
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
File: iiZW272QAzaEH_UDU2_5kY_rJcY.mft (raw, json)
Hash identifier: oZtM1XNGi+5DPqjXhx/xMairOJXJWjNWlHdBkd1v3/Y=
Subject key identifier: E7:B2:6F:D0:11:18:3D:6E:B4:F1:5F:42:2C:5D:94:F5:ED:94:BF:F6
Authority key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6
Certificate issuer: /CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6
Certificate serial: 0ACF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
Manifest number: 0ABF
Signing time: Tue 28 Jul 2026 19:45:42 +0000
Manifest this update: Tue 28 Jul 2026 19:45:41 +0000
Manifest next update: Tue 04 Aug 2026 19:45:41 +0000
Files and hashes: 1: iiZW272QAzaEH_UDU2_5kY_rJcY.crl (hash: yNjg6G0wua8sCofKbr9PX1WXPc7etZRjsOYaiqQrLOU=)
2: 8B802D485F2211EC88AA0F84C4F9AE02.roa (hash: rJhV33fhTZ9wWjDZMsmY3oUmfWvnegOyW8s4W29U15g=)
3: 9244682C7BD711EAA889485EC4F9AE02.roa (hash: ADIn3fSPUFxghKrm6LZn3szet1wFIU+8TgC1/BfDmm0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl
rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2767 (0xacf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A267C, serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6
Validity
Not Before: Jul 28 19:45:41 2026 GMT
Not After : Aug 4 19:45:41 2026 GMT
Subject: CN=6a6906e6-75cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:28:38:55:dc:96:33:d7:12:bb:a5:32:e0:00:
a8:48:50:d2:9a:f2:9d:b3:80:c0:ed:69:5a:ca:74:
5e:7c:ee:04:33:f6:10:6a:9d:c2:a7:dd:74:32:30:
8d:f4:3d:af:e6:9a:58:a1:41:03:3e:aa:dd:0f:19:
99:bc:4a:e2:c9:45:1a:51:16:62:34:e9:60:d2:5c:
23:99:47:4b:44:96:a5:c9:e2:49:35:ea:1f:ba:86:
22:0d:17:42:4c:41:d2:13:f9:ea:1e:2d:2b:a7:2a:
19:09:d2:ea:34:43:df:30:fb:99:98:f0:a7:f8:05:
e3:6a:56:7f:85:f0:9a:5b:b2:43:67:c9:9f:ca:e4:
7e:fd:26:ca:e5:06:4d:f6:1b:bf:ad:93:66:fc:e6:
92:71:38:ef:85:ba:ab:aa:8c:e4:d1:d4:5f:a0:64:
a3:c3:fb:39:79:d8:a0:f4:df:f8:94:8d:16:51:d2:
f5:cd:28:18:25:e1:c9:7c:8c:85:f4:31:be:aa:04:
27:1c:07:f3:d5:40:d5:4d:a4:27:a1:b1:0d:3a:6f:
ce:43:05:4c:5e:9c:d8:18:1b:9a:15:9d:19:38:15:
7c:38:9e:32:6c:4b:cb:15:1a:44:c5:90:c0:eb:4a:
85:34:83:72:a4:b1:31:c2:02:83:8a:0a:c6:51:99:
15:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B2:6F:D0:11:18:3D:6E:B4:F1:5F:42:2C:5D:94:F5:ED:94:BF:F6
X509v3 Authority Key Identifier:
keyid:8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:d6:b3:46:81:d0:68:67:bc:c3:25:ab:cf:70:fa:48:95:d3:
62:f2:ce:74:9f:51:5c:05:35:86:cd:9d:bf:d8:74:f7:33:2e:
d4:c6:41:d6:01:46:2b:70:4f:3c:7b:e1:75:2d:18:ce:6a:ee:
d9:2f:01:6b:af:3a:80:9f:05:fa:22:0e:36:0b:61:5f:f9:d2:
19:ca:f9:7c:a4:d4:22:83:a6:78:cf:36:f9:45:b5:38:0e:ff:
5a:cd:5f:a6:e5:db:db:27:df:5f:a6:c4:8e:4a:12:73:a5:b2:
cb:46:61:24:66:ff:36:98:e5:8e:e9:4c:fc:2a:54:d7:d8:6d:
8c:16:3d:3c:9a:02:68:6b:f3:d6:3b:a2:4f:fa:ab:40:d0:2d:
b4:31:94:9b:6c:b0:d6:ff:97:39:e4:80:53:03:cb:48:66:d6:
a6:50:86:8e:5d:db:84:d4:2d:1a:74:3f:a7:04:d6:6b:7a:46:
50:f3:9d:30:80:83:91:8f:9f:ef:ed:e2:cb:2b:2f:32:86:eb:
b9:13:7b:95:66:11:c5:a5:34:14:41:fb:62:50:a5:4f:f8:86:
68:31:f7:75:75:50:2d:f5:2b:8d:10:52:79:9a:be:e6:7f:01:
44:f7:83:f3:97:f7:11:c6:10:69:b8:4d:80:8a:c5:d5:55:7e:
25:af:3d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:14:25 2026 by rpki-client