
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
File: IAg9TfqETFcnVYxMdW2yDfgHzYE.mft (raw, json)
Hash identifier: jOjwe07fyk/7WGfJLYeWHlF5wz2UCzSoBzeDu9/hqD8=
Subject key identifier: 44:E5:DA:F2:5E:62:58:F9:DD:0F:3E:69:80:14:3F:F9:4A:63:F0:65
Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Certificate serial: 285F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
Manifest number: 27FD
Signing time: Fri 12 Jun 2026 15:37:02 +0000
Manifest this update: Fri 12 Jun 2026 15:37:01 +0000
Manifest next update: Fri 19 Jun 2026 15:37:01 +0000
Files and hashes: 1: IAg9TfqETFcnVYxMdW2yDfgHzYE.crl (hash: 6KHNYxQPYHI9m1VyBbRmoh1zMzMOhxOSJpW8mEc1W0g=)
2: AE887848662211E7BC7E2636C4F9AE02.roa (hash: yguaeDRY2LrplRRxYoB5c17oEpxtDyf7LCchlUNWLhg=)
3: BBF567AEB0F011E5A08A224DC4F9AE02.roa (hash: CwxMtEC9C2VpkRtrAxOmkLDgNIDnCe2kUJg3AFTCZ+Q=)
4: 42724A42D87811E98F4DC832C4F9AE02.roa (hash: 5BYZiRHvjyJIsu14LPOqC/GaRFFvT8HGEEUVggDRccA=)
5: BD84664CB0F011E5A08A224DC4F9AE02.roa (hash: Gyt9cN9nsxb60dLcwbjKsF6bTMWMBoLo3xgo2Mxq9V8=)
6: B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (hash: qPNE4ik7PHwaeTLCAW9M3KmHWwisOjArimwmq3855Xw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl
rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:37:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10335 (0x285f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Validity
Not Before: Jun 12 15:37:01 2026 GMT
Not After : Jun 19 15:37:01 2026 GMT
Subject: CN=6a2c279d-e009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:8a:49:d0:fe:10:b5:6b:51:3f:cd:91:1b:
05:0a:e2:3b:fc:ae:ea:6e:96:9d:b4:f9:14:06:29:
23:86:49:b8:76:14:1e:ca:70:8c:c4:04:ea:62:c7:
a5:5c:b4:e0:53:e8:a7:be:73:47:40:8c:96:e0:91:
80:5d:54:b3:e4:2e:da:89:91:ca:48:9f:c5:09:3d:
85:dc:fc:33:1e:61:56:ea:43:60:f0:22:e1:e6:da:
d4:16:d3:e7:8d:20:a4:84:4d:c4:65:a2:53:8c:aa:
3c:a3:2b:f6:2c:99:7b:90:96:d1:36:1c:4d:8e:be:
35:45:a6:9f:8a:91:a5:38:a9:0b:a3:5e:d9:fd:ef:
65:9b:8e:f7:86:a8:01:ab:af:e6:22:14:88:02:b1:
43:0c:b4:61:5b:96:2d:11:e1:2d:b1:28:22:6a:d5:
e4:e3:48:a0:04:89:85:c6:29:c5:fe:a9:9f:7c:dd:
8d:37:c6:c6:e8:b0:b5:8f:17:5a:99:52:fd:fe:ac:
6b:24:9f:5b:44:41:70:34:6f:dd:e9:17:36:ab:04:
31:b4:a7:0f:0b:71:7b:c2:fd:8c:e8:33:88:17:9a:
fe:fb:80:b0:ee:f7:74:8e:d0:5b:06:b5:9f:94:aa:
12:f2:d7:64:60:b9:63:c5:6a:c3:f0:26:84:b5:02:
04:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E5:DA:F2:5E:62:58:F9:DD:0F:3E:69:80:14:3F:F9:4A:63:F0:65
X509v3 Authority Key Identifier:
keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:d8:12:d3:4a:c1:c4:59:a0:3f:99:da:f6:f2:e4:3d:f1:e1:
75:fd:43:a3:b1:dc:b7:31:c9:fc:6d:ea:6e:d7:a6:1d:3e:3d:
a6:a8:a5:b7:04:2c:a1:31:e2:62:12:97:eb:5b:fb:2d:17:11:
79:95:37:d0:2d:67:32:50:fe:96:f7:1e:11:3d:21:55:85:4d:
9f:1f:c3:54:8f:13:1e:30:ef:1e:80:8b:a3:c6:f5:1e:91:a9:
6f:f8:29:a7:ad:bf:4c:6b:c1:58:59:1d:85:ee:a3:63:72:25:
50:ca:d7:70:0b:d9:6e:ec:38:a6:11:1b:7d:b3:a4:3f:25:27:
56:4b:ee:da:d8:00:a8:c5:23:68:88:10:77:b9:0a:49:21:ec:
c9:7e:2c:27:9a:9c:c5:cd:55:7c:18:8b:78:dc:ce:62:7b:41:
04:2a:39:78:88:32:04:07:d5:24:15:b2:03:19:77:2a:2c:19:
a3:a9:ee:94:78:61:43:f9:54:1f:6e:84:4b:40:f7:09:52:32:
0a:fa:65:86:36:13:3d:f7:26:50:e9:1a:10:8d:49:bb:ab:5e:
87:54:e7:17:0b:d7:2a:d8:73:0e:84:73:21:de:1e:fa:70:2e:
11:8f:93:64:a5:ff:56:f5:0c:6f:a0:ac:99:0f:58:97:50:bd:
02:66:cc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:43:22 2026 by rpki-client