
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
File: iaMdROlPHMJ4ULusFsAsIKqznOU.mft (raw, json)
Hash identifier: 5xwyIKlOJEXhsG74PcpqEDtGMEdOAjFjEbA+Qlc7ezo=
Subject key identifier: 33:37:91:42:A2:AC:13:E2:2D:6B:92:F3:EA:D0:C2:42:78:D7:6F:B8
Authority key identifier: 89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5
Certificate issuer: /CN=A9196F73/serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5
Certificate serial: 0B7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
Manifest number: 0B68
Signing time: Tue 12 May 2026 19:14:31 +0000
Manifest this update: Tue 12 May 2026 19:14:30 +0000
Manifest next update: Tue 19 May 2026 19:14:30 +0000
Files and hashes: 1: iaMdROlPHMJ4ULusFsAsIKqznOU.crl (hash: RiXnGh7d9Y5QV4ZCNP4hj+ut7cyu1OA5UxMYZZfMyQA=)
2: F392CF9E53A311EAB1641213C4F9AE02.roa (hash: hK13KfCAsMi+xHUuka2Pkznncer1XgUOHCwFnVLDtqM=)
3: 9AE4F7EC53A211EA8D26BD0CC4F9AE02.roa (hash: JuE06CSNAAV8+NliC0AVlzjHWrODAM4vJnnB5WZLKk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl
rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:14:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2942 (0xb7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196F73, serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5
Validity
Not Before: May 12 19:14:30 2026 GMT
Not After : May 19 19:14:30 2026 GMT
Subject: CN=6a037c17-fe89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7c:d8:3d:5a:3c:f9:72:0a:db:ef:b5:16:b2:
cb:ba:7e:c0:f7:8b:30:2d:7e:4d:1e:d7:6a:92:e0:
91:53:15:42:f4:20:74:e6:65:54:ba:a4:9a:bd:e8:
ba:a3:18:9f:e9:25:b4:68:57:67:b0:25:a2:9b:67:
e9:1c:b1:ef:fb:1b:5d:f4:e9:7d:48:31:66:5f:59:
56:17:70:f5:97:27:84:74:97:d2:7e:53:cf:b8:27:
11:61:be:82:ca:fa:1f:e4:16:4d:84:f1:86:84:79:
74:2d:8b:dc:90:7b:e6:a1:de:bc:4b:7b:ab:1d:e0:
ff:4e:ee:95:d8:05:de:b7:fe:61:eb:e8:0e:65:44:
9c:4c:ea:25:08:fb:cf:ed:4e:ee:7f:f0:99:5d:53:
c7:28:a4:66:31:a6:4c:16:f6:7c:e7:4d:85:2f:87:
91:b5:62:58:3f:11:18:7b:a8:8a:d5:3b:f9:1f:53:
99:76:4e:64:6c:5a:18:c7:c2:34:ab:06:d3:93:23:
e3:01:57:30:a0:0e:7d:31:19:30:5a:2e:83:b7:e2:
88:f8:3a:5b:5f:f8:f0:c5:e3:4e:e5:63:1e:12:72:
c2:64:53:e4:80:23:22:ae:0c:da:cc:a1:7d:4d:db:
c7:46:dd:5f:8c:2f:bd:82:54:24:95:72:c3:82:9d:
5d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:37:91:42:A2:AC:13:E2:2D:6B:92:F3:EA:D0:C2:42:78:D7:6F:B8
X509v3 Authority Key Identifier:
keyid:89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:10:c8:9e:2a:f3:f0:e2:71:9f:f8:1d:0e:f7:6c:9c:23:03:
9a:a6:82:3e:76:10:8f:37:2c:2d:b7:73:9c:23:52:87:c6:51:
e1:58:19:62:48:bb:e8:89:81:bb:27:22:1e:55:9b:91:15:ab:
fa:d2:27:dd:99:31:e1:a3:70:95:d1:07:69:21:36:18:e7:e7:
bc:66:31:e2:62:93:d1:39:03:5f:29:08:fa:99:56:b2:04:ef:
a1:27:11:16:fc:96:95:b0:63:9c:09:fa:7b:74:a9:42:b5:5c:
e1:02:59:e8:5d:a8:1a:80:3e:7b:c2:5d:9f:d6:fc:73:5d:a0:
a6:b7:45:05:38:38:6e:35:9d:79:32:84:0b:5a:5b:d5:6e:47:
f7:94:d7:8d:ef:10:28:98:9d:3b:7d:a9:ff:64:59:2f:62:d1:
1b:50:f5:13:32:9a:16:36:3f:d3:e4:2b:56:7e:04:84:50:c9:
92:ae:47:17:9a:fe:ab:d1:7f:21:da:30:6e:57:95:08:f2:86:
54:b7:77:db:be:20:9f:a6:85:8f:e6:08:8c:e3:b6:c7:9b:c2:
04:f1:09:b9:8a:f8:a1:f8:bc:71:19:c2:a8:0e:c7:f8:7a:61:
5b:ea:ea:01:6e:79:0e:4d:76:2a:cf:05:d0:93:45:67:25:70:
a4:e2:8d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:40:32 2026 by rpki-client