
$ rpki-client -vvf rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
File: iUNmPc-DCfonSkZS-oOr0m2EJk8.mft (raw, json)
Hash identifier: H4EQYasYyZ0zxWCpnvk75JV9P3ZGcH5JfDmIw/PG4Lc=
Subject key identifier: 38:D0:C9:41:C6:44:5D:1E:6E:F3:55:70:D0:26:D9:F8:CF:42:A0:0A
Authority key identifier: 89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F
Certificate issuer: /CN=A913097A/serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F
Certificate serial: 0554
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
Manifest number: 0548
Signing time: Tue 12 May 2026 23:34:11 +0000
Manifest this update: Tue 12 May 2026 23:34:10 +0000
Manifest next update: Tue 19 May 2026 23:34:10 +0000
Files and hashes: 1: iUNmPc-DCfonSkZS-oOr0m2EJk8.crl (hash: UoL1GjX60+EoRDbVz1ImEsAfK0slM5a2yDfy+hnb1IA=)
2: D19C3D9CCB9F11F090C50D0BC4F9AE02.roa (hash: uGlOlq0hoAHAqivL5Gx3x5YPd18McYYtsJimOV3Kgqs=)
3: A18054D6CB9F11F088CB660AC4F9AE02.roa (hash: K1f/qaJuEbUdhfD0uMMWW5s85D2uyNgYsK07EHXQMGc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl
rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:34:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1364 (0x554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913097A, serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F
Validity
Not Before: May 12 23:34:10 2026 GMT
Not After : May 19 23:34:10 2026 GMT
Subject: CN=6a03b8f2-2260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6e:ec:5d:5c:30:fa:0f:dd:1a:a7:81:fe:6b:
15:1a:38:90:94:33:1d:b0:e9:aa:36:81:a7:cc:84:
f2:63:ec:a0:fe:93:6d:cf:0a:c3:ba:e5:3e:15:41:
2c:5c:cb:83:6c:35:f5:3b:b2:90:30:0f:89:43:bb:
94:8d:8b:c6:75:54:f7:df:6f:04:f3:80:ce:ed:b1:
26:e7:06:93:1b:e2:a8:b6:cf:2d:53:7f:3b:90:ae:
47:a1:d8:c5:23:c9:3d:a2:96:27:d8:7f:38:68:a0:
db:65:68:9c:45:d8:e2:59:df:7b:b6:a3:4a:4d:98:
07:df:99:ad:86:28:a8:3c:77:15:4a:4a:a4:0d:37:
27:30:19:f3:a3:69:ee:82:5c:ec:7b:17:89:7a:02:
7e:b7:9e:c7:fd:1d:b4:f3:81:bc:64:d6:a3:57:10:
04:b7:dc:e3:e7:36:1c:c1:d5:71:af:fe:3c:b9:5b:
c3:6b:88:29:5a:26:b9:8a:b8:73:ca:75:da:ee:ce:
69:e6:00:64:e9:4a:95:7d:ec:ea:e7:34:7e:40:d4:
8e:c0:51:69:bc:db:17:cc:92:b2:a1:30:67:5e:95:
68:e7:99:eb:50:ad:52:c3:49:b3:0d:c7:8e:6b:27:
94:ed:2a:7d:0c:d3:4e:5f:67:35:33:d0:8a:82:87:
26:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D0:C9:41:C6:44:5D:1E:6E:F3:55:70:D0:26:D9:F8:CF:42:A0:0A
X509v3 Authority Key Identifier:
keyid:89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:a8:ab:e9:51:1f:3b:23:3e:93:a3:0e:50:c4:f9:ab:3c:4d:
31:bc:17:40:8d:20:0c:49:e8:71:82:b0:4d:d0:06:10:16:72:
32:4a:81:ec:12:24:5d:9a:56:db:2b:db:cd:bd:e3:7e:ff:53:
1d:d9:4d:19:0a:0b:d9:ce:2b:90:c0:33:63:8e:0c:95:ea:49:
79:ac:bb:75:0a:02:3d:f5:7b:bc:9b:a9:f6:11:c1:01:8f:95:
30:a6:7c:ce:7b:cb:39:a9:6f:e1:2d:5a:bc:c1:49:24:03:08:
d5:f6:70:d7:79:13:76:18:da:d7:77:88:e3:06:69:fe:6c:f6:
72:49:08:03:05:7d:7c:a1:98:5b:d8:f0:88:9f:da:0a:65:23:
6b:36:51:9b:da:d3:52:fb:12:5d:27:33:32:95:26:b5:a8:56:
49:d8:4b:cb:08:56:2e:44:8e:07:49:ab:be:5b:fc:26:55:18:
08:80:95:ad:86:74:83:f0:e9:7d:17:f9:24:9b:98:00:bd:f6:
0b:2d:a1:dc:cc:97:73:bd:ad:57:15:00:84:11:99:4d:59:4f:
88:f8:a6:f4:e3:36:59:5d:81:bf:44:75:35:64:43:11:6b:23:
f1:5a:ac:bd:18:9e:36:d7:bc:05:79:cf:29:60:bb:84:90:70:
5b:74:11:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:29:03 2026 by rpki-client