
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2432/9BCD2D9682CB11F1B54AB87D77A30FBC/imo4PyYPbU0jV1rp-WvcpErwgWE.mft
File: imo4PyYPbU0jV1rp-WvcpErwgWE.mft (raw, json)
Hash identifier: y28eTOGmuQ2F1RmGR2ioUk9M6+P3Eq1vrCGRdS/XA78=
Subject key identifier: B9:74:7E:D2:7A:65:FA:53:55:D8:7E:67:7A:58:E3:57:72:8B:C2:C5
Authority key identifier: 8A:6A:38:3F:26:0F:6D:4D:23:57:5A:E9:F9:6B:DC:A4:4A:F0:81:61
Certificate issuer: /CN=A91D2432/serialNumber=8A6A383F260F6D4D23575AE9F96BDCA44AF08161
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/imo4PyYPbU0jV1rp-WvcpErwgWE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2432/9BCD2D9682CB11F1B54AB87D77A30FBC/imo4PyYPbU0jV1rp-WvcpErwgWE.mft
Manifest number: 06
Signing time: Thu 23 Jul 2026 11:20:05 +0000
Manifest this update: Thu 23 Jul 2026 11:20:04 +0000
Manifest next update: Thu 30 Jul 2026 11:20:04 +0000
Files and hashes: 1: imo4PyYPbU0jV1rp-WvcpErwgWE.crl (hash: YNB/gf8ZKq7mzqZXYs1kE2Pa/2/IusbNCKFkZ8LPf0c=)
2: 8B561272865211F19521866891A30FBC.roa (hash: CmE/ScQDfyD7qcIIyHlSoauvCQK1eBuHZtmN3CfgXTY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2432/9BCD2D9682CB11F1B54AB87D77A30FBC/imo4PyYPbU0jV1rp-WvcpErwgWE.crl
rsync://rpki.apnic.net/member_repository/A91D2432/9BCD2D9682CB11F1B54AB87D77A30FBC/imo4PyYPbU0jV1rp-WvcpErwgWE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/imo4PyYPbU0jV1rp-WvcpErwgWE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2432, serialNumber=8A6A383F260F6D4D23575AE9F96BDCA44AF08161
Validity
Not Before: Jul 23 11:20:04 2026 GMT
Not After : Jul 30 11:20:04 2026 GMT
Subject: CN=6a61f8e4-561b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3c:e8:50:00:77:d0:44:47:ff:0d:45:c6:d1:
95:6d:a8:64:c3:80:26:4a:6b:11:38:ee:ce:0d:2b:
6c:b8:e7:20:0f:34:51:b4:4d:37:07:37:b7:ed:64:
42:ae:8a:66:ca:3a:88:bc:87:12:25:ab:3e:1f:bb:
81:e8:e4:1b:53:40:4d:50:fd:f4:b0:ee:59:8c:89:
01:72:62:08:c8:31:08:b9:b5:02:cc:b5:b8:f1:2a:
51:14:c7:41:ae:d2:7b:51:1d:ae:66:05:cc:22:5f:
9a:1f:fd:4b:59:0d:a2:f3:ed:51:b1:6f:d7:49:d3:
25:ae:3a:21:76:c0:e4:74:01:49:d4:99:8c:d6:f7:
b0:b5:a8:4e:09:90:7e:ba:8e:46:51:0a:cb:50:0f:
c6:c5:57:8e:a2:54:fb:7c:a6:a8:45:bb:f0:9a:06:
49:93:71:8f:ab:b4:ef:fc:bb:fd:ba:53:d6:ff:b4:
11:eb:52:b1:fc:96:a5:f2:2f:e2:21:07:73:fb:b7:
cd:e3:ca:e2:69:8c:7e:de:06:1e:48:85:13:a3:f5:
71:d1:83:9d:ba:63:d8:08:c2:6b:ac:c5:ab:9e:2f:
2c:09:c9:11:5f:33:1a:20:43:40:32:2b:e1:97:f6:
b8:2f:88:c3:51:03:1f:65:6c:82:b0:27:8f:b3:05:
cd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:74:7E:D2:7A:65:FA:53:55:D8:7E:67:7A:58:E3:57:72:8B:C2:C5
X509v3 Authority Key Identifier:
keyid:8A:6A:38:3F:26:0F:6D:4D:23:57:5A:E9:F9:6B:DC:A4:4A:F0:81:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2432/9BCD2D9682CB11F1B54AB87D77A30FBC/imo4PyYPbU0jV1rp-WvcpErwgWE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/imo4PyYPbU0jV1rp-WvcpErwgWE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2432/9BCD2D9682CB11F1B54AB87D77A30FBC/imo4PyYPbU0jV1rp-WvcpErwgWE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:55:65:9d:83:5c:87:1a:ea:3e:33:97:02:14:ad:53:98:a4:
0d:ca:05:b7:79:ce:9b:ef:a8:a7:b2:03:bb:89:ef:96:9b:32:
38:41:29:3e:45:8c:2e:ca:30:44:d5:39:b9:17:1e:c3:f4:c9:
0e:15:aa:36:79:55:da:17:7c:af:1f:42:93:60:83:0b:50:11:
8a:70:69:55:a8:ab:eb:5f:79:9a:58:bb:74:da:6c:46:79:22:
a3:57:a0:13:dd:be:3f:57:fc:cd:88:59:91:70:98:e4:13:07:
5d:15:d2:1b:0a:1a:2f:38:a9:34:2b:9f:1e:e1:f4:fb:bf:00:
9b:3c:4d:f7:3a:0a:0e:20:ed:28:09:18:87:18:f9:c1:66:ef:
53:29:bf:63:4a:58:d0:68:d1:98:f8:cd:77:7b:6c:90:dd:95:
b9:73:0d:0d:e2:de:10:ae:45:db:2c:b0:b5:cf:82:a9:22:b7:
4f:c7:ea:b4:23:d1:54:2a:8d:8c:fa:75:3f:2e:d5:5d:e5:1b:
7a:e7:9c:20:3e:b5:4d:54:3a:4d:e0:6e:7f:43:14:eb:0c:2c:
f2:ec:0e:3d:90:a8:a6:23:e7:b8:d2:2c:49:f8:f4:fd:d9:b1:
b8:be:6b:0a:0a:90:9d:fd:fa:20:9d:db:b4:1f:03:66:c8:1f:
7e:57:1f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:00:39 2026 by rpki-client