
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
File: iro-R9UcXSye80Plr0EQHkPFiog.mft (raw, json)
Hash identifier: vONcPXGn8LbrNjSB5iDPOrtfu+FdcBOljQMDuj8LAaA=
Subject key identifier: DF:87:66:2A:77:CD:E5:14:60:9B:ED:3F:6A:26:B8:39:FF:E2:32:36
Authority key identifier: 8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88
Certificate issuer: /CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88
Certificate serial: 0CA5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
Manifest number: 0C98
Signing time: Sat 18 Apr 2026 18:26:56 +0000
Manifest this update: Sat 18 Apr 2026 18:26:55 +0000
Manifest next update: Sat 25 Apr 2026 18:26:55 +0000
Files and hashes: 1: iro-R9UcXSye80Plr0EQHkPFiog.crl (hash: qYrY84CBoO2eYQw7aGRk6QnKiyqolA0LWwc4JF3dgjA=)
2: CEC4C3FC903B11ED96D73F40C4F9AE02.roa (hash: eNztU7B/7IHFo3dG2XOoFvu10+Q6T/lvArVNNYIftfU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl
rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 18:26:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3237 (0xca5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE984, serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88
Validity
Not Before: Apr 18 18:26:55 2026 GMT
Not After : Apr 25 18:26:55 2026 GMT
Subject: CN=69e3ccf0-dcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:93:4d:f9:f9:6d:da:d5:92:bc:6b:94:7a:
71:eb:55:ee:79:12:a5:3b:1a:c4:a8:24:1f:f9:51:
85:7f:35:4c:65:fd:f4:bd:35:19:46:b6:aa:fd:31:
2e:3b:ba:5d:86:bb:5d:e0:f6:50:80:7c:c1:01:01:
8a:6f:02:7f:9a:57:33:e4:f1:24:4f:48:0c:af:c0:
77:97:24:1a:0c:01:68:c7:c7:40:24:7b:ca:b0:24:
ff:5e:af:10:a1:56:a2:8e:f3:d0:6c:eb:27:fd:97:
10:64:99:e9:60:7b:60:8a:1f:4f:45:a0:4d:df:02:
c1:18:9d:e1:17:86:d7:68:6d:95:63:fb:a0:03:ac:
94:38:6a:fc:36:a3:5b:b8:c1:d0:c5:ed:ba:fb:c2:
55:0a:8e:2a:99:94:5f:b6:fe:92:9c:29:e8:dc:ff:
32:dd:e5:3e:9a:25:52:1c:0c:0f:10:55:41:78:d7:
cc:59:0e:79:4c:e1:30:43:0b:7e:0b:27:8a:36:d0:
53:03:63:b0:36:fe:92:a4:41:74:53:e6:20:f8:91:
25:76:cb:95:05:d8:05:08:4b:b0:62:32:50:49:d9:
cd:be:6e:b2:88:21:a2:12:ae:0c:a1:19:80:0f:f3:
d7:2a:3e:cb:c8:47:4e:f4:56:f8:27:df:e5:53:98:
21:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:87:66:2A:77:CD:E5:14:60:9B:ED:3F:6A:26:B8:39:FF:E2:32:36
X509v3 Authority Key Identifier:
keyid:8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:b0:fb:91:42:89:24:4e:20:dc:58:4a:de:9e:f9:b7:a7:33:
b1:9e:21:1d:85:b5:30:58:f4:62:5f:4a:08:84:38:de:c1:29:
c3:ee:3c:5c:b4:a2:9d:b3:4d:41:a2:2f:5a:e6:49:6a:6a:3c:
20:ca:56:97:2c:e9:8c:39:62:da:39:86:2c:b7:b3:be:bb:7b:
a7:da:6a:85:2c:10:92:27:6d:aa:99:43:6c:25:1d:d7:4b:08:
7a:61:81:3d:6f:05:e9:26:9c:3a:71:f8:a5:dc:bb:ce:91:95:
c9:4b:88:83:b7:6f:21:77:76:9f:ab:34:ed:49:07:9c:c4:fb:
9f:20:7a:69:4e:74:61:fb:91:13:13:d1:32:bc:52:7f:fb:bc:
db:2b:e0:ca:12:d6:41:8f:62:78:3b:28:87:b3:3e:e9:df:b1:
7f:f5:e8:e7:36:40:3e:45:07:97:ab:29:7c:d6:46:83:0f:a3:
88:ee:7f:73:cc:12:6c:5b:90:d3:fc:69:73:0b:bd:a8:4a:f5:
bf:a8:7f:f4:04:49:1d:38:a7:76:43:6c:de:64:ae:27:42:24:
2b:ee:a4:24:89:b0:a9:47:bb:30:ad:5b:c6:2e:96:48:d6:35:
98:42:0f:da:76:a5:ab:a0:90:22:55:1d:e1:c7:59:ac:91:17:
4a:a9:29:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:48:06 2026 by rpki-client