
$ rpki-client -vvf rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
File: iUNmPc-DCfonSkZS-oOr0m2EJk8.mft (raw, json)
Hash identifier: GuipiioY35C0jsV2mLdtHKQfhuw/WooMUvLQLmUCZPA=
Subject key identifier: 1B:9C:97:D6:A3:F4:E9:A0:8A:D7:D2:86:F5:02:28:D7:85:2B:F7:1B
Authority key identifier: 89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F
Certificate issuer: /CN=A913097A/serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F
Certificate serial: 0578
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
Manifest number: 056C
Signing time: Thu 23 Jul 2026 00:08:23 +0000
Manifest this update: Thu 23 Jul 2026 00:08:22 +0000
Manifest next update: Thu 30 Jul 2026 00:08:22 +0000
Files and hashes: 1: iUNmPc-DCfonSkZS-oOr0m2EJk8.crl (hash: /9jn3V5adeiMhsPiFd51ARgGLFHBiEwhb4DcnvuEW14=)
2: A18054D6CB9F11F088CB660AC4F9AE02.roa (hash: K1f/qaJuEbUdhfD0uMMWW5s85D2uyNgYsK07EHXQMGc=)
3: D19C3D9CCB9F11F090C50D0BC4F9AE02.roa (hash: uGlOlq0hoAHAqivL5Gx3x5YPd18McYYtsJimOV3Kgqs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl
rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:08:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1400 (0x578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913097A, serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F
Validity
Not Before: Jul 23 00:08:22 2026 GMT
Not After : Jul 30 00:08:22 2026 GMT
Subject: CN=6a615b76-3e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:83:21:d6:da:6b:fa:c6:12:30:79:11:0b:
9d:10:cf:7d:7c:9f:5f:b4:ef:98:ca:03:72:c2:f3:
e8:0e:79:60:85:1b:b8:8f:47:09:36:f5:f6:33:7b:
28:b9:90:0a:0f:11:9d:ee:7d:69:30:33:5e:96:d9:
66:bc:82:7b:24:a4:a4:be:ce:f4:e7:a8:1f:4f:e3:
41:06:23:cc:0b:57:f2:95:b4:1a:bd:fe:80:5a:5e:
fb:ff:1f:1e:ef:23:3b:fe:08:e2:e9:52:b8:e1:3a:
35:85:5a:ba:93:a4:56:14:c5:64:01:83:d8:b1:fa:
30:61:4c:92:b6:c1:01:d0:60:30:8c:90:e3:37:17:
ac:74:b3:21:83:c7:8a:44:d5:1e:42:b1:6a:82:54:
ea:32:d5:76:76:69:e5:01:52:cc:d8:6e:69:99:bd:
af:a4:af:c7:17:f0:f7:2f:bb:c5:a8:d8:78:5a:9e:
a2:89:73:a6:8b:54:66:86:bc:10:01:f6:64:b1:a1:
83:d0:d7:08:c8:02:ca:5f:4e:5b:94:61:5f:cb:43:
15:88:e7:3f:0c:a1:81:63:c2:ce:59:57:68:73:24:
0e:cb:a9:78:a1:35:37:4a:38:7b:b5:45:cf:73:3d:
95:af:d2:6e:2c:c7:7d:1d:a2:60:59:ae:84:9d:2f:
f5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9C:97:D6:A3:F4:E9:A0:8A:D7:D2:86:F5:02:28:D7:85:2B:F7:1B
X509v3 Authority Key Identifier:
keyid:89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:a4:c8:d8:ff:b8:00:c7:62:e7:9d:dd:86:e6:da:bf:12:a1:
59:11:c0:bc:f1:a2:91:de:1f:72:5a:7d:1c:96:d7:7b:45:82:
89:be:7b:da:8c:85:65:44:84:d2:e4:73:e4:e9:e7:68:ec:ff:
1a:03:c8:46:35:9a:d7:44:13:e7:80:32:3a:0e:74:a3:55:54:
0b:5e:ee:f1:4b:2f:21:8e:10:cf:ce:bd:75:0f:cd:40:48:cd:
42:57:fb:d2:dd:70:03:1b:88:9d:0b:5c:67:f6:8c:7a:67:24:
3c:93:53:a5:be:6e:0e:81:a0:75:75:3e:8a:e2:29:8e:1e:2f:
97:47:b1:8d:6d:02:67:22:99:d6:c5:69:27:48:93:28:9c:47:
e1:db:86:0c:e5:9a:64:0e:21:d4:c9:7d:ee:d9:84:50:5f:46:
e2:f4:20:32:d3:31:b2:67:7e:c3:27:ed:70:71:a1:ce:83:71:
3a:03:99:b6:4c:c7:85:04:45:ca:71:44:c6:72:99:2c:eb:99:
44:dc:5f:7a:50:24:84:00:18:70:16:6d:36:c8:c7:8f:21:1d:
28:5f:92:df:2f:9f:d9:bd:40:a2:5a:05:44:1f:18:04:8b:4c:
3f:55:0d:78:d5:59:fa:af:b7:33:dc:94:30:23:39:11:fc:05:
26:89:59:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:40:02 2026 by rpki-client