
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
File: iro-R9UcXSye80Plr0EQHkPFiog.mft (raw, json)
Hash identifier: mIm32mZ102mzx5wERPazTjwo2qD4Cup5PdvRnKkGbGw=
Subject key identifier: 71:FA:2E:62:F7:B0:4C:E3:2A:76:AF:AC:E1:BC:2A:87:E3:3A:1F:03
Authority key identifier: 8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88
Certificate issuer: /CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88
Certificate serial: 0CC1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
Manifest number: 0CB4
Signing time: Fri 12 Jun 2026 18:31:12 +0000
Manifest this update: Fri 12 Jun 2026 18:31:12 +0000
Manifest next update: Fri 19 Jun 2026 18:31:12 +0000
Files and hashes: 1: iro-R9UcXSye80Plr0EQHkPFiog.crl (hash: LsquQHWIc796pXlm5l+wkfMANmHzERCTtvCiRqI1EDs=)
2: CEC4C3FC903B11ED96D73F40C4F9AE02.roa (hash: eNztU7B/7IHFo3dG2XOoFvu10+Q6T/lvArVNNYIftfU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl
rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3265 (0xcc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE984, serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88
Validity
Not Before: Jun 12 18:31:12 2026 GMT
Not After : Jun 19 18:31:12 2026 GMT
Subject: CN=6a2c5070-25be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:fb:3a:6d:7d:c5:1e:56:b9:0d:09:e4:9a:a6:
01:fd:14:95:66:3d:c5:9c:ab:74:25:e4:f9:d9:94:
2a:4e:9a:0e:ea:cd:ec:0a:89:16:7e:13:3b:56:b0:
2f:d3:45:61:7a:5a:ca:ef:81:1e:36:49:0a:56:2a:
46:b9:ab:1d:d1:48:29:24:7b:3a:82:a1:a4:be:97:
65:b6:57:64:fa:f3:1c:2e:de:76:0d:4b:2e:a3:85:
6c:5d:e7:70:71:3b:d1:2b:17:58:12:1f:d9:44:fc:
ca:dc:5f:f0:bf:ad:96:f1:96:24:1b:09:84:50:d8:
e3:d1:48:b8:3d:a4:87:5d:71:20:eb:cc:e2:e8:b0:
0d:ca:13:cd:2f:42:e2:2c:b0:6b:26:b0:96:af:b3:
10:51:0d:98:0f:61:1f:c8:7a:1e:87:36:80:08:ad:
f4:df:ad:33:f5:c3:e3:b6:70:8b:27:a8:72:0f:81:
09:65:e9:b0:df:dd:ce:3c:b4:d6:82:e4:ca:04:85:
d6:09:72:eb:e8:d5:e1:25:2e:a6:23:42:03:d1:88:
1f:c0:b5:52:40:c5:3b:8f:6d:81:37:39:1d:a3:63:
b1:13:c7:ea:f3:47:02:37:e0:35:22:bc:d3:5e:75:
d5:19:45:e1:bf:69:88:45:ef:bc:9e:ea:f8:f7:d2:
93:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FA:2E:62:F7:B0:4C:E3:2A:76:AF:AC:E1:BC:2A:87:E3:3A:1F:03
X509v3 Authority Key Identifier:
keyid:8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:38:9f:c9:c9:ec:e1:9e:cc:45:3e:ca:83:5b:ca:9d:fb:5f:
9b:d7:04:c1:a0:57:ab:d5:ec:44:c4:f0:3d:cf:38:c8:15:be:
dc:61:9f:fd:9c:6f:37:63:4a:76:ee:d6:ef:a0:1b:26:70:38:
11:f1:b0:54:fe:24:2f:12:dc:9c:02:94:13:07:a8:98:f3:dc:
9a:60:22:c6:d8:8e:64:8e:27:0f:44:6b:37:ed:b4:26:bd:28:
ac:70:b3:0a:01:a2:c7:ef:66:4e:e8:90:7b:78:74:b1:3c:fb:
37:d5:c6:39:86:5d:bb:63:b4:2c:b8:fc:8e:23:4c:7a:f7:e5:
04:b3:fa:99:bb:65:6d:f0:b5:18:f9:4b:5f:9d:1c:1c:28:67:
67:b3:a2:54:ff:3e:c4:50:81:d8:b3:38:c6:79:59:2e:66:da:
20:66:e7:5e:e1:95:36:69:52:08:a3:89:1a:16:ab:d1:0e:57:
22:4b:a0:db:7a:73:70:43:fb:49:f1:96:22:18:c2:83:35:5a:
6f:08:44:af:11:f3:0a:7a:d6:0c:a9:e3:38:1b:6e:05:84:12:
0d:1a:f7:a7:17:b7:73:21:ff:ba:80:ca:97:72:cd:39:28:1d:
89:cf:c6:9f:b4:48:77:2b:b7:51:f2:35:32:ee:2b:78:3b:69:
e6:08:52:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:27 2026 by rpki-client