
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
File: IaR__8gaEzNcB7kmBaLd_RgHoUw.mft (raw, json)
Hash identifier: 4PY1YryCMj3Tth+6wMAO+ryhbDjldouMYS8Al0O20J4=
Subject key identifier: DA:E4:57:0D:D6:23:9C:59:EB:3C:C0:43:15:CE:F2:0B:BE:3D:F5:7B
Authority key identifier: 21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C
Certificate issuer: /CN=A91BF905/serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C
Certificate serial: 0BAA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
Manifest number: 0B96
Signing time: Thu 16 Apr 2026 19:02:02 +0000
Manifest this update: Thu 16 Apr 2026 19:02:02 +0000
Manifest next update: Thu 23 Apr 2026 19:02:02 +0000
Files and hashes: 1: IaR__8gaEzNcB7kmBaLd_RgHoUw.crl (hash: 10yg9N3FpZOBpH2+J0hJpiraRzTq3lwlSBvSNEsSrvo=)
2: CDEFCF14801F11EF99206C47C4F9AE02.roa (hash: KbTYxfFy1GT8pB5c2e56lPcyBgZokB9iBVqKo/PqazE=)
3: A558194E801F11EFB86B2647C4F9AE02.roa (hash: t9NapK/6qJjRf58S65SJlIEwaZxa09mw/H0Mw5wLnc0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl
rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2986 (0xbaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF905, serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C
Validity
Not Before: Apr 16 19:02:02 2026 GMT
Not After : Apr 23 19:02:02 2026 GMT
Subject: CN=69e1322a-1644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:55:8b:7f:24:7d:f4:1f:cf:b1:c8:d1:97:
86:e1:ca:89:ed:f7:6b:ff:bd:f6:b7:0f:b0:90:41:
f8:90:e7:d4:2b:8a:b5:69:38:56:1e:6e:5c:6a:ad:
82:5d:08:6b:db:3c:82:8b:eb:3e:62:10:09:15:90:
43:82:f6:f5:a5:c9:0c:52:03:d1:03:90:cc:44:39:
71:0e:b0:7b:6b:5d:4e:66:37:df:82:1b:f2:07:01:
e5:88:b4:b9:8c:68:1c:a9:e3:20:91:69:24:7d:c3:
8d:f5:3d:ca:1a:c2:e8:9b:e3:fb:f0:5d:14:28:71:
55:7b:3f:d2:15:4b:f1:a8:fe:35:e6:ed:27:09:fe:
98:c4:d8:2a:ab:ce:b5:89:7b:b0:fa:e2:9b:97:ff:
c1:e5:03:02:03:84:39:73:5a:b2:11:88:31:d6:54:
78:25:69:1b:55:24:56:71:01:86:54:19:db:4c:6d:
2a:f1:02:c7:0a:f2:d6:c5:8c:ba:b6:44:d2:12:e8:
e9:02:64:94:e3:0e:d0:11:cb:51:a0:fa:36:43:f7:
37:b5:74:20:76:f3:22:f0:94:45:4d:75:bd:82:72:
7f:7e:c6:e3:b2:78:b3:9e:92:ea:38:17:27:19:49:
61:e8:8d:80:74:9f:88:93:db:cb:1f:2d:7d:1c:ca:
7c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E4:57:0D:D6:23:9C:59:EB:3C:C0:43:15:CE:F2:0B:BE:3D:F5:7B
X509v3 Authority Key Identifier:
keyid:21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:97:94:dd:a6:67:59:d5:d0:36:5a:c6:f6:51:63:5c:43:d5:
3a:3b:77:42:d2:41:45:c9:3c:5e:fb:22:f6:3e:1c:0a:c2:91:
cf:86:9f:2c:56:7f:d8:87:e7:9e:8e:c4:fe:f3:a7:72:3f:d3:
d6:d6:8b:54:8d:5a:07:3c:bd:c7:e7:cf:9c:b8:80:18:b6:8a:
d5:67:56:ba:89:92:62:5d:a8:a3:56:b4:e0:af:09:d1:58:17:
c0:ff:8b:e5:0c:1d:77:4f:82:38:9f:cc:bf:87:fb:b3:56:d1:
dd:e7:9d:63:e7:b2:d8:97:22:c3:ab:4c:8c:52:97:dc:1e:f1:
4f:7f:17:b8:fb:10:73:96:8d:7c:51:97:82:f6:ea:cb:40:52:
a6:52:2f:08:f5:de:7d:61:ce:a8:21:1d:f7:37:6a:ed:9b:99:
73:3e:52:95:a1:ac:0b:94:8c:e9:b7:0d:22:0b:67:7b:8c:c5:
be:af:cb:dc:67:2f:fc:a6:87:c9:f2:85:7d:90:60:20:40:15:
70:04:e3:82:b3:96:95:70:78:62:0b:48:94:e3:08:b2:92:10:
8c:a4:33:5f:5b:f0:64:99:57:56:eb:b3:23:9d:06:41:26:1d:
a8:ec:d1:4c:c8:46:9f:94:b8:98:99:42:09:60:6c:0e:09:59:
49:6e:6c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:00:24 2026 by rpki-client