
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft
File: iUKJrUDufmJvXNgvzsVAbbkeHnE.mft (raw, json)
Hash identifier: nOpw7+t+zoOvhv/VYXaGzDhrr4KPLmquJNla40cx0NU=
Subject key identifier: 2B:86:AF:57:C1:D3:49:D1:24:F6:FB:53:08:B6:65:06:3B:F2:48:6B
Authority key identifier: 89:42:89:AD:40:EE:7E:62:6F:5C:D8:2F:CE:C5:40:6D:B9:1E:1E:71
Certificate issuer: /CN=A91B9790/serialNumber=894289AD40EE7E626F5CD82FCEC5406DB91E1E71
Certificate serial: 01A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft
Manifest number: 019B
Signing time: Fri 09 Oct 2026 04:55:38 +0000
Manifest this update: Fri 09 Oct 2026 04:55:37 +0000
Manifest next update: Fri 16 Oct 2026 04:55:37 +0000
Files and hashes: 1: iUKJrUDufmJvXNgvzsVAbbkeHnE.crl (hash: KKP7jO8UMedEsrJ07CxFKi3cKLtz0uHXV1aCgUd/zYs=)
2: 9EC3DA0CABC311F0B5C5583DC4F9AE02.roa (hash: oQRja5kNE1xgzFCqir1541pX0ir8ZOqbUXiW5IO5uBg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.crl
rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 04:55:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424 (0x1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9790, serialNumber=894289AD40EE7E626F5CD82FCEC5406DB91E1E71
Validity
Not Before: Oct 9 04:55:37 2026 GMT
Not After : Oct 16 04:55:37 2026 GMT
Subject: CN=6ac873c9-0923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:da:2e:40:ed:51:7c:b5:75:f7:cf:72:b5:
ba:f7:0c:5b:55:ab:84:40:ce:30:2a:cb:1b:11:57:
91:90:b3:7c:32:8d:87:f3:a1:e2:5e:43:55:81:e3:
6a:93:43:b1:93:26:58:17:35:81:44:89:3f:61:db:
a9:a0:35:92:30:0a:10:93:0c:63:73:2f:e3:b6:58:
d4:04:a7:42:cc:b9:f5:ad:ea:8b:e1:99:c8:ca:fc:
65:b0:92:ce:7d:96:4c:d8:e4:69:bb:96:21:d7:1d:
ec:50:d8:2a:92:43:47:67:53:db:aa:e0:17:d1:03:
89:a5:a4:28:dd:9a:43:a0:c3:91:9f:ab:98:12:9b:
1e:47:d9:99:af:76:51:1e:de:32:0f:b4:87:76:2c:
a0:64:aa:59:7e:85:c5:9e:58:4b:0d:7b:ed:51:13:
58:e0:27:73:13:62:a0:ab:d4:fa:73:aa:02:f4:34:
ab:e5:60:dd:46:72:1d:d0:91:82:48:ba:01:0a:d4:
47:44:0f:79:88:36:62:9a:f4:36:26:00:81:a0:76:
96:d9:2d:75:83:c7:6c:5b:cf:df:0a:02:d1:92:ec:
2e:70:aa:b8:b5:e4:68:37:9e:bb:fa:fc:86:b3:9c:
47:bd:94:25:d6:cb:7c:76:1c:8b:eb:4b:0b:40:94:
47:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:86:AF:57:C1:D3:49:D1:24:F6:FB:53:08:B6:65:06:3B:F2:48:6B
X509v3 Authority Key Identifier:
keyid:89:42:89:AD:40:EE:7E:62:6F:5C:D8:2F:CE:C5:40:6D:B9:1E:1E:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:99:1e:40:bf:23:9e:ff:77:f7:33:e0:4f:c9:33:f2:69:bb:
29:1b:ad:e3:53:ac:3a:aa:51:61:a6:96:04:e9:46:16:a9:0c:
a0:ae:4c:59:8d:24:2b:76:b4:e3:eb:a0:cd:00:ba:3b:a3:97:
59:26:a1:b8:5b:ef:cf:a3:4b:8c:05:1e:4e:12:b1:17:f7:94:
ba:c9:52:a0:80:1e:6c:f4:c2:76:f6:80:c1:b7:5a:1f:c6:d6:
80:56:3a:54:a1:38:7b:6d:65:16:b9:05:5e:61:e7:df:fc:cd:
1d:14:2b:25:ec:d5:44:f8:88:3f:cd:fd:0c:6d:2f:f0:71:11:
7d:4e:45:53:2b:25:c8:2d:84:f3:26:c0:05:3f:e9:06:d3:31:
b6:44:18:ad:c1:29:ea:22:c3:19:5f:ec:2f:c4:ca:99:ef:b4:
b3:72:3a:7d:75:1d:d3:7e:79:43:3a:1f:12:39:14:80:63:ff:
87:45:90:9b:e9:c1:50:8a:70:eb:b0:8f:a6:55:6a:2d:59:f4:
34:01:32:f3:fc:ad:7f:af:52:43:00:c4:a6:5a:8b:7a:3b:26:
1c:53:14:d1:53:f2:d8:f8:86:f7:39:50:9b:d7:e1:2e:7c:a5:
a9:90:11:a1:cb:44:a7:68:2f:c9:e4:50:b8:73:88:b5:37:29:
7c:bb:83:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:50:30 2026 by rpki-client