
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
File: IO0KqyB1C4snqG35iadUv1cm3X4.mft (raw, json)
Hash identifier: FRWReKiE9e/xlZTW/NHHjT9EGX+r/CkVSiSAusdAYMA=
Subject key identifier: AC:3F:B4:02:D0:EE:18:56:FE:83:D8:AF:21:56:B4:CF:9F:A7:4F:15
Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
Certificate issuer: /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Certificate serial: 029D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
Manifest number: 0711
Signing time: Wed 29 Jul 2026 00:41:19 +0000
Manifest this update: Wed 29 Jul 2026 00:41:19 +0000
Manifest next update: Wed 05 Aug 2026 00:41:19 +0000
Files and hashes: 1: IO0KqyB1C4snqG35iadUv1cm3X4.crl (hash: IzeQIIpJYA0SYZOk64BKHcVDkFabmrMZ9FEFvY6WqWU=)
2: 005417D285BC11F18BCEC21B61A30FBC.roa (hash: FdR8EfX2jyJlYaepKSYMj9Kz67EaJGe2jtFZcU+7oXo=)
3: D9FDBEA0FB5D11F0A7F971C0496F56BC.roa (hash: Wx61e/Tv8ZK5H7v83kwm5JdbJjGGNDdnnszpCWgUdM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl
rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 00:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669 (0x29d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAB64, serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Validity
Not Before: Jul 29 00:41:19 2026 GMT
Not After : Aug 5 00:41:19 2026 GMT
Subject: CN=6a694c2f-b621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:69:46:0c:e2:a5:a9:d9:ee:ea:37:54:a5:b8:
bb:af:e0:0b:53:14:bc:37:62:72:29:82:00:c8:f9:
bf:e1:13:d6:fb:04:b7:3b:a2:fe:5c:16:ed:f7:e9:
f1:d4:d2:9c:9e:76:ec:2f:94:b5:ab:c0:25:04:fe:
a4:0b:33:99:18:c2:b4:49:16:be:e8:9c:04:1d:5d:
77:71:47:a7:6b:0e:68:43:b8:8a:a2:a5:ea:5f:a5:
0f:0b:99:de:d7:1b:17:b8:2b:b9:7a:6c:a0:98:81:
f1:ea:e8:c8:c6:20:52:9e:4c:10:a8:7c:51:72:9d:
82:4f:82:08:81:95:4e:40:5a:e0:39:28:ff:a8:21:
7e:fe:a8:a0:9e:df:bd:9c:1e:b7:e0:18:da:72:91:
1e:e6:57:c3:ce:1b:ea:0c:29:df:e6:00:02:4c:b5:
46:0a:8e:a6:00:b4:e1:05:36:a2:6d:53:e5:d8:7a:
80:14:e5:ef:3c:a6:f4:77:78:4f:63:1f:a1:e6:c2:
f1:7d:a4:c8:b0:60:10:9a:aa:b8:44:3b:65:f0:dc:
05:62:e6:ce:ad:71:a4:e1:2b:72:e1:3e:61:9c:f7:
ee:bd:fd:eb:11:f7:f9:3e:bc:f0:f9:d9:dc:ef:79:
25:a2:fe:bf:2a:d2:3a:48:27:e1:b0:ed:9c:14:a0:
7a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3F:B4:02:D0:EE:18:56:FE:83:D8:AF:21:56:B4:CF:9F:A7:4F:15
X509v3 Authority Key Identifier:
keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:ab:86:26:eb:a3:7d:c5:22:92:f9:cc:59:25:82:dd:60:b6:
85:54:13:20:ff:55:36:02:7a:15:9b:90:e6:b1:6c:fe:5b:bf:
ea:07:ad:d9:66:a8:c3:0d:1e:0e:44:39:94:cb:05:fc:3e:04:
56:0e:f3:d6:bf:51:b7:56:a6:17:da:e8:74:cc:ca:10:1f:8c:
0d:92:bd:27:f1:8f:41:8e:8d:a8:2a:60:9e:f0:21:25:92:52:
6f:54:02:89:5d:8a:aa:ab:06:6f:a5:a9:4f:11:16:fd:86:39:
21:ec:57:f1:43:e5:83:af:f7:2a:f9:8a:ef:fa:d0:b5:15:9d:
67:4a:69:55:7e:95:5d:2e:e9:89:f7:33:17:ad:1c:6c:65:77:
6a:67:99:e4:4a:aa:7c:c3:fb:0c:b9:64:10:af:3d:f0:39:71:
12:cf:38:68:0c:05:26:8a:4b:75:f4:c3:c1:c9:48:04:8b:03:
76:16:73:16:6c:3b:0e:44:2e:12:46:c3:08:2c:d0:ec:99:17:
e9:43:e5:3d:0b:84:02:ea:b7:a2:d6:a3:a9:75:43:af:b5:41:
36:00:35:59:96:dd:60:bb:38:6f:32:dc:40:19:76:2c:e1:1e:
32:fa:66:77:19:32:da:e1:e6:32:5c:8f:b5:10:6a:92:0d:c9:
bf:8e:cc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:42:30 2026 by rpki-client