
$ rpki-client -vvf rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
File: iUNmPc-DCfonSkZS-oOr0m2EJk8.mft (raw, json)
Hash identifier: E/FvKMme6sbW+scwz983ii4i/1elvabh8G95pkRpBec=
Subject key identifier: 0E:80:CD:E3:84:B8:46:F9:EC:CB:E5:7E:80:EF:01:E7:0F:5A:B1:41
Authority key identifier: 89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F
Certificate issuer: /CN=A913097A/serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F
Certificate serial: 056E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
Manifest number: 0562
Signing time: Thu 02 Jul 2026 23:45:31 +0000
Manifest this update: Thu 02 Jul 2026 23:45:31 +0000
Manifest next update: Thu 09 Jul 2026 23:45:31 +0000
Files and hashes: 1: iUNmPc-DCfonSkZS-oOr0m2EJk8.crl (hash: SSNTMMB7zDqJtzRkka2Qow9qbpjowzGseLOUAEduCHg=)
2: A18054D6CB9F11F088CB660AC4F9AE02.roa (hash: K1f/qaJuEbUdhfD0uMMWW5s85D2uyNgYsK07EHXQMGc=)
3: D19C3D9CCB9F11F090C50D0BC4F9AE02.roa (hash: uGlOlq0hoAHAqivL5Gx3x5YPd18McYYtsJimOV3Kgqs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl
rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 Jul 2026 23:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1390 (0x56e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913097A, serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F
Validity
Not Before: Jul 2 23:45:31 2026 GMT
Not After : Jul 9 23:45:31 2026 GMT
Subject: CN=6a46f81b-ee24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:48:3d:bf:e9:e5:61:dc:29:53:af:d7:1a:93:
aa:dc:be:6d:d8:b0:02:62:9e:9c:86:5a:3a:b4:70:
db:f3:ba:39:ee:fd:fa:2b:b5:53:c0:f9:10:b6:8d:
9f:48:86:70:c1:ba:fc:ee:98:34:b5:0b:e8:c0:7c:
d7:85:5b:54:ce:4f:d8:bf:6e:5b:0b:5c:3d:5f:c2:
c8:f4:f8:c8:00:8d:18:e6:c4:6a:84:53:06:33:93:
18:73:dc:4e:99:cf:06:8f:cd:f0:06:28:21:12:15:
9b:35:87:2f:77:f7:94:8c:ce:a4:d6:3b:6e:62:ca:
74:c1:a2:1b:bb:5d:cf:fc:6d:de:3b:9a:b1:7d:0e:
0e:f2:3b:4e:03:eb:f0:37:76:7d:c8:04:6b:80:c3:
81:8f:4c:2c:01:8e:ec:e0:1d:fd:f0:1a:39:cc:43:
a6:4f:14:b7:d3:d4:b2:eb:f8:63:63:c3:9d:8c:93:
ea:f9:98:16:a2:a8:36:e6:0d:88:12:ff:68:f3:9f:
29:c5:aa:de:5e:c3:f1:15:c9:c7:0f:60:67:12:de:
3e:df:db:cd:06:5c:c0:78:22:5d:c6:52:9e:cf:ec:
0b:20:64:dc:b8:b4:13:80:82:d1:59:28:c3:89:80:
65:3e:7f:8c:85:8d:d8:b8:c7:8b:41:45:b4:ea:e8:
50:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:80:CD:E3:84:B8:46:F9:EC:CB:E5:7E:80:EF:01:E7:0F:5A:B1:41
X509v3 Authority Key Identifier:
keyid:89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ad:9a:a3:4f:0b:e0:5d:30:75:d2:d6:b1:b9:fe:09:83:c3:
7f:31:53:5c:7a:5a:e9:3b:f9:e5:af:6e:c7:c5:81:67:85:22:
77:07:c0:1e:4c:85:69:e9:e8:ec:1f:51:5f:a0:95:cc:85:78:
ce:2a:23:92:97:7f:32:4c:67:6f:43:50:51:1c:93:3c:86:2e:
34:ad:48:06:f9:9b:f7:f9:ed:d8:3e:67:f4:12:30:4c:19:3c:
1f:8c:b5:b5:5f:c6:d0:d5:65:c3:6d:d5:42:e0:bf:fa:2c:c1:
df:4b:fd:4c:fe:71:03:5b:c9:a1:95:7c:59:20:ec:75:41:e7:
e7:c5:69:a6:a1:a5:5d:fe:21:5f:bd:52:cf:f6:ab:71:38:a0:
d7:4d:b8:f6:ff:b1:b6:21:0f:5e:36:c1:e6:2a:e4:ba:94:b7:
5a:a9:20:72:a9:90:47:e6:c7:c9:1f:84:e8:4b:fb:27:ef:f4:
e8:a0:a3:7f:1a:14:63:27:57:b3:03:f2:d2:13:69:28:d6:e1:
0c:2b:e1:47:b7:61:05:e7:86:b6:19:eb:38:0f:54:de:e5:b0:
1b:a9:97:77:9a:43:d1:d1:73:a0:d5:b4:2f:a2:a5:f4:50:7e:
2b:b8:28:b1:ee:33:52:94:9d:2b:67:86:4f:f8:84:33:3f:4c:
12:a3:e3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 05:56:16 2026 by rpki-client