
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
File: iaMdROlPHMJ4ULusFsAsIKqznOU.mft (raw, json)
Hash identifier: E+QRalGwYIiFaxQce33stVd+Q/INI+UvkSfq31FCDJ4=
Subject key identifier: 86:83:64:F9:97:82:37:F9:1A:5B:78:DB:BD:7B:55:7C:00:38:82:0B
Authority key identifier: 89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5
Certificate issuer: /CN=A9196F73/serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5
Certificate serial: 0BA5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
Manifest number: 0B8F
Signing time: Tue 28 Jul 2026 19:23:37 +0000
Manifest this update: Tue 28 Jul 2026 19:23:37 +0000
Manifest next update: Tue 04 Aug 2026 19:23:37 +0000
Files and hashes: 1: iaMdROlPHMJ4ULusFsAsIKqznOU.crl (hash: ivdPZHu2PP+O5BT1g/GRULLNXLJEJIR+qzl9KMwfdCM=)
2: F392CF9E53A311EAB1641213C4F9AE02.roa (hash: hK13KfCAsMi+xHUuka2Pkznncer1XgUOHCwFnVLDtqM=)
3: 9AE4F7EC53A211EA8D26BD0CC4F9AE02.roa (hash: JuE06CSNAAV8+NliC0AVlzjHWrODAM4vJnnB5WZLKk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl
rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:23:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2981 (0xba5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196F73, serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5
Validity
Not Before: Jul 28 19:23:37 2026 GMT
Not After : Aug 4 19:23:37 2026 GMT
Subject: CN=6a6901b9-fe91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fe:44:67:e6:1c:54:08:45:25:18:2c:02:4e:
b5:a5:b0:ed:1c:72:0b:c4:d9:46:06:a2:df:e3:f9:
49:12:dc:11:82:4f:be:11:fe:c4:9b:72:6e:a1:d7:
73:9f:b6:35:d5:93:d0:28:85:0b:9d:23:f0:bd:20:
9b:48:13:93:e1:ad:32:e2:9c:3a:eb:5d:fb:eb:1e:
67:7c:cf:39:fd:cb:0b:ec:8f:d5:34:fb:c8:01:82:
bb:37:01:6e:9e:8d:b9:73:a8:df:48:5b:e2:f0:75:
a8:a0:1d:12:69:bd:7e:a2:5e:7b:13:38:bc:c5:ad:
b4:2b:8b:06:93:1a:00:a5:93:63:69:56:05:d2:e0:
d9:2f:30:87:47:46:c4:9c:b6:86:d8:50:f6:de:ae:
73:0c:17:63:30:b1:e8:a1:b0:41:98:e6:bb:ce:5c:
e5:9c:ce:32:48:9c:11:70:4b:07:c8:fa:04:da:ff:
74:ed:1a:d2:cb:f7:bd:cb:72:e3:ab:41:9f:c7:c9:
3d:a6:b0:36:d6:be:8d:5a:36:9a:df:46:cd:8c:7b:
0f:f9:9e:48:f2:9b:b1:a9:04:58:ea:a5:e1:94:ea:
78:d0:57:80:b1:dc:09:dd:10:86:90:d4:04:88:3b:
51:75:a3:c8:8e:fe:75:13:d2:90:a2:99:d7:4b:63:
43:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:83:64:F9:97:82:37:F9:1A:5B:78:DB:BD:7B:55:7C:00:38:82:0B
X509v3 Authority Key Identifier:
keyid:89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:92:32:95:fa:e2:cf:14:b7:63:aa:8d:42:bf:bd:05:22:e7:
a8:16:a8:fc:19:fc:4e:dd:a3:25:5d:48:92:4b:99:27:0a:74:
f7:5e:03:56:3e:4d:aa:91:1d:95:5f:9f:76:46:85:50:09:7a:
e5:79:60:d6:b0:12:25:53:26:1b:60:36:d6:28:48:b5:b3:19:
da:c0:eb:05:2e:da:6c:63:12:9b:61:7c:15:ea:d4:86:81:83:
af:2e:f0:ae:06:73:c6:f7:fd:3d:b5:40:f9:4f:b6:2c:47:8b:
bf:d2:11:48:35:6e:78:93:36:05:6d:ec:50:56:f0:42:6f:12:
d4:df:f8:3f:c3:cd:72:14:49:85:50:61:bd:91:b3:72:70:c6:
85:61:1a:2d:3d:10:c0:3b:7b:51:f5:87:c3:d4:1c:ba:e3:d3:
a5:51:c2:32:34:37:0e:99:46:7d:ee:ef:b2:09:b3:2d:64:88:
21:4d:a5:2e:27:7c:26:10:9e:97:6b:bc:15:cc:31:54:f6:36:
cf:30:c5:97:51:af:98:6f:3d:65:d0:d5:81:e4:db:80:33:15:
e3:93:09:d9:fc:7d:a2:5a:99:af:97:4d:e0:10:c9:8f:25:2b:
71:6a:c6:64:a6:a1:c3:d4:f6:0e:4e:6e:51:a4:84:e6:51:9d:
99:e9:20:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:26:45 2026 by rpki-client