
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
File: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft (raw, json)
Hash identifier: pRDfGL4UlqqELaWEIb8NblsuymN8K8/hbxf8fQcjDOI=
Subject key identifier: 6A:72:BE:CB:D9:8E:D1:8E:CF:A8:68:20:8D:2D:8E:4A:25:36:FC:6D
Authority key identifier: 21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24
Certificate issuer: /CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24
Certificate serial: 07B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
Manifest number: 0797
Signing time: Fri 12 Jun 2026 21:35:03 +0000
Manifest this update: Fri 12 Jun 2026 21:35:02 +0000
Manifest next update: Fri 19 Jun 2026 21:35:02 +0000
Files and hashes: 1: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl (hash: aITOPF2ervbDN6b5M8PBhLttxYxAKck8ZL7jMHEhlZQ=)
2: ED7C5416CD3711EDB6A0F37BC4F9AE02.roa (hash: TFtBaz3XXYr53c4KFkqYw9OsCBY/VjjGiRVEIJaG+ss=)
3: 0F206AEA776F11ED8E7B8775C4F9AE02.roa (hash: Uh0sBPuZpoy8sTTNiUroNOAmNS0FTfsDSQBW+NkNyHo=)
4: 0DDC2C14776F11ED8E7B8775C4F9AE02.roa (hash: v2YonyCo9R/dlcaHZ1jfDPJlrOShqZgPxJ5RkLy9g6I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl
rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1968 (0x7b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A314, serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24
Validity
Not Before: Jun 12 21:35:02 2026 GMT
Not After : Jun 19 21:35:02 2026 GMT
Subject: CN=6a2c7b87-af41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:5c:93:1e:e0:f5:9a:9e:54:1c:67:f9:de:
ae:48:b2:18:4f:a1:d5:50:ec:b4:b0:ba:5a:ee:d7:
53:f9:06:74:65:26:42:a9:c9:fe:09:d4:cd:ee:ee:
6a:d5:ab:6b:98:ac:46:68:49:b1:57:f4:ff:19:0a:
dc:05:24:42:f3:c6:31:4c:eb:bf:4c:d8:f4:91:d0:
a4:28:7b:d8:a0:05:00:01:90:6b:8b:62:f0:0f:c9:
b2:37:c6:17:1a:2d:fc:2b:03:98:19:63:37:31:6e:
12:7d:30:25:0d:00:02:49:03:9e:21:04:75:5e:d2:
54:ac:c4:f5:1e:cb:85:a3:cc:4c:70:02:04:51:27:
c2:fb:f9:a7:3b:9e:08:d3:04:4c:bc:5f:7e:51:06:
18:49:51:38:72:34:b8:7c:49:9a:df:95:ce:98:a6:
e1:2d:61:79:51:db:28:97:2c:9e:04:aa:58:13:da:
e3:06:18:05:ae:1a:d2:17:d2:c4:31:8d:69:e8:7a:
b3:c4:24:47:51:62:00:23:e3:ee:b9:56:6b:53:f9:
2d:d2:57:ad:8f:26:68:78:62:17:a2:85:51:2a:83:
ae:2f:8d:37:fb:ce:ac:c2:dd:f0:78:f6:af:05:0f:
ad:bd:8e:9f:33:f9:07:c1:1d:b4:35:2f:da:33:ff:
18:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:72:BE:CB:D9:8E:D1:8E:CF:A8:68:20:8D:2D:8E:4A:25:36:FC:6D
X509v3 Authority Key Identifier:
keyid:21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:a2:f5:6b:b5:56:d5:32:4c:14:44:a1:f6:39:b0:e2:b5:f3:
bb:c0:39:75:5f:d2:79:c9:d1:08:da:b5:65:35:ba:f8:1c:4a:
d2:f8:2a:16:3e:f5:9a:8c:69:1e:3e:fc:d2:cc:72:32:65:46:
2b:48:5f:38:a7:0a:a5:95:40:a7:f0:e9:e1:bc:ab:13:5f:c9:
81:76:05:10:22:9a:42:bc:76:4c:b0:f8:7c:71:76:4e:e6:e2:
41:b7:5d:e2:8b:af:6b:2b:9e:26:35:e8:59:bd:df:01:5e:ac:
b5:f1:1f:f2:8b:41:0c:67:59:1f:b1:03:db:e1:12:26:9c:a2:
08:91:e6:16:19:25:6c:64:99:1a:09:19:a9:6f:0c:06:6c:f1:
29:10:b4:39:18:6d:b0:8b:66:bd:cd:bd:96:26:5e:a8:01:ba:
d1:0f:67:ff:9f:69:38:1b:ce:ea:fa:a8:8f:67:d1:9c:02:42:
95:1d:f5:33:b3:e8:25:b9:a7:62:d9:87:be:dc:bb:42:6f:0b:
91:e1:d6:5d:d7:a4:f1:f6:9e:fc:e2:cd:c0:a4:7e:a1:82:30:
4f:c1:03:39:1d:fe:96:e3:64:60:fd:0a:1c:47:5c:c2:1f:97:
f6:69:0e:44:c7:98:cd:d9:94:98:16:7d:af:b7:30:fb:50:a8:
3b:97:1a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:06:46 2026 by rpki-client