
$ rpki-client -vvf rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
File: iUNmPc-DCfonSkZS-oOr0m2EJk8.mft (raw, json)
Hash identifier: +BV91NPbDxuXevD4QdUQLShO1Ns+oTBekRcc8rPJGis=
Subject key identifier: CC:A2:4C:85:C5:33:59:58:F8:A9:76:97:81:9B:6F:B0:09:C5:07:B3
Authority key identifier: 89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F
Certificate issuer: /CN=A913097A/serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F
Certificate serial: 0586
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
Manifest number: 057A
Signing time: Tue 18 Aug 2026 23:39:59 +0000
Manifest this update: Tue 18 Aug 2026 23:39:58 +0000
Manifest next update: Tue 25 Aug 2026 23:39:58 +0000
Files and hashes: 1: iUNmPc-DCfonSkZS-oOr0m2EJk8.crl (hash: FeFGtr40wcP6AvKjOogMFlMicXIgkCM2xFuGTi/cS2I=)
2: A18054D6CB9F11F088CB660AC4F9AE02.roa (hash: K1f/qaJuEbUdhfD0uMMWW5s85D2uyNgYsK07EHXQMGc=)
3: D19C3D9CCB9F11F090C50D0BC4F9AE02.roa (hash: uGlOlq0hoAHAqivL5Gx3x5YPd18McYYtsJimOV3Kgqs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl
rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1414 (0x586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913097A, serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F
Validity
Not Before: Aug 18 23:39:58 2026 GMT
Not After : Aug 25 23:39:58 2026 GMT
Subject: CN=6a84ed4f-6aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:e8:50:f5:01:76:8f:52:ef:d8:30:10:d6:
0c:1f:20:ef:b6:fa:85:14:79:1d:9c:98:a9:06:a1:
a4:74:d0:1b:ad:97:c3:c9:f5:5b:dd:51:c0:be:1b:
6b:b0:6d:6a:f5:17:49:53:9f:29:21:5a:e3:6a:23:
0c:85:c9:1e:92:ab:d9:67:26:f5:fb:e2:de:2b:f6:
8c:b8:e1:07:c0:1d:42:5b:d6:ba:d1:f5:2d:4d:ff:
9c:da:49:15:c8:3f:78:89:5d:80:c7:db:19:ab:63:
7e:1a:5a:bd:a5:6c:a5:95:b7:01:3d:03:da:63:18:
59:dd:b8:4c:a6:1a:66:0e:4b:a9:50:ac:45:63:98:
a9:d3:42:83:f3:b3:41:5e:ec:85:4e:9d:eb:c2:f2:
96:47:6a:59:fc:8f:89:60:5b:8a:06:e9:98:1c:1c:
0f:06:80:1b:73:bd:b7:f4:8f:90:83:d4:69:9c:12:
df:64:56:93:52:b6:79:dc:41:59:13:25:3b:be:c6:
3d:70:e1:d1:04:a6:b3:b1:4b:2e:ee:97:8e:af:7f:
71:ff:2c:a8:db:99:5d:05:95:89:ba:9a:dd:17:35:
49:c1:cb:c3:d2:e9:9b:10:a2:98:05:93:79:c5:59:
ac:a9:10:aa:91:a1:4b:e4:0c:46:89:81:67:34:9e:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A2:4C:85:C5:33:59:58:F8:A9:76:97:81:9B:6F:B0:09:C5:07:B3
X509v3 Authority Key Identifier:
keyid:89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:e4:93:eb:77:9e:70:e9:6d:99:37:f5:61:df:c4:b0:1c:6b:
3c:dc:ca:74:e7:51:f1:42:bb:6b:40:c1:7c:f0:00:4b:a7:25:
95:ae:13:cc:9c:59:8c:61:e9:3f:93:30:2d:15:7d:58:c8:7d:
f1:82:e5:22:a8:67:52:84:ae:3c:f5:3b:6c:4e:ce:25:7f:b6:
1e:9d:9a:9b:4c:24:7f:86:44:f0:c1:f8:41:8c:72:25:4a:2a:
4d:d0:68:ec:e9:1c:1c:c5:21:dd:59:b4:56:28:7b:64:a8:10:
74:0f:4d:3a:2b:79:73:0c:ce:75:10:95:24:d6:e5:63:a0:76:
9f:15:84:78:95:03:2d:0f:48:8c:f1:5b:3f:3f:55:8f:7a:fe:
7f:38:bb:86:33:c3:d3:7e:8c:24:a4:91:22:4a:a1:e3:a1:6c:
bf:51:6a:32:15:52:5c:3f:9e:57:9f:b3:3c:f5:87:4c:04:a8:
77:45:4d:ef:93:5b:46:8a:76:3d:71:c2:23:3c:48:5f:bc:1f:
ec:0c:88:aa:65:0d:60:e1:6d:d6:65:8f:81:8f:92:fd:1e:13:
bf:8a:06:9c:80:52:3f:a9:99:a0:7a:c7:71:7e:72:42:eb:47:
f9:8e:1a:32:e2:ff:59:c2:14:b4:46:ce:27:dc:27:cb:29:94:
e5:21:bc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:58 2026 by rpki-client