
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
File: iro-R9UcXSye80Plr0EQHkPFiog.mft (raw, json)
Hash identifier: uj4KzWFdEienVBJ2YCLHnn3mWbfpkJRkmntQF8wZR/k=
Subject key identifier: FC:94:72:82:E9:EA:33:28:B3:AA:5A:9B:FC:0A:3F:B4:0B:6D:BD:7A
Authority key identifier: 8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88
Certificate issuer: /CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88
Certificate serial: 0CEC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
Manifest number: 0CDF
Signing time: Fri 04 Sep 2026 18:23:47 +0000
Manifest this update: Fri 04 Sep 2026 18:23:46 +0000
Manifest next update: Fri 11 Sep 2026 18:23:46 +0000
Files and hashes: 1: iro-R9UcXSye80Plr0EQHkPFiog.crl (hash: BQmD3cr6Dn//6/mBf8Yv6ajEA7iz69EtSmw6iPXIQOQ=)
2: CEC4C3FC903B11ED96D73F40C4F9AE02.roa (hash: eNztU7B/7IHFo3dG2XOoFvu10+Q6T/lvArVNNYIftfU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl
rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 18:23:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3308 (0xcec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE984, serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88
Validity
Not Before: Sep 4 18:23:46 2026 GMT
Not After : Sep 11 18:23:46 2026 GMT
Subject: CN=6a9b0cb2-74b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5b:e8:94:57:94:66:c8:5b:58:42:7d:dc:90:
d6:32:89:98:70:fd:b5:62:77:d3:88:6f:2d:1a:f7:
23:27:c1:18:19:cb:45:4f:15:5e:4c:2f:53:ae:94:
27:54:0f:f6:52:86:38:66:23:f1:86:96:39:d2:f8:
b6:8a:91:9f:93:3d:c2:4f:00:ac:6f:f0:7f:05:a0:
1a:30:8e:aa:ad:58:0f:8e:be:79:b4:ce:c3:e0:b6:
48:d0:cd:b5:56:34:ed:85:9a:85:81:3c:ab:41:4f:
2a:4e:8c:0a:7e:8f:18:ca:9a:2c:37:84:e8:cb:56:
f4:c6:db:7a:4f:e1:d8:8e:42:8e:84:7f:5a:89:8b:
64:7e:45:b8:77:34:f4:18:46:14:53:a9:42:21:c8:
db:b7:09:55:09:50:ed:73:69:0e:40:04:09:bc:5e:
7f:37:61:f0:25:6f:9c:22:b4:43:8f:fd:af:04:1e:
b9:8f:3a:a4:c5:da:6d:2b:22:15:70:84:5d:7f:d9:
74:46:16:07:61:fa:8b:f7:39:50:7b:94:d4:92:4c:
a0:12:e3:f3:ca:e2:85:f3:00:73:d4:49:aa:92:ca:
4d:3e:24:ac:c3:32:34:8a:dc:d6:bc:40:9a:ee:04:
1b:9b:6d:0c:11:0a:38:bd:75:1a:3c:62:ef:cb:a5:
a1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:94:72:82:E9:EA:33:28:B3:AA:5A:9B:FC:0A:3F:B4:0B:6D:BD:7A
X509v3 Authority Key Identifier:
keyid:8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:7c:08:75:94:2c:11:ab:bd:ed:df:36:44:88:11:8e:c1:e6:
ae:78:5d:a6:7b:a8:7a:a5:c7:57:f6:1d:0c:43:ae:c0:53:bd:
c6:47:14:d5:d5:65:c9:fa:29:ec:9b:42:1b:20:45:9a:61:74:
d6:98:86:51:b2:1d:be:38:42:99:ac:de:8b:ef:63:d8:4f:b2:
1b:5a:eb:46:72:79:89:49:08:a1:90:b1:7f:5d:a4:6e:31:c4:
f5:70:81:e8:91:56:3f:93:d6:04:30:c0:34:bf:52:f5:e6:d0:
46:2a:15:c4:85:dc:c6:07:a4:73:82:f3:3f:ff:77:62:0d:66:
a4:9b:f2:9d:10:5f:7e:5c:f4:5c:60:77:86:fb:93:65:aa:46:
e6:cb:e1:4b:ce:29:62:4f:60:9b:66:80:9e:cb:34:f7:09:c9:
be:64:d4:77:b1:2d:5d:c0:63:00:63:c8:7e:52:4d:2e:17:ec:
50:2c:bc:93:85:ca:b6:3d:59:89:0f:b4:9a:ad:e4:04:e1:f7:
64:ec:a1:45:72:56:d2:69:4e:ff:d4:14:8f:56:e4:a2:49:71:
ee:94:92:05:18:29:21:ef:30:f8:ec:85:1c:77:03:a0:05:ae:
8e:ef:72:74:b5:8f:61:a2:6c:ab:2a:04:e8:1e:c2:95:a7:dd:
d0:08:2e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:23:04 2026 by rpki-client