
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
File: iaMdROlPHMJ4ULusFsAsIKqznOU.mft (raw, json)
Hash identifier: 8ae4JGNI8tqW4A8yDc7SyqZNeC58JAZAUi+fis258Iw=
Subject key identifier: 53:B0:79:EE:30:BB:C6:DC:16:EE:A8:A1:BF:B8:E7:D5:6E:83:A1:FF
Authority key identifier: 89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5
Certificate issuer: /CN=A9196F73/serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5
Certificate serial: 0BC6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
Manifest number: 0BAE
Signing time: Tue 22 Sep 2026 18:55:46 +0000
Manifest this update: Tue 22 Sep 2026 18:55:45 +0000
Manifest next update: Tue 29 Sep 2026 18:55:45 +0000
Files and hashes: 1: iaMdROlPHMJ4ULusFsAsIKqznOU.crl (hash: WRi4q1/tsg8xKjGuScJ3nja4ONqLh38wgprwS3yl5fw=)
2: F392CF9E53A311EAB1641213C4F9AE02.roa (hash: 1k0SJPjACBfzIbH57TXQkwU+M3+Vmt1T4vlm8sPZ+NY=)
3: 9AE4F7EC53A211EA8D26BD0CC4F9AE02.roa (hash: YDbrtcfj2P0fa1G87TD44JnTqpM+znfQHYibyFu6W0c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl
rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:55:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3014 (0xbc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196F73, serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5
Validity
Not Before: Sep 22 18:55:45 2026 GMT
Not After : Sep 29 18:55:45 2026 GMT
Subject: CN=6ab2cf32-c8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8f:5b:a4:09:65:9e:d6:36:ac:10:9e:46:05:
ad:5f:19:48:69:68:d0:d0:f9:ef:a2:55:2a:40:80:
87:35:6a:be:b5:37:84:9c:be:3d:c7:7f:f8:fe:d8:
8e:64:78:a7:26:16:96:f0:47:a2:b3:55:b8:d9:79:
91:f1:a9:bb:70:e7:30:ad:bb:2c:02:da:73:c6:20:
d2:3f:bd:6d:3b:9c:01:fe:f4:a2:e2:c3:96:47:5c:
44:73:fc:cd:1a:3f:d8:80:8b:1d:5f:40:92:6f:64:
51:55:a2:fa:14:f0:5e:f3:45:a4:7b:db:a4:98:37:
30:6b:7d:41:43:06:df:78:bb:d4:2b:92:11:bf:ff:
72:bc:5f:93:17:9a:9a:a4:d4:41:47:82:56:1a:79:
f0:3f:8b:50:50:91:32:61:16:fc:73:1a:b3:15:b9:
44:da:c4:ce:7a:06:f8:65:fb:40:f5:70:17:da:e4:
2e:54:d3:b5:b6:16:df:96:d8:02:02:31:9d:77:c3:
62:81:d4:f8:04:04:29:49:95:89:d5:77:75:8a:ad:
57:2c:99:50:ae:b5:ba:71:5d:28:64:0c:1b:73:dc:
18:2d:a1:06:2f:0a:cb:8c:8f:4d:7b:77:9c:af:a8:
be:be:78:27:ba:39:f5:a6:60:5b:01:83:df:ca:76:
ec:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B0:79:EE:30:BB:C6:DC:16:EE:A8:A1:BF:B8:E7:D5:6E:83:A1:FF
X509v3 Authority Key Identifier:
keyid:89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:46:a7:c9:54:9a:c8:d3:42:93:4f:51:c5:df:bf:99:e1:e3:
17:45:6d:12:79:cc:7e:01:38:1d:20:50:a9:f0:9a:b6:c8:4f:
f3:42:b4:4c:d7:38:7e:2f:00:90:20:f8:42:7a:ec:78:1e:2e:
5f:40:63:0d:67:d4:c4:45:7f:ac:85:05:2c:a5:d7:39:2e:89:
23:2d:6d:69:95:a1:08:07:da:41:52:81:7c:13:63:73:62:af:
7b:2c:0b:b8:51:a0:0f:04:03:cc:42:e0:b7:ed:65:0f:47:e0:
03:8d:f2:74:0f:06:5f:c1:ce:a2:02:41:88:8b:98:da:ed:a1:
28:62:67:62:a8:ae:cf:c0:56:e6:d1:07:03:ff:35:e2:eb:21:
b0:6a:00:75:3b:c2:eb:2f:61:2d:18:1b:b7:f6:d2:5a:d5:27:
52:de:79:9b:29:d7:2a:2f:a5:ab:ba:98:18:d5:55:bb:12:4a:
53:1c:e2:6b:79:5e:42:18:9c:2c:29:b2:d2:5d:34:b1:be:25:
31:9f:8a:89:c0:ec:4b:9a:c3:55:72:69:1d:46:17:52:ee:9b:
85:5a:a5:c0:4a:c7:d8:22:71:d1:87:24:f9:c6:6b:59:6e:64:
9b:2d:b9:7a:46:3e:82:6a:a3:06:75:4c:0e:d8:69:11:97:a0:
f6:d5:df:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:54:19 2026 by rpki-client