
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
File: iro-R9UcXSye80Plr0EQHkPFiog.mft (raw, json)
Hash identifier: trECYc6rCJgdYe03rjtiP8aq8G3smnVibvE9jjFsKeY=
Subject key identifier: 7E:B0:45:5D:6A:45:72:60:96:D6:AD:2E:2D:78:1F:CD:33:0C:06:71
Authority key identifier: 8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88
Certificate issuer: /CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88
Certificate serial: 0C86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
Manifest number: 0C7B
Signing time: Sat 28 Feb 2026 18:46:17 +0000
Manifest this update: Sat 28 Feb 2026 18:46:17 +0000
Manifest next update: Sat 07 Mar 2026 18:46:17 +0000
Files and hashes: 1: iro-R9UcXSye80Plr0EQHkPFiog.crl (hash: aOSzwHTCZok8wGpwxey78yTVvQ9mPhH72FwXbZ0lJL0=)
2: CEC4C3FC903B11ED96D73F40C4F9AE02.roa (hash: ZFOmsL5bJSLH6PZ2YkIqaVTwufEfPYg2DbDADn/8Z+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl
rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:46:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3206 (0xc86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE984, serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88
Validity
Not Before: Feb 28 18:46:17 2026 GMT
Not After : Mar 7 18:46:17 2026 GMT
Subject: CN=69a337f9-b543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:dd:34:17:03:d9:b7:40:b4:1b:b3:9f:18:
33:86:b7:96:90:37:2a:a2:66:82:21:10:5e:56:b8:
bb:61:18:b0:e0:2a:1c:9e:27:a8:87:f9:36:7f:ab:
ac:cc:48:97:15:8e:86:6b:4e:f7:b2:7d:8a:11:95:
6b:b4:43:35:1d:c2:77:c9:e2:aa:e5:e1:73:2f:64:
a8:1e:d4:10:16:31:02:7c:d1:fa:d3:91:26:0b:04:
4d:2a:76:65:69:c7:65:0b:bd:88:a8:07:aa:d0:a8:
2a:31:6f:96:74:83:ca:fa:10:d8:4a:b0:fc:dc:8e:
22:8e:76:8d:52:20:91:81:68:c0:da:bc:06:10:3d:
b5:c9:65:58:62:f8:b2:b2:c5:63:11:26:44:66:e3:
30:7a:b5:6f:f7:14:7b:1f:71:d5:9f:ec:b6:43:9b:
7b:56:78:c3:62:2b:50:02:9c:6f:46:7e:c5:db:43:
41:9f:a4:a6:63:d1:4f:d6:c3:a9:43:73:f1:a0:39:
87:bf:38:c7:48:ad:f1:db:d3:3e:da:f0:1f:98:5b:
9f:07:79:85:43:d4:47:1e:a4:20:80:32:5e:e2:89:
a8:03:55:1c:ca:05:72:ac:82:10:98:7a:90:fb:6a:
50:c6:59:05:9a:e1:49:fd:90:37:0c:45:dc:dc:f9:
4b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B0:45:5D:6A:45:72:60:96:D6:AD:2E:2D:78:1F:CD:33:0C:06:71
X509v3 Authority Key Identifier:
keyid:8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:74:81:35:26:85:09:51:35:bc:41:8c:f6:62:27:3c:71:05:
ad:07:c9:4b:e1:d8:87:90:f3:c1:8c:ce:04:f6:cc:7e:9d:ea:
cf:9f:d8:e5:15:25:42:51:4d:07:df:75:c3:9a:8c:da:85:f1:
cb:73:9e:ee:1c:99:c1:ca:e1:9a:e3:57:8a:6a:87:28:f2:1c:
8f:d8:8f:50:36:b2:55:91:0a:c9:8f:c9:95:42:68:4c:24:2f:
61:3b:6e:de:56:60:79:48:cf:86:41:63:34:05:2d:37:c7:be:
07:dc:e3:00:1d:cb:6d:e5:12:94:82:f9:55:9a:9d:b7:94:44:
34:37:9f:b1:aa:07:c7:37:52:0d:15:6a:c8:79:2a:5c:9c:b2:
69:2a:ff:e5:71:ec:3e:20:ad:18:7d:b2:76:94:bf:b0:59:f1:
b6:7a:d9:3e:16:13:86:3e:8a:bf:5d:89:14:9b:1e:bf:7c:5d:
cf:8f:1f:bc:ed:dd:9f:80:85:06:25:dd:82:1a:e3:c9:8e:6f:
f7:d1:1e:05:25:e8:a1:82:c2:68:b5:81:58:88:83:dd:f6:7f:
95:e0:f7:8d:68:1c:73:1e:6f:f1:f5:2e:55:06:f4:55:bd:05:
b0:fd:b5:22:8e:fc:f9:f0:f2:ed:cd:39:1a:3d:2c:84:68:e3:
c6:73:2d:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUU5ODQxMTAvBgNVBAUTKDhBQkEzRTQ3RDUxQzVEMkM5RUYzNDNFNUFGNDExMDFF
NDNDNThBODgwHhcNMjYwMjI4MTg0NjE3WhcNMjYwMzA3MTg0NjE3WjAYMRYwFAYD
VQQDDA02OWEzMzdmOS1iNTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu0TdNBcD2bdAtBuznxgzhreWkDcqomaCIRBeVri7YRiw4Cocnieoh/k2f6us
zEiXFY6Ga073sn2KEZVrtEM1HcJ3yeKq5eFzL2SoHtQQFjECfNH605EmCwRNKnZl
acdlC72IqAeq0KgqMW+WdIPK+hDYSrD83I4ijnaNUiCRgWjA2rwGED21yWVYYviy
ssVjESZEZuMwerVv9xR7H3HVn+y2Q5t7VnjDYitQApxvRn7F20NBn6SmY9FP1sOp
Q3PxoDmHvzjHSK3x29M+2vAfmFufB3mFQ9RHHqQggDJe4omoA1UcygVyrIIQmHqQ
+2pQxlkFmuFJ/ZA3DEXc3PlLqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH6wRV1q
RXJgltatLi14H80zDAZxMB8GA1UdIwQYMBaAFIq6PkfVHF0snvND5a9BEB5DxYqI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTk4NC8yODc0NUU0QzE1
RUUxMUVBQTJEOUUwNkVDNEY5QUUwMi9pcm8tUjlVY1hTeWU4MFBscjBFUUhrUEZp
b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lyby1SOVVjWFN5ZTgwUGxyMEVRSGtQRmlvZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTk4NC8yODc0NUU0QzE1RUUxMUVBQTJEOUUwNkVDNEY5QUUwMi9pcm8tUjlVY1hT
eWU4MFBscjBFUUhrUEZpb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2HSBNSaFCVE1vEGM9mInPHEFrQfJS+HYh5DzwYzOBPbMfp3qz5/Y5RUlQlFN
B991w5qM2oXxy3Oe7hyZwcrhmuNXimqHKPIcj9iPUDayVZEKyY/JlUJoTCQvYTtu
3lZgeUjPhkFjNAUtN8e+B9zjAB3LbeUSlIL5VZqdt5RENDefsaoHxzdSDRVqyHkq
XJyyaSr/5XHsPiCtGH2ydpS/sFnxtnrZPhYThj6Kv12JFJsev3xdz48fvO3dn4CF
BiXdghrjyY5v99EeBSXooYLCaLWBWIiD3fZ/leD3jWgccx5v8fUuVQb0Vb0FsP21
Io78+fDy7c05Gj0shGjjxnMtCg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:03 2026 by rpki-client