
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
File: IAg9TfqETFcnVYxMdW2yDfgHzYE.mft (raw, json)
Hash identifier: 8yHiyJZavHjmKogwTFfGL377s/81SGnYeze4+OBQ57U=
Subject key identifier: 36:CE:8C:38:20:A1:7C:76:32:18:88:41:96:E3:79:63:73:31:F5:64
Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Certificate serial: 287D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
Manifest number: 2816
Signing time: Tue 28 Jul 2026 15:43:46 +0000
Manifest this update: Tue 28 Jul 2026 15:43:45 +0000
Manifest next update: Tue 04 Aug 2026 15:43:45 +0000
Files and hashes: 1: IAg9TfqETFcnVYxMdW2yDfgHzYE.crl (hash: pWC+yJDrpTQS5f0QJTY9jKnZLRRctZjj3GlOHO2sdMI=)
2: BBF567AEB0F011E5A08A224DC4F9AE02.roa (hash: YJfAoBkyrE+KczU7YG1IOLfGOIMvqyD7LgGEH0JL+no=)
3: AE887848662211E7BC7E2636C4F9AE02.roa (hash: Je1W247OTPgG5j2EStSR2tsSnqzHQNrvzMKG91jUwPw=)
4: 42724A42D87811E98F4DC832C4F9AE02.roa (hash: ZJYaPsTMO3Cea4Hqz4wOhF/LU5hO3CBOLG+2o7dGQng=)
5: BD84664CB0F011E5A08A224DC4F9AE02.roa (hash: BMqNg3S+vVRbcjj4gtej8V0T5DqfpOPrq+PFV3hoy/s=)
6: B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (hash: 768uBhCuBq3slVPURG8JxN+/BsuzFS5sZEwWCDdjApw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl
rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:43:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10365 (0x287d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Validity
Not Before: Jul 28 15:43:45 2026 GMT
Not After : Aug 4 15:43:45 2026 GMT
Subject: CN=6a68ce31-280b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:53:f9:04:50:fb:eb:02:87:4d:e2:50:fd:d6:
36:24:2b:1b:89:17:a8:84:c9:97:d0:35:79:5a:cd:
dd:4a:10:04:66:a0:b9:34:c9:a4:4c:10:be:aa:98:
40:2c:ae:e0:db:38:67:72:ea:3a:43:ba:12:0e:12:
95:f3:ff:2d:e5:e9:ba:46:bb:96:8c:22:fc:7b:8a:
ad:2c:aa:2d:4d:c7:fa:65:f9:a7:fa:65:b2:ac:be:
5e:c5:3a:e2:13:1e:53:cd:cf:1a:12:ee:e2:55:65:
d5:d8:1e:e8:c5:b1:45:88:92:d8:93:54:eb:84:58:
32:07:0c:9e:40:3d:ca:31:d3:eb:bc:3b:f0:cf:3d:
b0:e1:d5:aa:2d:77:8b:3a:dc:98:46:25:c1:56:bf:
b9:55:56:b1:98:d0:fb:c8:39:97:87:3f:e7:5a:de:
55:00:81:d5:e5:d0:f1:f9:f7:b9:a3:6e:7b:c9:aa:
cc:50:22:f7:19:5b:30:30:4f:27:b1:9a:82:36:32:
e3:6f:54:da:43:b2:61:f3:92:ee:be:85:1a:2f:82:
44:2b:5a:30:4e:9d:90:ce:c8:65:b1:bd:a3:cf:82:
c8:d8:f3:c7:60:0e:a2:09:d2:8f:0f:78:95:47:fd:
44:51:1f:df:75:39:c8:69:b6:bf:98:22:a5:9b:93:
69:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CE:8C:38:20:A1:7C:76:32:18:88:41:96:E3:79:63:73:31:F5:64
X509v3 Authority Key Identifier:
keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:79:c3:13:27:12:78:25:c4:b5:aa:4a:c1:20:c3:e6:17:52:
ed:0a:9c:64:dd:76:31:38:97:0b:bf:f1:f2:5c:89:80:ab:4c:
91:0f:cb:3d:7b:82:01:aa:36:f0:c8:06:c9:6f:92:a3:c2:cf:
84:8f:85:01:1d:36:88:bb:7f:c2:ea:cd:6e:0b:c7:2f:3f:41:
1f:68:dc:1d:2e:96:31:d0:0d:29:1a:87:0a:d4:9d:f6:98:63:
60:77:5e:90:1b:6c:90:8e:0d:01:c4:c4:bc:24:14:4c:1a:ff:
8a:ad:1e:a7:54:46:53:84:3a:43:83:f4:46:36:14:82:c5:c9:
90:6b:40:07:aa:6e:a5:0e:a0:1b:4b:30:2a:ed:c5:03:04:5e:
67:48:15:d3:1f:28:13:49:9e:37:8e:e5:83:49:79:ab:90:79:
3f:ad:cb:52:cc:63:b7:d6:ff:32:4d:47:b4:51:e9:3d:ca:56:
7f:e3:cf:da:64:79:94:b3:cd:ef:a4:1e:41:70:ec:65:00:73:
8f:64:cb:e6:c8:0e:8b:43:63:87:b2:cf:48:7e:49:73:1b:07:
3c:9a:8e:88:60:6b:40:25:f6:34:ef:17:cd:ea:b1:6d:64:02:
fc:27:2b:e5:51:76:52:f8:f5:77:0d:7f:ed:06:e9:0a:bb:c7:
dc:e1:4e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:06:42 2026 by rpki-client