
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft
File: iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft (raw, json)
Hash identifier: szqe+YJ/LxC0laTdz+Er/dQHys1guBjrRpLNHtX/UZA=
Subject key identifier: 63:A9:69:1E:6A:77:D7:BD:D2:D7:51:9A:43:BE:1E:AD:01:E6:22:FA
Authority key identifier: 89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34
Certificate issuer: /CN=A91F2046/serialNumber=894809630956924382CC39D460FA4764B0175934
Certificate serial: 0CD9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft
Manifest number: 0CCF
Signing time: Tue 28 Jul 2026 18:38:15 +0000
Manifest this update: Tue 28 Jul 2026 18:38:15 +0000
Manifest next update: Tue 04 Aug 2026 18:38:15 +0000
Files and hashes: 1: iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl (hash: Pk1SfSwzbObnxJJomcJ+OEAa8jgvl0zlYA+BFlNrzPk=)
2: 0D2573FA173E11EA947B2976C4F9AE02.roa (hash: Sez/a2sgGSbWwvJeQPZUS5uIi1mmZfqNVL6dsISb/6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl
rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3289 (0xcd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2046, serialNumber=894809630956924382CC39D460FA4764B0175934
Validity
Not Before: Jul 28 18:38:15 2026 GMT
Not After : Aug 4 18:38:15 2026 GMT
Subject: CN=6a68f717-d7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:03:b2:20:10:55:30:86:41:fe:31:a4:34:4b:
a4:7b:10:ec:b9:3f:7b:f5:6e:0a:93:a6:02:f7:d7:
64:0b:e4:3a:52:a5:f6:49:8c:0d:84:9e:91:3c:78:
b7:c6:0d:28:b6:80:9d:88:a9:c0:c5:f7:b5:e8:d0:
d3:52:6b:e5:88:57:2e:32:a1:9f:72:b8:ab:18:4a:
f1:d5:0b:7d:3a:9c:2e:02:dd:13:0b:91:3a:f7:7a:
6d:9b:e0:6e:7a:4a:88:00:79:22:79:38:d1:a8:57:
43:3a:0d:50:bd:4f:cf:47:07:a1:d2:ec:bf:84:91:
59:4b:f1:cf:4c:bf:ae:34:45:6e:a7:1b:ab:57:be:
02:48:e5:14:e8:48:35:20:aa:35:60:18:a9:ce:f7:
0f:60:e5:77:1b:b6:ab:19:68:c5:f5:39:af:e5:a9:
ac:3f:29:e2:4a:b9:91:35:87:39:a7:57:2e:17:6d:
64:d5:b3:56:1b:8f:71:cc:35:aa:90:1b:12:41:98:
f5:e0:28:13:cf:3c:45:7c:8e:73:43:66:04:5f:52:
9e:e7:0c:e9:70:cd:20:9b:7f:4d:05:03:e3:c0:82:
60:ae:8e:7a:93:c7:c7:f8:aa:5c:a5:9c:1d:7b:10:
88:cf:a7:74:d3:c4:c2:47:8d:66:32:da:86:43:44:
9b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A9:69:1E:6A:77:D7:BD:D2:D7:51:9A:43:BE:1E:AD:01:E6:22:FA
X509v3 Authority Key Identifier:
keyid:89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:45:d1:79:2a:0a:ae:34:13:db:c8:66:10:f4:f4:5f:6e:0a:
17:01:28:55:58:80:21:46:8e:3f:3f:f2:5a:92:fc:f0:76:1e:
fe:b9:db:96:f9:1c:c6:84:b0:d1:9e:75:64:93:bb:c7:7f:1f:
65:1a:74:ef:85:94:d7:16:10:f8:a2:6e:11:a0:93:d1:61:fe:
c8:40:31:cf:4f:c6:de:97:f3:27:44:ed:6d:64:70:cf:53:5d:
be:7b:0e:0e:59:0e:44:44:a3:0a:38:32:ea:93:ba:b6:2f:88:
e6:5b:96:f9:fe:9a:11:cb:01:cc:06:4e:7d:e5:54:0c:e5:85:
25:53:5b:cb:05:0b:e3:ac:3b:4b:15:09:bf:c5:07:c0:c8:f3:
21:5a:c0:21:a1:a9:01:79:2c:67:f5:64:1a:0e:96:12:91:45:
a3:f6:03:07:ee:89:6e:f9:df:2b:04:a6:4c:02:e3:c6:2a:77:
7d:c8:26:fc:c1:c6:d8:f7:cf:de:fd:ec:b4:75:b8:ca:35:24:
ce:50:c9:d6:78:b3:5a:b4:2b:6a:8b:12:d1:b7:76:23:da:c1:
5c:d6:f4:88:00:10:f2:13:c8:f3:1d:1b:26:9a:57:b4:3e:4f:
bd:53:16:cb:41:23:fb:71:78:0f:81:dc:06:ec:da:86:ec:5f:
b4:ca:5b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:55 2026 by rpki-client