
$ rpki-client -vvf rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
File: -IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft (raw, json)
Hash identifier: 5Q39sRD/CNacvpgNkAfeo6jRpfMzozfC3Ud77cijMng=
Subject key identifier: D0:58:3A:D2:62:F3:09:EE:F0:DD:16:C7:00:22:64:2C:57:84:27:0C
Authority key identifier: F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0
Certificate issuer: /CN=A91854B7/serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0
Certificate serial: 0758
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
Manifest number: 0739
Signing time: Tue 28 Jul 2026 22:23:40 +0000
Manifest this update: Tue 28 Jul 2026 22:23:39 +0000
Manifest next update: Tue 04 Aug 2026 22:23:39 +0000
Files and hashes: 1: -IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl (hash: pC0BBpZ04KYmLHgw78Q7JM+Sr/FpI0r15nwINZ5JYW0=)
2: 5892BB44853E11EB9D9E2D39C4F9AE02.roa (hash: qXGDfI73IfnHMAp4HxrY2CaG3uaWhC+oKVSUMLz1LFQ=)
3: 399EDDAA823F11F0895C5843C4F9AE02.roa (hash: n+OBMglPTvErv+P6ZUgv6kKsWJf1PaCgzoYVPi34f1Q=)
4: 3EACF95EEBB511ECA410BF6DC4F9AE02.roa (hash: XoRUOC4UUdsqAWL8b8mRp3Lb8qKoXQVLqNUMMLIx7wI=)
5: 57D28CCA853E11EB9D9E2D39C4F9AE02.roa (hash: 48L080JyJlktjDJm5JUMWcLPjjHEK1WWZAsxDZsWQPg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl
rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1880 (0x758)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91854B7, serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0
Validity
Not Before: Jul 28 22:23:39 2026 GMT
Not After : Aug 4 22:23:39 2026 GMT
Subject: CN=6a692bec-4260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:6b:4a:31:b7:bb:29:ec:2a:93:f7:57:c7:
12:49:ba:90:8d:c1:24:dd:db:45:cc:9e:86:a6:0b:
a0:65:8f:ec:aa:1c:c2:37:9f:75:a0:fb:f9:29:09:
80:ad:c0:c3:16:3c:46:6a:f1:c6:0b:cd:ad:8c:44:
be:1f:52:da:32:4c:42:58:43:53:04:90:b2:31:1d:
6e:94:ef:a0:e3:ec:12:b1:05:62:21:6c:0d:ad:09:
34:93:04:ac:61:0e:12:a2:aa:a3:55:df:5e:71:23:
1b:af:15:33:03:e7:04:e5:9c:27:e7:9c:6a:d5:1f:
f4:f4:50:0c:2e:8e:cb:dc:69:83:64:96:de:9d:2a:
b6:2c:b2:a7:82:6c:b8:f5:a8:e4:fa:5e:ee:40:d8:
86:33:fb:db:ae:5b:ad:dc:8d:21:8b:0b:03:2c:ee:
80:29:53:32:ea:07:a6:36:e7:b2:d8:a5:fa:b0:17:
f7:ac:73:96:a2:45:30:a7:14:61:7e:47:b4:20:89:
e5:d0:b4:5c:42:61:9b:45:5e:b0:0f:bc:96:88:60:
78:48:58:f7:4d:a8:0c:a1:ba:58:f6:7d:73:ef:dc:
90:a2:41:dd:3f:a9:d6:68:d6:fb:3b:6c:cd:a9:49:
01:d3:e0:c4:43:3c:ba:bc:82:48:eb:f4:70:7d:97:
ce:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:58:3A:D2:62:F3:09:EE:F0:DD:16:C7:00:22:64:2C:57:84:27:0C
X509v3 Authority Key Identifier:
keyid:F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:f4:23:0c:65:0f:81:d9:d3:63:d3:86:90:f5:12:b0:5c:86:
d3:a3:ff:05:e6:29:fe:ec:3a:4e:cd:8a:d1:4f:ed:64:29:55:
1e:ce:bb:9c:32:ca:e1:95:94:70:78:87:9b:1f:4b:c5:ff:61:
eb:f6:ef:18:ab:42:a1:be:86:be:5c:52:17:f5:37:b2:1a:81:
b6:fe:b4:cb:05:c9:3e:ff:4a:6a:71:e9:f3:81:43:f8:44:d1:
78:a1:00:ae:48:6f:4f:f0:bf:32:42:20:04:fb:3f:db:97:c0:
ef:f7:3f:2c:59:52:72:1b:3e:52:d1:7f:37:c5:24:68:7f:98:
54:ef:4e:57:6c:ff:16:e5:fe:10:d7:be:f6:36:82:50:b9:74:
7d:82:8b:6d:2c:6f:b5:85:3f:01:08:52:21:1f:57:59:46:26:
1c:7c:5c:6b:d6:34:b3:95:42:ec:10:f0:55:00:02:4a:36:74:
94:77:62:26:69:b5:80:68:17:24:79:a8:2c:48:1f:97:c8:b5:
45:98:ae:cb:4a:ac:1a:f9:55:cb:60:56:ce:18:32:fa:d0:52:
84:8d:3e:49:ff:fc:86:43:40:9e:3c:51:04:0a:b6:d7:61:f7:
67:e4:03:85:87:c6:2c:38:26:7c:18:43:f0:dc:e1:b5:49:86:
7e:e1:86:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:13:51 2026 by rpki-client