
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft
File: IadvO7gWz_58RmVVwrC-vJx7xW4.mft (raw, json)
Hash identifier: aulNOsIkMarRx7wn5GyGkswi9d0NbuM+m1k6bnDAfhw=
Subject key identifier: E3:DA:2B:F1:08:9F:31:62:2B:F5:B7:DB:7D:7C:CB:B8:16:17:C6:7E
Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E
Certificate issuer: /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E
Certificate serial: 0585
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft
Manifest number: 0573
Signing time: Fri 12 Jun 2026 23:22:58 +0000
Manifest this update: Fri 12 Jun 2026 23:22:58 +0000
Manifest next update: Fri 19 Jun 2026 23:22:58 +0000
Files and hashes: 1: IadvO7gWz_58RmVVwrC-vJx7xW4.crl (hash: VWXVBWgeRW4Xc9HLwdylHRGAHUYb780RN58tqt/73s4=)
2: 44D508E43C8311ECA86D031EC4F9AE02.roa (hash: rybthJdFuq/pPEywNNw6CY2xy0sjK2dGh2/15++J1U4=)
3: 45CC5B763C8311ECA86D031EC4F9AE02.roa (hash: Uw2FZTkHUIqrr7yagK8cTLFCJvmGH/94ekgNsNUOejg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl
rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:22:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1413 (0x585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA559, serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E
Validity
Not Before: Jun 12 23:22:58 2026 GMT
Not After : Jun 19 23:22:58 2026 GMT
Subject: CN=6a2c94d2-d82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1f:0b:0d:3b:87:36:92:b1:78:5d:2b:90:9a:
92:f3:80:88:10:35:39:08:a1:35:60:34:6d:64:61:
4a:77:de:98:60:c4:6d:ef:80:02:f5:d0:71:fc:67:
73:53:5b:59:1d:67:ad:32:56:b5:3d:54:07:88:4e:
c3:b7:d4:04:fd:a8:f8:72:64:68:11:9c:37:9e:65:
33:ef:c0:84:41:f9:ad:5e:f2:ff:de:90:ef:9a:ac:
96:d7:f2:d9:e2:43:3f:77:ab:c8:d6:6c:b6:3e:a1:
3f:0f:2e:8b:d0:80:ec:99:5b:2d:e3:69:30:09:8e:
14:63:b7:82:47:e3:82:5e:5f:7d:20:6e:0d:c8:06:
cc:a0:f3:e4:58:6f:2a:5b:48:7e:c9:6d:4b:a8:eb:
af:30:db:ef:77:9c:82:41:58:eb:1e:ed:54:67:03:
c8:a6:a7:75:b7:c7:70:57:47:fb:07:0d:35:e4:d2:
67:48:f6:7f:5f:12:5d:ed:04:b9:9e:25:e9:12:75:
56:9f:58:d0:4c:23:ec:2a:b9:bc:d1:5c:5b:9e:77:
44:fd:9f:7d:d0:40:b3:1b:a0:e8:c2:a0:a0:d1:75:
42:1d:9e:e7:2f:30:0c:e1:c6:41:91:60:fc:c3:4d:
88:0a:99:4c:56:11:ce:9b:94:56:34:c6:f7:bb:b7:
af:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DA:2B:F1:08:9F:31:62:2B:F5:B7:DB:7D:7C:CB:B8:16:17:C6:7E
X509v3 Authority Key Identifier:
keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:dd:a4:df:76:1a:08:16:64:60:28:53:5c:28:a7:04:30:8c:
7b:21:5d:13:50:dd:1e:0d:4f:b1:56:15:bb:d5:6a:26:19:06:
ec:b5:23:87:9f:00:32:dd:61:b0:90:47:7a:b5:31:b6:e5:a8:
5c:52:4d:16:1c:a4:a8:f0:e0:9a:d0:20:cd:10:d5:b7:49:4d:
d2:c8:be:65:20:98:c1:b4:25:f6:c6:fe:e9:3a:04:f4:18:da:
90:6e:55:c9:9f:5b:fb:64:8d:6c:ea:dd:78:b8:e6:6c:a9:51:
be:e7:3f:0f:9e:d5:26:81:06:ee:4e:fc:df:cb:6e:1d:84:f8:
6f:09:f3:c4:4e:cb:d7:d5:c3:04:ba:b7:51:dc:f5:03:3e:b5:
06:09:15:7d:a2:f9:e1:30:70:45:ad:14:f0:c8:02:7e:70:84:
12:56:15:d3:29:1e:93:50:c2:e4:73:1d:0d:39:bb:a0:e8:db:
ec:39:92:f5:fd:bb:9e:22:57:37:96:9c:02:ca:1a:0e:58:56:
73:c9:d8:2b:a9:08:49:a0:29:61:1e:fd:93:4b:bc:dc:e4:aa:
f9:3b:46:c6:75:2d:76:b3:1e:f0:06:7e:07:50:d4:61:bd:e9:
5f:a6:01:56:a9:5d:2f:1d:e5:95:1a:00:1e:ac:55:27:73:05:
46:1d:26:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:48:29 2026 by rpki-client