
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json)
Hash identifier: MkrB8sATdyLQeQ53IBigErhxawpv5M7pFFvCXciIRTU=
Subject key identifier: 62:30:0C:A6:95:75:17:33:D6:6A:3A:F5:2E:F9:16:C7:56:76:33:FA
Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7
Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7
Certificate serial: 02AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
Manifest number: 029D
Signing time: Sat 13 Jun 2026 01:39:52 +0000
Manifest this update: Sat 13 Jun 2026 01:39:52 +0000
Manifest next update: Sat 20 Jun 2026 01:39:52 +0000
Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: tZkHGkiGc+ShiZk6jsD2kMFHaVOwJAP7eZSiL93H4r4=)
2: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: UWH1x8giA5CUDbuKn5hiEaz+aWmWPo/dG0Iot9P77PQ=)
3: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: Unh6vvgI1wlU5PdNLje9/sZrH6mvqXrjcdflctfvmwM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl
rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:39:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685 (0x2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7
Validity
Not Before: Jun 13 01:39:52 2026 GMT
Not After : Jun 20 01:39:52 2026 GMT
Subject: CN=6a2cb4e8-96eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:c2:b3:24:18:6a:e8:4a:71:1e:06:7d:51:
40:67:32:c5:b6:de:c5:3d:07:ce:7b:c3:ca:03:f5:
97:5e:ee:39:c1:5f:d1:94:87:cc:43:0a:ba:26:a8:
4a:ac:f9:47:11:b0:49:1c:b8:bd:0d:54:e7:c1:a8:
db:a3:5b:cd:14:83:d0:fa:9b:9c:0d:3b:14:11:fb:
14:b8:79:dd:14:33:7a:30:59:cd:a6:9c:93:93:cd:
f8:f9:da:6b:11:2c:f7:00:2d:d5:6d:71:6d:7d:e2:
ef:e1:1f:06:5e:af:2d:5a:62:79:74:3b:fd:5d:b6:
db:81:03:56:34:f0:e0:79:ea:28:96:70:79:1d:0b:
ef:31:9f:a7:58:bb:58:1f:18:13:60:91:5e:5e:e8:
b1:a7:95:5f:91:38:73:74:7e:62:90:6b:99:f8:9a:
23:8e:17:9c:f6:1b:c3:b7:8f:ab:f1:cb:81:6d:65:
4c:63:f7:5c:95:58:23:e8:cd:a0:ea:69:45:17:2f:
ec:5f:67:4f:36:3d:fd:20:9f:d5:fa:2b:1c:c8:fe:
c4:f7:34:55:86:68:4b:4c:10:78:f7:21:4c:24:f0:
ed:db:37:38:8d:d3:86:d3:8c:8a:2a:84:4a:04:82:
41:49:af:18:db:06:57:37:56:dd:4a:73:3d:ff:61:
d3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:30:0C:A6:95:75:17:33:D6:6A:3A:F5:2E:F9:16:C7:56:76:33:FA
X509v3 Authority Key Identifier:
keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:c6:ec:19:b5:09:4d:f1:fe:c5:58:6a:ce:85:1b:62:43:02:
7d:e1:2f:48:8c:9f:62:2b:57:54:13:8c:91:6a:5f:58:70:9b:
70:cd:6a:ee:c6:94:69:81:dc:8a:fd:fc:b7:83:3e:6c:3c:32:
3f:d7:10:d7:f5:42:ee:a9:14:9c:5b:35:bc:89:76:0e:08:61:
bd:21:d9:f6:c7:12:1f:d3:97:cf:66:07:86:25:ed:09:0e:82:
7e:b3:ca:4b:d8:b1:51:85:35:47:ea:c9:2b:5a:b0:78:1c:06:
c8:7b:a7:57:94:50:88:19:10:7a:4f:0d:77:11:3c:7a:df:0d:
33:7d:75:2b:a2:cf:23:b4:40:ba:4a:36:6d:a3:98:cd:17:f2:
8b:c4:7c:ab:1a:d6:e6:1f:e9:fb:3f:ad:11:3d:5e:80:7e:19:
48:56:14:de:b2:4f:c3:30:3f:04:cf:f9:20:62:54:17:54:1f:
9d:2b:aa:d2:61:d0:6e:b4:e3:ca:de:c6:35:0f:c0:8a:6e:45:
57:45:01:7f:e9:de:af:21:56:7d:0a:1f:92:71:48:31:bf:b0:
14:f9:54:2d:b6:65:e6:60:33:9d:6c:ff:80:0e:9f:64:13:bb:
0f:e8:9a:85:22:11:fb:8d:cc:76:17:31:bc:76:7b:0f:cc:e0:
65:07:89:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:31:56 2026 by rpki-client