
$ rpki-client -vvf rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft
File: iQyucO4FJzcpUQC_DPAR6zIEYrc.mft (raw, json)
Hash identifier: TV0jTvixuYJqzM5iEvhzGLZ/wHwE8AyIOVtGwBx6Uqk=
Subject key identifier: E8:9E:8C:DB:48:9F:6E:34:1D:B1:D8:2B:D3:B9:AC:CE:98:92:36:02
Authority key identifier: 89:0C:AE:70:EE:05:27:37:29:51:00:BF:0C:F0:11:EB:32:04:62:B7
Certificate issuer: /CN=A91801AC/serialNumber=890CAE70EE052737295100BF0CF011EB320462B7
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft
Manifest number: 54
Signing time: Thu 23 Jul 2026 10:19:36 +0000
Manifest this update: Thu 23 Jul 2026 10:19:36 +0000
Manifest next update: Thu 30 Jul 2026 10:19:36 +0000
Files and hashes: 1: iQyucO4FJzcpUQC_DPAR6zIEYrc.crl (hash: Bv0wl6K7XymdW9NosQ9FK5DbSD3aRDp6kutTmJdim7E=)
2: 58548E7E58D711F193388669A6833773.roa (hash: 5SoJbf8FG3By3aUEH9+1tHflBLhQTGm7shpUveBVDcQ=)
3: 28C5A13E58D711F1A51CFA3FA6833773.roa (hash: vdn++VmCdwWiyzm/zFcI+x86Ju8nJ7UCVdrrR8Mfcxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.crl
rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:19:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91801AC, serialNumber=890CAE70EE052737295100BF0CF011EB320462B7
Validity
Not Before: Jul 23 10:19:36 2026 GMT
Not After : Jul 30 10:19:36 2026 GMT
Subject: CN=6a61eab8-43dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:dd:99:fa:34:03:50:d3:a7:d4:14:a6:ca:
e2:bd:95:a1:9e:15:de:c9:09:ba:57:04:32:3f:9f:
32:78:31:bc:8f:5d:68:41:2c:5f:fa:01:4c:9c:39:
99:e5:52:a0:d3:99:41:aa:36:30:cb:83:dd:9d:a3:
1d:b3:ee:11:05:89:a5:f0:b9:38:2e:c1:b0:e1:28:
2b:c4:e6:a4:22:86:1d:4a:0f:bb:cb:db:19:7c:a2:
1e:ba:b5:28:5e:a8:ba:c5:05:4d:91:60:59:62:d6:
15:ee:c1:09:41:18:f5:31:47:e1:41:0d:de:a7:a7:
f2:9c:e0:c2:1c:4b:63:6b:25:19:0a:d2:2f:10:1a:
ad:3b:d3:f2:6a:d8:44:15:11:55:c3:6e:21:ca:2a:
8f:a0:fc:7e:67:37:14:15:b7:49:07:3a:d8:31:53:
31:23:d5:aa:f7:d1:82:9e:f1:90:4e:0a:d1:26:0c:
e6:ea:5c:e5:3c:fe:74:f1:18:cc:1c:21:2d:c2:96:
55:97:02:13:a3:f2:2f:91:35:5c:c8:a1:4e:1d:98:
69:61:e7:f9:f0:4a:25:41:d5:9c:70:f2:b4:51:74:
bf:2a:4c:e1:6f:b3:75:fc:80:c7:14:c7:05:fc:20:
2a:89:ca:c2:70:18:a3:24:1e:7c:e0:9c:cd:2c:3e:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9E:8C:DB:48:9F:6E:34:1D:B1:D8:2B:D3:B9:AC:CE:98:92:36:02
X509v3 Authority Key Identifier:
keyid:89:0C:AE:70:EE:05:27:37:29:51:00:BF:0C:F0:11:EB:32:04:62:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9b:ff:e7:b2:08:20:1d:46:a0:b6:d0:d3:eb:03:90:57:72:
a2:ae:4b:96:88:e4:3e:21:ac:74:3c:6c:28:b5:f2:7d:f9:7d:
59:3e:14:c8:e1:46:f3:cf:90:d0:74:5a:b9:78:9f:de:fb:78:
41:3e:7e:9b:a2:e3:da:2e:a5:12:5b:0a:42:a0:c0:c3:6e:51:
00:71:cb:1c:30:3d:c8:19:04:9c:ad:e4:50:ce:e4:93:1b:85:
a3:4e:8a:64:b7:9f:5f:ef:41:30:ca:7f:bf:72:39:29:eb:ff:
b9:6d:7f:74:e7:2a:71:a7:64:b9:ab:df:b0:89:14:bf:38:35:
90:10:3a:eb:e3:ac:d2:fe:ae:f9:38:24:e6:3a:4a:94:9c:97:
b5:cb:0e:78:f6:54:de:09:3e:4d:78:ac:b6:6c:6a:57:3b:8e:
05:24:43:af:81:2c:39:dc:e5:e8:21:5c:93:53:79:f5:cd:d5:
ca:d7:32:a0:de:15:52:77:5d:72:f9:ca:36:37:79:9d:9c:c0:
30:a6:16:a9:72:39:bc:12:73:c4:90:03:87:fd:7a:5c:73:dd:
7a:2f:ad:c9:4e:1e:53:49:4b:d8:49:1b:4e:4c:b0:ae:3d:2f:
b6:3f:90:45:90:cb:9b:73:fe:21:fa:0a:e5:89:76:ea:6b:4d:
01:11:ee:39
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MDFBQzExMC8GA1UEBRMoODkwQ0FFNzBFRTA1MjczNzI5NTEwMEJGMENGMDExRUIz
MjA0NjJCNzAeFw0yNjA3MjMxMDE5MzZaFw0yNjA3MzAxMDE5MzZaMBgxFjAUBgNV
BAMTDTZhNjFlYWI4LTQzZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCoyd2Z+jQDUNOn1BSmyuK9laGeFd7JCbpXBDI/nzJ4MbyPXWhBLF/6AUycOZnl
UqDTmUGqNjDLg92dox2z7hEFiaXwuTguwbDhKCvE5qQihh1KD7vL2xl8oh66tShe
qLrFBU2RYFli1hXuwQlBGPUxR+FBDd6np/Kc4MIcS2NrJRkK0i8QGq070/Jq2EQV
EVXDbiHKKo+g/H5nNxQVt0kHOtgxUzEj1ar30YKe8ZBOCtEmDObqXOU8/nTxGMwc
IS3CllWXAhOj8i+RNVzIoU4dmGlh5/nwSiVB1Zxw8rRRdL8qTOFvs3X8gMcUxwX8
ICqJysJwGKMkHnzgnM0sPselAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6J6M20if
bjQdsdgr07mszpiSNgIwHwYDVR0jBBgwFoAUiQyucO4FJzcpUQC/DPAR6zIEYrcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwMUFDL0IwNzUwMjhBMTJD
QTExRjFCQ0JBMDA1RTA2M0Q4QzY3L2lReXVjTzRGSnpjcFVRQ19EUEFSNnpJRVly
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaVF5dWNPNEZKemNwVVFDX0RQQVI2eklFWXJjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw
MUFDL0IwNzUwMjhBMTJDQTExRjFCQ0JBMDA1RTA2M0Q4QzY3L2lReXVjTzRGSnpj
cFVRQ19EUEFSNnpJRVlyYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA/m//nsgggHUagttDT6wOQV3KirkuWiOQ+Iax0PGwotfJ9+X1ZPhTI4Ubzz5DQ
dFq5eJ/e+3hBPn6bouPaLqUSWwpCoMDDblEAccscMD3IGQScreRQzuSTG4WjTopk
t59f70Ewyn+/cjkp6/+5bX905ypxp2S5q9+wiRS/ODWQEDrr46zS/q75OCTmOkqU
nJe1yw549lTeCT5NeKy2bGpXO44FJEOvgSw53OXoIVyTU3n1zdXK1zKg3hVSd11y
+co2N3mdnMAwphapcjm8EnPEkAOH/Xpcc916L63JTh5TSUvYSRtOTLCuPS+2P5BF
kMubc/4h+grliXbqa00BEe45
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:38:07 2026 by rpki-client