72:86:2c:ea:f6:d7:2b:5c:36:82:fb:b8:73:41:
04:2c:ac:17:1a:d0:28:66:a3:a4:78:50:c2:70:89:
d5:45:da:97:53:5f:49:41:cc:59:c1:cf:9f:3b:00:
4d:94:a4:bd:68:df:b3:9e:2e:80:ce:b2:7c:3f:51:
e0:cf:b8:fc:d9:9c:d6:c0:47:ce:ef:81:8c:52:7f:
7f:3f:cd:52:28:2a:dd:50:82:56:95:89:ae:d8:1b:
45:b7:de:a4:82:c4:21:12:19:f0:40:72:f8:d6:14:
5e:98:bd:5c:ba:3c:71:49:cd:83:f1:55:56:5a:17:
83:af:c3:35:36:97:6e:63:37:0e:f3:c8:e3:59:f3:
1f:06:db:03:68:53:2a:ca:08:f3:6f:bf:d7:df:f8:
ad:04:6d:5e:e3:b6:57:36:d2:e7:25:3e:6c:f2:3a:
3b:c6:66:f1:14:fd:65:95:21:c7:db:13:a2:da:c0:
80:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F8:AC:0E:4F:0E:55:09:01:DF:1A:95:1C:71:36:6B:CD:E6:B8:0F
X509v3 Authority Key Identifier:
keyid:89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:3f:ba:89:f8:45:a1:92:b7:f5:3f:dd:3a:93:5c:ce:36:49:
ae:ce:2e:5e:24:a0:71:74:e9:af:a0:87:6f:99:2e:33:0b:7d:
f8:ab:74:7a:36:88:c1:58:6f:d6:9c:bb:da:b1:19:d0:50:1f:
dc:5a:98:ba:81:1b:90:c0:30:69:fe:f9:41:1d:7f:a9:dd:bb:
89:03:aa:2b:90:94:57:80:67:1c:38:21:db:52:13:97:c0:de:
a0:7c:ff:cb:da:19:4d:18:ab:f4:3d:70:e5:4e:c5:61:b3:a0:
d1:70:31:9f:fa:c8:ef:f0:32:30:90:e9:d4:bf:33:f2:57:14:
07:3b:0f:9c:b4:6f:7e:5e:bd:37:be:d4:d2:91:65:d2:d0:6b:
44:3d:67:e4:37:3e:f8:1f:6c:94:36:80:ac:f4:cd:b9:4a:ac:
6d:93:a5:49:05:d5:d3:e8:7d:ce:1e:b8:0c:67:0e:0a:f7:2f:
73:77:99:91:97:b0:40:ad:3f:4e:b0:ed:25:3c:88:23:71:0c:
3d:20:a1:d1:58:7a:20:4e:94:be:7c:c9:4d:1a:02:cf:4c:a4:
27:fe:5d:ab:c3:24:18:b1:ed:32:e8:1f:79:0b:8f:18:7a:09:
c2:61:d2:ea:68:e7:78:0d:34:3b:0e:18:a0:ba:49:d5:63:73:
08:58:b3:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA5N0ExMTAvBgNVBAUTKDg5NDM2NjNEQ0Y4MzA5RkEyNzRBNDY1MkZBODNBQkQy
NkQ4NDI2NEYwHhcNMjYwNzI3MDAxNzA5WhcNMjYwODAzMDAxNzA5WjAYMRYwFAYD
VQQDEw02YTY2YTM4NS1kMjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8JjXV9xCCi1d63SH0V2ykTRS5gsyfqLyKjbHFodXD5rCK5Yg+aoU2pzfxqKE
ybwrSQz26syhxNL/6U7dklgT+b43VRMHlY5JB2wzcoYs6vbXK1w2gvu4c0EELKwX
GtAoZqOkeFDCcInVRdqXU19JQcxZwc+fOwBNlKS9aN+zni6AzrJ8P1Hgz7j82ZzW
wEfO74GMUn9/P81SKCrdUIJWlYmu2BtFt96kgsQhEhnwQHL41hRemL1cujxxSc2D
8VVWWheDr8M1NpduYzcO88jjWfMfBtsDaFMqygjzb7/X3/itBG1e47ZXNtLnJT5s
8jo7xmbxFP1llSHH2xOi2sCA4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMH4rA5P
DlUJAd8alRxxNmvN5rgPMB8GA1UdIwQYMBaAFIlDZj3Pgwn6J0pGUvqDq9JthCZP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDk3QS82MTY3QTZEMjNC
MDgxMUVDOTQ4M0M1MjdDNEY5QUUwMi9pVU5tUGMtRENmb25Ta1pTLW9PcjBtMkVK
azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lVTm1QYy1EQ2ZvblNrWlMtb09yMG0yRUprOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDk3QS82MTY3QTZEMjNCMDgxMUVDOTQ4M0M1MjdDNEY5QUUwMi9pVU5tUGMtRENm
b25Ta1pTLW9PcjBtMkVKazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkD+6ifhFoZK39T/dOpNczjZJrs4uXiSgcXTpr6CHb5kuMwt9+Kt0ejaIwVhv
1py72rEZ0FAf3FqYuoEbkMAwaf75QR1/qd27iQOqK5CUV4BnHDgh21ITl8DeoHz/
y9oZTRir9D1w5U7FYbOg0XAxn/rI7/AyMJDp1L8z8lcUBzsPnLRvfl69N77U0pFl
0tBrRD1n5Dc++B9slDaArPTNuUqsbZOlSQXV0+h9zh64DGcOCvcvc3eZkZewQK0/
TrDtJTyII3EMPSCh0Vh6IE6UvnzJTRoCz0ykJ/5dq8MkGLHtMugfeQuPGHoJwmHS
6mjneA00Ow4YoLpJ1WNzCFizww==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:35:40 2026 by rpki-client