
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
File: IaR__8gaEzNcB7kmBaLd_RgHoUw.mft (raw, json)
Hash identifier: 2ajtsO76v2aWlpYbdlU/Tl01ptniJ5JwCn4YehTyD20=
Subject key identifier: 3B:62:9F:CA:36:A4:82:D2:62:60:8B:49:26:B1:27:18:07:F6:64:B8
Authority key identifier: 21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C
Certificate issuer: /CN=A91BF905/serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C
Certificate serial: 0C00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
Manifest number: 0BEB
Signing time: Sat 26 Sep 2026 19:03:58 +0000
Manifest this update: Sat 26 Sep 2026 19:03:58 +0000
Manifest next update: Sat 03 Oct 2026 19:03:58 +0000
Files and hashes: 1: IaR__8gaEzNcB7kmBaLd_RgHoUw.crl (hash: PPsu/qe3ElyCw5iWts1PmYbIav+vFXPJYd4TufreQfY=)
2: CDEFCF14801F11EF99206C47C4F9AE02.roa (hash: KbTYxfFy1GT8pB5c2e56lPcyBgZokB9iBVqKo/PqazE=)
3: 0C63520A89A311F19CE9D9314011F970.roa (hash: btffrqxnv+LEdVRDJ0NPhpvOIf7HzJYoZs3Wq7IbLmI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl
rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 19:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3072 (0xc00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF905, serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C
Validity
Not Before: Sep 26 19:03:58 2026 GMT
Not After : Oct 3 19:03:58 2026 GMT
Subject: CN=6ab8171e-8357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1a:a3:db:7a:93:7a:9b:05:0e:e3:b0:2e:9b:
25:1d:de:fa:9a:37:5a:f3:e1:99:4d:b5:16:df:74:
dd:ea:5b:3d:06:20:2d:4f:8d:01:f5:ac:b0:55:7e:
51:9c:8e:2c:b4:f3:13:c4:22:5b:06:21:6a:e7:5b:
d7:43:e0:06:b5:78:2a:73:8a:b7:dd:30:14:58:a3:
8a:a3:4b:c6:82:d7:21:2d:45:46:52:54:3a:c5:eb:
f5:85:c0:1d:35:60:a1:94:bb:d1:05:9d:89:2f:79:
21:ad:1e:b7:6f:bf:31:16:d2:0c:8c:01:dd:a3:25:
d7:ab:2c:f5:b9:ad:4a:e9:30:61:cb:e6:ae:ef:92:
b3:15:06:ed:09:e8:b1:1e:fa:78:61:68:05:ed:7c:
9a:41:f9:1f:50:bc:d8:96:f5:4f:fb:cc:13:db:ab:
ee:64:70:92:ad:00:bb:91:ee:0a:cc:5b:14:08:be:
d8:22:02:94:3a:92:31:b9:ad:fa:bb:9f:b3:8c:58:
fd:3e:a4:94:22:f1:27:f9:8b:cc:e9:aa:83:02:95:
21:2a:e5:4d:6c:2c:c6:91:90:8c:48:f4:fc:f8:54:
74:95:07:4d:9a:be:e5:79:f4:7e:fc:7e:e4:ad:c4:
9e:ed:db:fe:77:29:af:d9:30:52:11:07:df:b4:4e:
24:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:62:9F:CA:36:A4:82:D2:62:60:8B:49:26:B1:27:18:07:F6:64:B8
X509v3 Authority Key Identifier:
keyid:21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:7e:ec:1d:1c:c8:16:a8:8f:cd:ec:a0:99:c4:8c:77:7b:af:
de:41:ec:95:c5:7a:e2:be:7f:b9:b1:8f:c2:c2:1b:53:99:b6:
52:93:18:36:20:3a:fd:08:cd:94:85:dc:6c:93:cf:4c:1a:f1:
36:9c:95:22:52:1a:16:f1:f3:f4:da:72:c0:35:59:e2:1b:ca:
76:7b:90:53:b5:31:81:1d:73:e6:01:26:4d:ac:f7:b7:b7:77:
d0:d5:cd:13:ab:2b:42:83:ef:10:76:53:17:7f:7a:4c:18:6f:
63:11:aa:6d:5f:ad:04:d6:55:4a:9b:01:3d:a7:0e:06:e0:15:
e7:ec:9f:8d:33:3b:49:f5:18:35:87:5c:5b:68:ba:4d:c9:3e:
b5:b6:5c:98:0b:cf:02:0c:18:19:99:d0:d1:4b:1f:40:fc:bc:
5f:4c:39:97:38:07:7d:08:c1:88:5d:67:31:42:07:32:ab:17:
1e:c0:24:a5:a3:3d:10:c4:a0:fa:99:77:ee:fc:1a:ff:2d:07:
a0:f9:fe:29:3b:de:16:c7:14:6a:44:b1:af:d3:db:fd:03:4f:
0d:5b:7d:91:ec:21:68:a9:e7:f0:57:5d:9c:f4:0b:4f:33:73:
c7:33:74:81:51:06:4e:cb:ba:3a:70:d8:f4:a4:d1:60:26:b9:
5a:ec:f4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:35:00 2026 by rpki-client