
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
File: IaR__8gaEzNcB7kmBaLd_RgHoUw.mft (raw, json)
Hash identifier: xFPrtYxETFLVOitcBNuzwQehZC9f73Z1gprUGQ0DQVI=
Subject key identifier: 9D:70:7F:52:0A:4B:3C:CE:8A:11:2C:C8:A3:B9:26:10:80:EA:65:54
Authority key identifier: 21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C
Certificate issuer: /CN=A91BF905/serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C
Certificate serial: 0BE1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
Manifest number: 0BCC
Signing time: Tue 28 Jul 2026 19:16:52 +0000
Manifest this update: Tue 28 Jul 2026 19:16:52 +0000
Manifest next update: Tue 04 Aug 2026 19:16:52 +0000
Files and hashes: 1: IaR__8gaEzNcB7kmBaLd_RgHoUw.crl (hash: pW2FEMj07sfZ49sXCGOR0K+2MsTtQQyXrmYOYdjO1iY=)
2: 0C63520A89A311F19CE9D9314011F970.roa (hash: btffrqxnv+LEdVRDJ0NPhpvOIf7HzJYoZs3Wq7IbLmI=)
3: CDEFCF14801F11EF99206C47C4F9AE02.roa (hash: KbTYxfFy1GT8pB5c2e56lPcyBgZokB9iBVqKo/PqazE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl
rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3041 (0xbe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF905, serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C
Validity
Not Before: Jul 28 19:16:52 2026 GMT
Not After : Aug 4 19:16:52 2026 GMT
Subject: CN=6a690024-3484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:3d:73:89:48:56:0f:2b:8c:99:9b:35:e1:
4f:b7:df:04:9f:14:93:82:05:c4:8e:b5:42:7f:fb:
d7:03:84:28:66:67:e2:d6:6e:d0:11:76:68:74:dd:
5d:b5:c0:5a:58:15:87:d0:98:86:45:13:65:fa:08:
ad:d5:21:6a:36:37:db:4b:b0:33:13:40:40:42:f4:
cc:a6:09:ce:22:60:fa:09:92:c6:f9:87:4f:e2:c9:
1d:5c:17:2c:45:b0:65:49:12:a7:16:72:1e:d4:81:
a9:7a:97:08:fe:9c:33:86:0f:90:9b:50:ff:42:07:
e6:2b:69:4d:03:48:19:fb:56:65:93:7f:14:ae:70:
3c:d6:0a:d6:e9:80:91:81:ca:5a:1b:99:ec:e9:da:
fc:9d:6b:73:c7:f1:ec:3e:40:38:73:b7:28:b1:01:
ea:c3:1f:8e:67:4a:de:c5:c2:5b:bd:53:46:28:62:
90:ac:44:95:60:a9:81:f0:23:0a:0c:03:4c:05:9a:
2f:91:49:5e:bb:ad:be:1e:ff:28:a8:73:91:21:0a:
cf:e7:29:0c:59:57:b6:d5:44:6e:be:1d:5a:74:c3:
89:3d:e8:3c:9b:20:0e:4f:8d:18:0a:f3:d2:8f:06:
f4:c7:28:99:73:bb:f5:16:db:fd:68:d8:9a:1b:55:
37:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:70:7F:52:0A:4B:3C:CE:8A:11:2C:C8:A3:B9:26:10:80:EA:65:54
X509v3 Authority Key Identifier:
keyid:21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:25:79:cf:9b:bd:c8:37:43:da:69:f3:5a:a6:94:09:4f:3b:
39:15:67:60:cc:63:99:e7:d3:18:5d:07:d5:92:1f:4c:85:be:
5d:90:53:2f:b1:3c:da:c9:a2:1e:74:10:e0:31:6a:b1:71:71:
de:57:a7:a2:bf:1d:3d:59:ae:02:be:dd:45:fc:fe:5a:60:45:
94:69:14:42:28:88:8f:bc:81:62:69:39:73:64:f5:64:68:34:
46:95:26:70:ec:55:0a:2d:af:2c:c2:9a:8c:a9:6c:8e:ab:56:
12:eb:39:d2:08:13:1e:76:4d:92:b4:6e:98:76:27:e6:b1:0f:
b6:82:43:bc:07:b5:71:9d:38:07:92:6c:ff:47:40:12:b0:41:
d0:10:80:7b:c8:35:69:5b:63:18:1d:be:3c:5d:0c:92:99:85:
f0:30:02:4f:8f:6c:84:76:2e:2e:fd:2c:5b:dd:a5:36:34:b9:
05:5b:0f:a4:90:29:43:ac:2b:e1:39:ac:06:ae:52:1f:6e:42:
2f:d5:97:b2:00:6d:fb:27:24:b5:ef:17:7a:a1:80:8a:c5:f9:
1a:40:ca:9a:46:5f:93:bf:bc:17:2f:bd:80:93:c9:6d:f2:a8:
c9:09:f3:1d:e9:d5:0d:30:12:95:68:0a:3e:f6:54:bc:94:93:
16:d9:e3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:21:26 2026 by rpki-client