
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
File: IO0KqyB1C4snqG35iadUv1cm3X4.mft (raw, json)
Hash identifier: ZVao9A4EV9DM6jdr487AE48+PtHhj2hV/0N+JamQSlk=
Subject key identifier: 88:3A:B1:82:F3:44:59:C7:EB:31:07:5A:16:3D:C8:21:AF:84:60:18
Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
Certificate issuer: /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Certificate serial: 029A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
Manifest number: 070B
Signing time: Thu 23 Jul 2026 00:50:15 +0000
Manifest this update: Thu 23 Jul 2026 00:50:15 +0000
Manifest next update: Thu 30 Jul 2026 00:50:15 +0000
Files and hashes: 1: IO0KqyB1C4snqG35iadUv1cm3X4.crl (hash: WSDlm/NoAcPoZz95f926Q0rWs5jfSVpSI9Y5PxqjOWg=)
2: 005417D285BC11F18BCEC21B61A30FBC.roa (hash: FdR8EfX2jyJlYaepKSYMj9Kz67EaJGe2jtFZcU+7oXo=)
3: D9FDBEA0FB5D11F0A7F971C0496F56BC.roa (hash: Wx61e/Tv8ZK5H7v83kwm5JdbJjGGNDdnnszpCWgUdM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl
rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 666 (0x29a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAB64, serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Validity
Not Before: Jul 23 00:50:15 2026 GMT
Not After : Jul 30 00:50:15 2026 GMT
Subject: CN=6a616547-77f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:ba:47:58:0f:ec:f6:06:04:b8:db:ff:4c:
ad:f6:ab:3a:c9:85:79:f0:45:6b:43:e6:df:1b:9f:
a8:30:6f:8b:aa:bb:2a:48:03:78:06:1c:50:e1:fb:
18:92:b8:2a:7e:cc:bf:ae:f1:fe:b5:f2:e4:62:32:
77:be:52:99:31:d1:d6:53:e1:6d:18:44:af:9d:d1:
f1:b2:be:d7:9a:3a:fe:78:3a:4e:70:4a:a4:6f:7b:
f1:5d:8a:3c:8a:9c:7b:41:f1:58:40:02:7e:5f:f8:
a8:01:64:ca:cb:4f:d4:5a:58:68:c3:22:15:65:77:
75:ba:f1:23:aa:18:d2:6e:d2:66:d4:af:cb:59:92:
2a:de:d8:1f:fb:d6:06:9a:4b:19:80:8e:4c:2b:3e:
a6:99:d6:fe:b3:2b:2d:52:e8:9f:dd:a2:12:42:c0:
9b:27:40:93:93:57:7b:36:cf:d5:b6:0c:d7:bb:52:
55:0b:ef:1e:2c:80:40:79:9a:dd:11:7b:be:d3:60:
bb:60:ed:fa:13:f5:b7:e9:af:c6:ff:e5:82:7d:5e:
cd:59:0e:05:57:03:69:b9:13:d6:59:e9:8f:9d:6a:
96:08:55:6a:04:21:56:65:88:85:a4:ca:f6:c5:e6:
6b:58:70:f3:31:df:81:13:54:be:60:f2:76:ec:57:
bf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3A:B1:82:F3:44:59:C7:EB:31:07:5A:16:3D:C8:21:AF:84:60:18
X509v3 Authority Key Identifier:
keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:70:94:84:8a:ad:9c:1b:66:95:93:de:12:78:30:d4:92:db:
6e:df:1f:25:3d:31:f0:fa:fd:5c:6e:5b:75:1d:cd:f1:a8:f6:
ab:b5:56:e2:b9:37:82:6b:d9:ec:36:6e:b3:53:fc:e4:3d:91:
60:f5:39:b0:59:e9:4a:e7:92:ca:71:92:00:a7:6d:f9:b6:50:
d8:f7:45:02:9f:fd:9d:57:cb:2b:18:fa:dd:84:ae:d0:ea:12:
e4:e6:3e:97:c8:83:0f:7d:7a:00:47:61:b4:24:fe:d8:3b:8b:
c1:3e:b2:7d:32:a3:89:80:5e:67:c6:1c:6a:35:7e:e7:49:4e:
97:2c:8c:18:6b:8d:be:1b:1b:ac:28:d2:5f:57:4c:00:41:fb:
1a:ae:90:53:8b:7c:e2:59:c8:62:4a:60:bc:86:3a:a4:ca:20:
44:45:dc:56:53:64:ec:da:9b:07:e1:67:ff:51:52:ea:c2:b8:
5c:ab:cc:d7:86:d5:70:99:62:61:c8:b5:87:e5:f5:ba:90:ca:
85:ae:8a:ac:39:9b:17:87:07:86:68:9e:18:a9:28:84:3e:d5:
2b:4e:7c:9d:ec:97:3d:65:4c:92:72:c1:98:6a:30:b8:ff:0c:
a0:d4:40:b5:d9:2f:76:ab:d0:3d:0d:f7:7b:65:2a:48:8b:7b:
db:2c:53:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:53 2026 by rpki-client