
$ rpki-client -vvf rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft
File: iR7Yuqwsc70TrcqhoWqvANIkqHc.mft (raw, json)
Hash identifier: xSQFGuRyJMc6VxswRPWawpvjOAoj8S7LmuXY7rVgE/8=
Subject key identifier: 68:62:B5:7A:43:F4:E9:7A:E5:0D:0E:BF:15:69:1B:58:61:23:4F:25
Authority key identifier: 89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77
Certificate issuer: /CN=A91394E7/serialNumber=891ED8BAAC2C73BD13ADCAA1A16AAF00D224A877
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft
Manifest number: 0128
Signing time: Sat 13 Jun 2026 05:45:20 +0000
Manifest this update: Sat 13 Jun 2026 05:45:19 +0000
Manifest next update: Sat 20 Jun 2026 05:45:19 +0000
Files and hashes: 1: iR7Yuqwsc70TrcqhoWqvANIkqHc.crl (hash: uFY7gu9PF5sCNwtg1TXYzN5EiqOVrO+Nu6qYn+KJwyg=)
2: F7078BC4B73511EF8537DE81C4F9AE02.roa (hash: dcnfcfiViSeBV+zFTXFLZ3LN0enm0ZKeSScFAnyxpAk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.crl
rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91394E7, serialNumber=891ED8BAAC2C73BD13ADCAA1A16AAF00D224A877
Validity
Not Before: Jun 13 05:45:19 2026 GMT
Not After : Jun 20 05:45:19 2026 GMT
Subject: CN=6a2cee70-1f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f6:67:57:b0:c3:a6:11:1c:4e:7b:c7:73:11:
e9:2a:e9:06:7c:e3:fb:b2:c7:76:6a:15:75:84:84:
1b:8d:b4:1e:7f:1b:2b:6c:0e:e4:87:9e:dc:0a:7c:
2d:80:a7:23:5a:5c:60:f3:a1:72:1a:5d:99:74:9c:
db:50:74:37:e4:0c:5e:d2:70:56:bd:37:c6:39:20:
0d:ad:b7:4e:73:ed:f4:f9:38:6c:87:ed:67:9b:5b:
74:bd:42:3b:40:58:5a:72:88:93:cd:a7:06:9a:d1:
13:a6:48:72:1f:4e:5d:a9:2d:76:8d:33:2d:d6:7d:
6d:9e:5e:0e:de:cb:f9:2f:e8:9e:55:8d:a1:3d:45:
02:ab:56:bd:ff:9c:1e:c6:45:00:51:9e:45:c8:03:
1f:4f:78:51:c0:d7:65:95:5d:be:c1:d7:16:62:b0:
e4:fd:f1:ed:50:ef:c1:bd:d0:d3:66:b0:3e:b3:bc:
d1:7d:10:c8:0b:6f:4a:ab:d3:ef:47:98:ee:d9:ea:
46:e3:42:51:cb:6b:92:6c:23:37:26:a2:5d:e4:12:
11:9c:5a:ae:d6:bb:a3:2c:b5:4a:90:ac:8b:cd:8d:
e1:44:7e:ab:12:9a:4b:26:7f:fa:18:1e:c5:ee:dd:
a8:8f:77:3d:e0:5d:b2:24:7d:c3:2e:21:aa:a4:b0:
87:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:62:B5:7A:43:F4:E9:7A:E5:0D:0E:BF:15:69:1B:58:61:23:4F:25
X509v3 Authority Key Identifier:
keyid:89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:86:b0:9e:a7:7f:43:71:63:fd:55:e0:39:e5:0e:32:7f:1d:
7f:4e:d6:3b:9f:4c:e9:c0:49:f5:e6:53:48:de:2e:22:05:95:
a7:e9:18:4b:e0:e1:92:63:b6:18:23:e1:27:8c:1a:88:0b:00:
d4:05:3b:17:25:ca:3d:32:a8:45:e0:74:08:e1:a2:35:7b:ec:
5d:14:dd:4a:55:ad:a8:a0:d3:71:9d:e3:13:d8:4f:cb:78:ac:
39:68:2f:0b:2f:16:01:7a:f2:22:b2:c0:d9:be:e6:5a:87:b2:
12:29:63:44:01:9a:f5:e4:90:6a:90:6a:db:5c:06:50:58:ce:
09:24:68:fc:35:dc:a6:ca:2d:c3:71:38:bc:60:bf:75:5d:41:
a9:fc:8a:1e:01:77:9b:27:13:49:68:2f:ef:16:a6:3f:92:3b:
9b:89:3e:40:7d:85:28:db:4c:6d:ec:98:ed:a4:fb:48:9a:81:
aa:c4:f2:28:ca:cc:1f:d9:5a:7a:55:b1:99:a0:b3:ea:af:f6:
75:78:1b:48:36:65:79:fc:0b:6c:e0:30:c5:bf:51:7f:f0:03:
ba:e0:38:a2:85:1f:27:c4:a6:fc:52:3e:6a:34:55:32:f6:a8:
7f:e5:d0:57:fa:fb:dc:2b:ce:1a:e7:57:d2:19:7b:54:ed:09:
6f:14:80:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:53:46 2026 by rpki-client