
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
File: iro-R9UcXSye80Plr0EQHkPFiog.mft (raw, json)
Hash identifier: ejSxmglF94/SINbk6JmLeyVHCr0cs8MHLQfGQwAVmNk=
Subject key identifier: 2B:52:19:26:C5:EF:8B:36:2C:BB:50:55:9C:2F:BC:CC:1E:8C:A0:81
Authority key identifier: 8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88
Certificate issuer: /CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88
Certificate serial: 0CD5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
Manifest number: 0CC8
Signing time: Wed 22 Jul 2026 18:45:54 +0000
Manifest this update: Wed 22 Jul 2026 18:45:54 +0000
Manifest next update: Wed 29 Jul 2026 18:45:54 +0000
Files and hashes: 1: iro-R9UcXSye80Plr0EQHkPFiog.crl (hash: OvYieFtYBe4aTzxm9HUhjEAUKR37j9r5U7SkdyuI2hI=)
2: CEC4C3FC903B11ED96D73F40C4F9AE02.roa (hash: eNztU7B/7IHFo3dG2XOoFvu10+Q6T/lvArVNNYIftfU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl
rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3285 (0xcd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE984, serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88
Validity
Not Before: Jul 22 18:45:54 2026 GMT
Not After : Jul 29 18:45:54 2026 GMT
Subject: CN=6a610fe2-dc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:19:43:17:70:0c:ae:22:94:c9:5a:77:5c:f0:
06:ff:fc:3b:b1:0c:9f:cb:aa:b6:b6:d1:a3:ae:d3:
0b:3e:c2:7c:af:bb:79:50:5a:e1:bc:9b:2e:6f:e2:
83:d2:82:d2:d4:3b:39:49:86:27:b3:6e:34:92:70:
25:27:9d:7a:1d:dc:1d:2f:19:82:fc:48:bc:86:cc:
1b:c7:c0:45:d5:75:c3:53:bd:b8:72:12:7e:6f:14:
73:a9:20:85:6c:a2:08:f1:71:da:9f:58:25:3d:68:
30:7b:af:dc:4f:36:9f:4f:39:31:58:73:55:13:47:
aa:1e:27:3c:20:5e:20:5f:e7:30:34:5a:04:50:90:
24:40:a7:2e:7d:bb:06:ff:21:7a:9d:61:e8:b0:ac:
fc:ff:45:e8:f2:6d:dd:d5:8f:15:ff:4d:65:72:2d:
ef:da:c0:fd:f6:8c:47:0d:48:db:a1:c0:e9:db:fc:
4a:34:25:94:8c:7d:f7:0d:3e:77:b5:c4:90:c3:1c:
1d:73:3c:80:b0:ac:7c:3c:2a:f2:bc:66:93:8b:bf:
86:38:a5:d3:df:e0:ef:e0:e8:52:18:39:4e:30:d1:
29:2a:96:ed:33:cf:c4:33:d0:72:64:13:e1:db:67:
47:50:c2:e8:72:f2:95:cf:c5:f1:0d:a9:be:16:6a:
0a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:52:19:26:C5:EF:8B:36:2C:BB:50:55:9C:2F:BC:CC:1E:8C:A0:81
X509v3 Authority Key Identifier:
keyid:8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:45:8d:75:81:7f:33:9f:93:68:02:3c:12:ba:75:4c:08:ba:
e8:24:e3:b9:dd:bc:1a:e5:a2:4f:88:ce:22:de:ea:ec:e3:84:
28:68:89:7d:90:8a:52:3d:e5:31:81:26:22:45:84:d5:c8:d8:
1e:43:56:4d:9e:21:05:2e:5b:56:a8:5f:62:1d:f6:b9:bd:c0:
c8:bf:e7:cf:8f:3d:42:54:bf:db:87:cc:18:39:7b:c6:35:45:
1a:e6:41:5c:76:d1:1b:25:1c:64:ed:03:97:73:c0:8d:f4:71:
ed:31:c7:13:fb:25:0a:6f:0c:b0:0c:77:0b:f5:ed:f5:29:3f:
b6:89:9e:44:2b:ca:07:45:ee:91:c4:b9:b6:50:25:78:10:ac:
b5:31:58:c6:23:a4:f2:14:e1:62:a7:d8:68:18:3c:d0:1c:bb:
7b:8f:80:13:71:19:18:ce:34:d0:c4:32:65:7c:ef:54:8c:66:
e8:59:55:40:0b:d3:63:79:ef:df:0c:6a:0c:0e:b5:86:16:97:
65:ea:e1:f8:ad:d1:d7:fb:47:6b:d2:7c:3d:28:20:5e:a4:38:
05:34:61:68:b7:0c:99:33:ce:c1:fa:87:c9:d2:d0:ac:92:a7:
d4:3f:3e:97:ce:41:fc:29:19:9a:22:4e:a9:d3:53:3b:39:86:
44:8a:8f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:53:12 2026 by rpki-client