
$ rpki-client -vvf rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft
File: iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft (raw, json)
Hash identifier: 57NMe/zv9gmyZBHmu5vUc1eaEpVu2K1tYLQJAJjI8zA=
Subject key identifier: 2E:BD:7F:65:C5:C3:70:37:87:D0:A1:E9:6C:B2:CA:C0:97:DE:6E:3C
Authority key identifier: 88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A
Certificate issuer: /CN=A91376FB/serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A
Certificate serial: 04CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft
Manifest number: 04C0
Signing time: Mon 27 Jul 2026 00:54:15 +0000
Manifest this update: Mon 27 Jul 2026 00:54:14 +0000
Manifest next update: Mon 03 Aug 2026 00:54:14 +0000
Files and hashes: 1: iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl (hash: /Eyt8S439dj8Gp74fDYosznIyLY14OodDtl87TlfU5o=)
2: 25C61AECB7ED11ED9CF6A63EC4F9AE02.roa (hash: 8tfqD+unXuAbv+bVv6zO4sePkmiq8lznMwY5d3M/IHk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl
rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1231 (0x4cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91376FB, serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A
Validity
Not Before: Jul 27 00:54:14 2026 GMT
Not After : Aug 3 00:54:14 2026 GMT
Subject: CN=6a66ac37-da1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2f:01:9e:0e:a8:cc:c6:bf:bc:0a:bc:6e:62:
44:42:7c:d8:97:60:ee:ef:8b:0b:07:16:d5:19:b7:
b6:91:40:5a:43:c5:14:54:d6:dd:6a:d6:d5:1d:10:
9b:44:ba:8c:b3:dc:d9:cb:2c:78:ab:aa:25:54:41:
09:44:1f:06:ec:1c:2c:c0:95:d0:78:6c:6f:1c:49:
4c:7d:e8:0d:29:58:c2:e8:00:bb:79:20:93:2b:31:
95:99:be:87:b7:2a:8f:3a:74:7e:00:b5:d3:7d:05:
43:df:01:d4:aa:15:58:80:75:5b:6f:35:dd:5e:ae:
3f:57:09:26:b2:b8:49:99:7c:ad:e6:04:91:b8:ba:
7f:6a:4f:e6:b5:7b:8b:be:1e:7a:6c:20:7a:3b:4c:
ff:fc:d9:72:f9:44:7f:8f:93:f2:37:b2:d1:e8:07:
7c:25:28:d4:02:0a:17:a6:93:cc:8d:6d:41:14:10:
b4:9b:67:72:06:e2:e8:d0:ed:23:b8:cd:b8:8e:0f:
3c:9a:c5:0a:fe:ea:1e:bc:15:30:71:94:cd:6d:7e:
be:a3:70:1a:12:49:99:b0:e4:c0:97:a8:6d:0d:a3:
52:11:0d:75:37:84:43:ad:a8:04:91:93:5f:b5:1b:
2e:8d:67:ad:ee:3f:1e:cd:d9:b3:b2:19:33:50:5a:
87:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BD:7F:65:C5:C3:70:37:87:D0:A1:E9:6C:B2:CA:C0:97:DE:6E:3C
X509v3 Authority Key Identifier:
keyid:88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ce:cd:d8:d5:5b:24:28:c4:85:b7:20:ba:c9:8a:2f:a7:91:
97:54:c4:db:00:f7:36:81:bf:0e:bc:87:8a:02:8b:50:b0:47:
be:33:00:1e:f5:43:72:2f:f1:cc:af:12:12:9c:dd:1a:e5:31:
61:d8:fe:d0:58:2a:4e:11:92:0d:52:48:57:5b:fd:e4:16:a6:
88:6b:d0:a6:8b:4a:13:5e:76:0a:1f:96:ff:75:20:af:1b:91:
2c:ef:74:f4:0b:2b:45:7d:c2:a6:f5:f7:3a:aa:dd:ff:61:f0:
97:7c:cb:c8:80:9a:a9:d9:87:f7:30:42:32:14:3d:47:13:c8:
c7:e7:e0:13:c6:34:76:18:fa:d8:1e:06:b4:bf:ca:b0:cd:1e:
5c:84:10:44:98:ed:52:40:be:dd:ba:38:50:55:e4:0f:cc:b0:
e5:8d:2e:5f:6b:b3:23:8a:74:0f:08:99:7b:e0:71:6e:db:a9:
9e:ee:bc:c8:2d:ce:f5:9a:43:8a:de:0d:08:17:01:88:dc:32:
25:5a:68:b5:e4:54:99:be:05:4a:c6:f0:0f:5b:7f:e6:7c:02:
ef:ad:81:74:73:d2:b8:44:99:2f:cf:c4:bd:aa:25:a4:ed:ca:
40:6e:b8:d6:43:75:cb:2c:90:51:b0:d7:74:df:c2:c3:62:ee:
f5:ac:d9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:06:54 2026 by rpki-client