
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
File: iaMdROlPHMJ4ULusFsAsIKqznOU.mft (raw, json)
Hash identifier: rh0KdOjM38Z9PYwBzFes2up0I/Fc75+oTHZ815JzbsA=
Subject key identifier: 6D:AF:61:AA:78:2F:06:88:64:9E:16:C1:4F:F3:B4:BA:A3:37:B4:62
Authority key identifier: 89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5
Certificate issuer: /CN=A9196F73/serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5
Certificate serial: 0B8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
Manifest number: 0B78
Signing time: Fri 12 Jun 2026 19:11:30 +0000
Manifest this update: Fri 12 Jun 2026 19:11:29 +0000
Manifest next update: Fri 19 Jun 2026 19:11:29 +0000
Files and hashes: 1: iaMdROlPHMJ4ULusFsAsIKqznOU.crl (hash: 6KHjW4vpEvrgSJiEVaKlspz1GqcLbGjyP0+NqHUNaPg=)
2: 9AE4F7EC53A211EA8D26BD0CC4F9AE02.roa (hash: JuE06CSNAAV8+NliC0AVlzjHWrODAM4vJnnB5WZLKk8=)
3: F392CF9E53A311EAB1641213C4F9AE02.roa (hash: hK13KfCAsMi+xHUuka2Pkznncer1XgUOHCwFnVLDtqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl
rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:11:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2958 (0xb8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196F73, serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5
Validity
Not Before: Jun 12 19:11:29 2026 GMT
Not After : Jun 19 19:11:29 2026 GMT
Subject: CN=6a2c59e2-66e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e1:3a:11:a4:69:a3:73:ec:50:9d:77:37:29:
cc:b9:98:56:90:5b:bf:fa:65:ff:af:08:ca:ec:bc:
a6:9a:9f:76:06:32:18:f6:93:e7:be:9c:85:e5:0e:
7d:43:54:01:4f:ac:31:98:5a:aa:78:ea:57:e8:16:
c6:13:cb:3c:71:c0:1a:52:f8:b2:52:64:b5:da:d1:
60:3f:1f:1e:1c:56:84:0d:5a:9e:72:64:f4:de:7b:
f4:0b:cf:0b:38:89:b0:82:8b:19:0e:15:27:5c:47:
f7:67:1f:6c:80:09:74:9b:ef:8b:e2:2b:a4:62:80:
bf:aa:0a:47:e7:b5:30:8e:cb:6b:44:4f:69:bb:bb:
b1:6e:c7:9c:3b:09:6b:b6:91:64:c6:fc:64:f5:0e:
f6:4d:25:4e:2d:09:37:52:c1:04:8c:b7:63:81:d6:
68:5b:26:c9:cd:fe:3f:c2:92:bd:01:16:4e:00:42:
f0:28:63:af:88:f2:54:fa:bd:3a:85:1d:c2:26:b2:
3b:99:0b:e3:06:09:d5:3f:e2:cc:a5:10:b8:ca:cf:
b5:91:df:ce:19:32:91:51:94:97:d2:f7:62:f6:47:
b9:47:cf:7d:01:d3:c9:77:15:b5:1c:1a:37:dd:81:
2b:d1:90:be:ba:31:b5:25:53:b3:5d:df:36:ef:8a:
4f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AF:61:AA:78:2F:06:88:64:9E:16:C1:4F:F3:B4:BA:A3:37:B4:62
X509v3 Authority Key Identifier:
keyid:89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:03:2c:d3:b4:02:88:fc:3e:b3:0a:f5:63:fa:5c:57:df:90:
4e:91:56:ce:c1:8d:91:9e:aa:ed:6e:b4:60:04:4b:ec:6d:38:
6d:0f:53:de:2e:6e:d7:fc:b1:f0:37:a2:56:d0:77:4a:81:4e:
cb:a1:91:61:2c:30:3a:27:f3:69:1b:73:8a:95:04:eb:f9:4d:
1b:92:09:87:dc:45:93:f1:1a:f7:3f:9a:ac:26:77:cb:16:e0:
c4:83:e0:0c:42:69:be:7b:da:b0:86:b1:a0:8c:f1:57:17:97:
ca:bf:03:c1:39:26:0d:6b:60:5c:9c:64:b1:bb:1f:7f:50:92:
cd:8a:54:f5:db:16:ec:1e:90:ed:21:bc:03:bd:f6:9e:bc:9f:
7d:aa:cc:29:81:b4:d5:7f:2c:3e:cc:9f:b2:ab:31:31:b5:1f:
89:80:98:63:b3:cd:31:f5:37:23:54:eb:f5:60:ac:68:02:ed:
4c:c1:2b:bc:5d:78:68:f7:cd:72:3b:b9:07:9c:b3:19:4f:4d:
02:60:b5:ac:42:be:ab:3f:52:f6:1f:bd:9e:ee:c1:c6:38:71:
b5:63:9d:c0:32:c1:a2:93:15:fa:28:5a:96:a6:cf:c8:bc:3c:
fa:3b:e6:0d:c3:50:7a:57:a4:49:f3:e8:2c:4a:f2:09:b3:10:
b5:4f:d1:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZGNzMxMTAvBgNVBAUTKDg5QTMxRDQ0RTk0RjFDQzI3ODUwQkJBQzE2QzAyQzIw
QUFCMzlDRTUwHhcNMjYwNjEyMTkxMTI5WhcNMjYwNjE5MTkxMTI5WjAYMRYwFAYD
VQQDEw02YTJjNTllMi02NmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm+E6EaRpo3PsUJ13NynMuZhWkFu/+mX/rwjK7Lymmp92BjIY9pPnvpyF5Q59
Q1QBT6wxmFqqeOpX6BbGE8s8ccAaUviyUmS12tFgPx8eHFaEDVqecmT03nv0C88L
OImwgosZDhUnXEf3Zx9sgAl0m++L4iukYoC/qgpH57UwjstrRE9pu7uxbsecOwlr
tpFkxvxk9Q72TSVOLQk3UsEEjLdjgdZoWybJzf4/wpK9ARZOAELwKGOviPJU+r06
hR3CJrI7mQvjBgnVP+LMpRC4ys+1kd/OGTKRUZSX0vdi9ke5R899AdPJdxW1HBo3
3YEr0ZC+ujG1JVOzXd8274pPMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG2vYap4
LwaIZJ4WwU/ztLqjN7RiMB8GA1UdIwQYMBaAFImjHUTpTxzCeFC7rBbALCCqs5zl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkY3My9BMjk3MDdGNjUz
QTExMUVBQUVFRUJFMEJDNEY5QUUwMi9pYU1kUk9sUEhNSjRVTHVzRnNBc0lLcXpu
T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lhTWRST2xQSE1KNFVMdXNGc0FzSUtxem5PVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NkY3My9BMjk3MDdGNjUzQTExMUVBQUVFRUJFMEJDNEY5QUUwMi9pYU1kUk9sUEhN
SjRVTHVzRnNBc0lLcXpuT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmAMs07QCiPw+swr1Y/pcV9+QTpFWzsGNkZ6q7W60YARL7G04bQ9T3i5u1/yx
8DeiVtB3SoFOy6GRYSwwOifzaRtzipUE6/lNG5IJh9xFk/Ea9z+arCZ3yxbgxIPg
DEJpvnvasIaxoIzxVxeXyr8DwTkmDWtgXJxksbsff1CSzYpU9dsW7B6Q7SG8A732
nryffarMKYG01X8sPsyfsqsxMbUfiYCYY7PNMfU3I1Tr9WCsaALtTMErvF14aPfN
cju5B5yzGU9NAmC1rEK+qz9S9h+9nu7BxjhxtWOdwDLBopMV+ihalqbPyLw8+jvm
DcNQelekSfPoLEryCbMQtU/RSg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:17:15 2026 by rpki-client