
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
File: IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json)
Hash identifier: /BkPj62YQltsi/aOvOZhPcmVceZTWnIbovqeNkn+9IA=
Subject key identifier: E6:3C:F9:13:28:75:E1:E8:F3:A1:41:EF:4C:C2:5C:0F:52:A7:DD:DA
Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Certificate serial: 095E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
Manifest number: 0901
Signing time: Wed 22 Jul 2026 20:54:28 +0000
Manifest this update: Wed 22 Jul 2026 20:54:28 +0000
Manifest next update: Wed 29 Jul 2026 20:54:28 +0000
Files and hashes: 1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: qCpwt86CyJ77syOivhbyCwxdH33alhDxuGxW21Qy6pc=)
2: 46D8E036BED211F093382E71C4F9AE02.roa (hash: gY7ktW7M2ychNUMmTz0Yp8V+96oZXWr94hCnEiAKvfs=)
3: F8E5E56ABA3311F097F3633AC4F9AE02.roa (hash: HAqcjovZJYFVqZGaHRtS4+R51e9Xtry3aapf5JCY8eI=)
4: 94EC9E22BEF311F0A6F14E84C4F9AE02.roa (hash: jLSqDdcG0AQq/rzP9wArGf39t8AjysMfIb5LgZiEQeg=)
5: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: M1VJgF+x/Um3lhU3p8O1xPTE+txLupRts9yRpHKZudw=)
6: 02BCB71ABF0411F097C9AB09C4F9AE02.roa (hash: YRs268il8jeL4kWOWO8b3QB1BLS7s3nyXufDu9/6sJo=)
7: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: LxOE3iZIwIwbWUQyl4az6q7pcoRLSjG1pe6jKOrSfF0=)
8: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: mg17sUTdYtMBrbbm2kbt75lKpJ892MbQTYVPcd6BdmU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:54:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2398 (0x95e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Validity
Not Before: Jul 22 20:54:28 2026 GMT
Not After : Jul 29 20:54:28 2026 GMT
Subject: CN=6a612e04-a29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:82:01:80:90:0f:a7:d1:30:50:e5:34:bd:
76:37:82:44:ce:79:fb:99:cd:a1:61:22:2d:3a:a7:
92:c6:e2:62:0a:d1:17:5c:2a:48:96:b9:69:c8:fc:
70:f1:ac:9b:24:14:24:1e:61:09:a3:4a:70:a9:d1:
a6:df:88:e6:46:b5:ac:b0:b6:25:b8:6a:69:da:d4:
3e:30:3d:90:23:05:f9:6d:c9:3e:b4:0c:a9:e4:93:
a9:b2:a2:ed:8f:ff:93:a4:f2:52:de:57:7e:52:00:
08:38:77:93:e4:f0:6d:04:2d:6f:9d:62:f3:27:6f:
eb:c6:5e:23:cb:cc:ca:d6:d5:6f:d4:b3:8b:4d:13:
37:c6:bd:0f:29:85:e0:50:4f:25:86:fe:2f:52:d0:
26:91:de:4f:3b:aa:a5:ed:70:d4:bd:a7:e1:5e:f9:
12:9f:c2:a9:7f:5d:0b:a7:1a:00:58:61:89:59:b5:
99:a0:df:90:dc:a6:aa:41:f8:82:18:76:52:17:5c:
2d:d6:b1:ab:2b:c7:7f:d2:f9:10:a9:de:58:42:81:
de:1e:a1:1a:a6:50:1f:dd:81:48:fd:d5:29:67:97:
85:41:34:1d:72:ed:39:43:eb:64:7c:15:9e:fb:c2:
f7:12:b3:d8:ab:a0:02:4a:b6:60:52:c7:94:1d:62:
8e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3C:F9:13:28:75:E1:E8:F3:A1:41:EF:4C:C2:5C:0F:52:A7:DD:DA
X509v3 Authority Key Identifier:
keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:36:f3:6d:ff:03:b7:47:51:34:9c:5a:cb:9b:0e:08:e3:9e:
68:fb:03:46:c1:6c:5a:d2:ae:3c:d2:74:ee:9e:60:9c:bf:2f:
d8:b1:56:c7:2a:26:a7:94:26:64:48:63:71:e4:02:3b:8f:49:
ff:45:ac:8b:45:ea:58:01:6b:9e:fc:52:b2:8a:f2:d1:83:56:
62:18:f0:90:64:36:89:25:9e:f7:a2:55:81:95:ff:5b:d4:1a:
e4:72:4a:57:18:9d:bf:a3:75:27:2e:b3:30:bf:90:83:06:67:
bb:a6:b6:bd:a1:b9:e6:c1:74:27:72:f3:2c:22:2f:77:e2:e3:
c0:5e:a8:a7:a0:d8:fc:0e:1a:76:10:1a:73:4c:55:94:2e:39:
a9:a5:5b:84:39:25:7d:8e:85:5c:67:27:a3:28:64:9b:a3:04:
c5:07:61:cc:be:e1:ce:37:4a:97:87:80:d8:31:e6:ee:d5:50:
59:12:e1:9d:ef:f0:de:b2:4a:0c:0a:83:44:7e:3b:83:7a:ff:
20:9a:85:4f:13:59:bd:90:3b:90:37:22:cb:5c:18:32:85:bc:
44:6e:89:db:37:49:89:2b:4e:49:4f:a9:fc:a1:9d:e8:ee:88:
ce:75:02:bd:18:ef:e4:79:33:75:e1:04:f6:2f:ec:1e:35:e6:
ab:a7:c6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:43 2026 by rpki-client