
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
File: IaR__8gaEzNcB7kmBaLd_RgHoUw.mft (raw, json)
Hash identifier: u1Avhy471MJUqXrYYmd4oesMAWk9uqm7/Xz6XeLb3RM=
Subject key identifier: A8:73:8A:AF:FA:0D:83:13:CD:BD:DA:54:EB:82:F4:28:9D:07:F0:B7
Authority key identifier: 21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C
Certificate issuer: /CN=A91BF905/serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C
Certificate serial: 0BB7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
Manifest number: 0BA3
Signing time: Tue 12 May 2026 19:08:40 +0000
Manifest this update: Tue 12 May 2026 19:08:40 +0000
Manifest next update: Tue 19 May 2026 19:08:40 +0000
Files and hashes: 1: IaR__8gaEzNcB7kmBaLd_RgHoUw.crl (hash: mUt7J7g3Ntx/tOSsWZDY0w3DGXiI8aI3ZIemY7X6X1M=)
2: CDEFCF14801F11EF99206C47C4F9AE02.roa (hash: KbTYxfFy1GT8pB5c2e56lPcyBgZokB9iBVqKo/PqazE=)
3: A558194E801F11EFB86B2647C4F9AE02.roa (hash: t9NapK/6qJjRf58S65SJlIEwaZxa09mw/H0Mw5wLnc0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl
rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2999 (0xbb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF905, serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C
Validity
Not Before: May 12 19:08:40 2026 GMT
Not After : May 19 19:08:40 2026 GMT
Subject: CN=6a037ab8-2570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7c:91:95:14:2a:2b:bf:98:8a:cf:90:62:88:
d3:49:7c:64:be:b4:73:6c:b1:46:80:1d:ec:46:fb:
0c:e9:75:02:b6:24:21:82:f2:dd:d3:58:39:c4:42:
f0:af:60:25:25:b3:fb:bc:1e:60:0c:f0:2c:7c:e5:
d9:30:5a:e1:b9:66:e4:98:8c:7b:9a:c7:77:75:b1:
9e:06:43:c7:4b:81:d1:6b:9b:4a:8f:75:db:76:92:
bc:e3:9f:cb:35:72:ea:05:ec:d9:ee:ad:eb:47:62:
a6:53:01:a4:09:b5:92:e9:a8:00:0a:5e:d3:46:17:
45:4b:87:16:ee:ba:45:fd:0d:c2:59:25:42:9c:e2:
bc:a0:cd:28:5d:ac:a1:1e:68:7f:d4:5e:44:3c:e4:
c5:f1:d1:77:54:7f:d2:c1:b8:05:7a:f4:62:e2:f3:
c2:ff:d2:af:ec:33:0e:13:6a:5d:94:9c:26:ba:32:
88:02:bf:9e:95:dd:0c:c0:91:e0:21:a6:92:aa:3a:
ff:20:b5:05:44:b4:0b:3e:6e:30:73:09:67:7b:34:
2d:28:49:b0:7e:fc:22:1c:ab:f3:68:19:4d:8b:92:
96:59:d5:a3:4b:60:be:90:a5:4f:56:f0:e1:a0:dc:
0e:0f:27:39:2f:c8:34:8c:b5:7f:46:93:08:3c:d1:
d7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:73:8A:AF:FA:0D:83:13:CD:BD:DA:54:EB:82:F4:28:9D:07:F0:B7
X509v3 Authority Key Identifier:
keyid:21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:27:bd:6f:9e:59:a9:7a:49:91:01:a3:cc:46:e0:46:38:26:
60:e3:fc:4f:2d:2a:bf:46:15:ea:46:21:2f:75:5e:81:29:04:
51:1b:4c:48:17:9a:53:c8:b3:1e:50:0f:01:74:e6:cc:ec:31:
11:41:20:49:d0:17:db:26:43:a6:5f:d6:3e:0c:61:8a:d5:ff:
3b:d1:fc:07:51:83:e7:dc:5c:b2:ba:61:9d:8a:0c:91:7a:5d:
86:d9:78:d0:f8:db:df:4b:03:24:9c:d2:ac:30:15:ab:d7:47:
79:77:60:8a:80:69:f7:8b:5f:cb:7c:d4:bc:93:93:52:5b:24:
66:25:f1:16:a1:e3:00:b2:3b:eb:34:db:cc:fd:a9:5d:1b:6c:
15:bd:ad:e7:eb:93:1a:5c:88:a3:78:57:96:fb:bd:5c:b7:80:
a0:b2:74:76:60:00:cd:7c:0a:cf:4b:3d:03:86:96:3f:9c:44:
f2:24:80:9d:69:67:c3:9b:ab:dc:b0:84:81:19:5a:f6:0b:ac:
3e:20:63:fb:10:fe:42:06:df:55:5a:26:c8:95:b3:fe:c3:2a:
40:93:06:4c:1b:b8:4a:ff:69:1f:ce:02:82:7f:a4:25:a5:89:
d1:0e:12:d5:27:b6:ae:7d:9a:62:0e:3a:81:c4:56:df:09:da:
4d:34:10:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:19:49 2026 by rpki-client