
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
File: iUNmPc-DCfonSkZS-oOr0m2EJk8.mft (raw, json)
Hash identifier: iT6Q9fpebSAmmimV5CIWRxyVFZ3ePGjqbByQglf0Zh0=
Subject key identifier: DE:1E:35:5B:B1:AF:FC:C2:B3:CC:98:AA:2F:6D:F3:C5:1A:3E:73:D3
Authority key identifier: 89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F
Certificate issuer: /CN=A913097A/serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F
Certificate serial: 059E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
Manifest number: 0592
Signing time: Sun 04 Oct 2026 23:15:45 +0000
Manifest this update: Sun 04 Oct 2026 23:15:44 +0000
Manifest next update: Sun 11 Oct 2026 23:15:44 +0000
Files and hashes: 1: iUNmPc-DCfonSkZS-oOr0m2EJk8.crl (hash: nnWFROitu3rXYhzQyQTNfrfzxuMIJWWaA33cvXV4mfc=)
2: A18054D6CB9F11F088CB660AC4F9AE02.roa (hash: K1f/qaJuEbUdhfD0uMMWW5s85D2uyNgYsK07EHXQMGc=)
3: D19C3D9CCB9F11F090C50D0BC4F9AE02.roa (hash: uGlOlq0hoAHAqivL5Gx3x5YPd18McYYtsJimOV3Kgqs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl
rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 23:15:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1438 (0x59e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913097A, serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F
Validity
Not Before: Oct 4 23:15:44 2026 GMT
Not After : Oct 11 23:15:44 2026 GMT
Subject: CN=6ac2de20-fe80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:51:22:95:9a:5d:59:3e:18:59:9d:cf:f0:9b:
64:a9:03:35:8c:f3:b8:ca:a6:f1:1b:2d:63:b6:29:
8c:74:10:94:4d:69:19:48:cb:f6:72:73:84:71:97:
42:72:3a:74:a2:1b:3d:f4:4c:d8:c9:13:a1:dd:31:
3c:72:cf:c0:c1:43:c2:c0:e6:e9:c1:1b:81:7c:7e:
99:41:74:dd:3b:06:f8:ab:a8:54:c9:16:b4:95:5c:
90:4a:2b:99:46:72:a7:54:e3:8f:03:f3:d2:9a:6e:
5e:87:b6:03:02:35:fd:7f:36:76:6e:c5:f3:a2:07:
69:0a:aa:93:5a:08:9b:80:70:12:10:ea:fb:64:6d:
c9:84:b9:25:ba:83:64:8d:bc:5e:ce:05:d6:0a:7a:
06:ad:ea:52:b2:d5:27:99:6a:b2:9e:30:0a:0e:9b:
17:b5:0f:2e:96:2f:c7:cc:12:21:89:20:17:db:69:
65:5b:b1:0d:13:7a:cc:e8:d4:5c:c2:be:ae:5c:3f:
cd:5d:a1:76:9c:21:9e:b9:de:2d:b0:e5:36:c0:93:
f3:38:ec:16:a4:b3:fe:da:53:4a:64:cd:42:f3:2e:
ff:fb:70:3c:ed:8a:1f:94:00:7c:a2:35:71:9a:d0:
c7:1d:f1:f8:10:d7:ae:bf:aa:92:9d:71:91:69:1a:
47:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1E:35:5B:B1:AF:FC:C2:B3:CC:98:AA:2F:6D:F3:C5:1A:3E:73:D3
X509v3 Authority Key Identifier:
keyid:89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:99:88:4e:b0:13:a4:cf:fe:20:bc:a3:18:40:af:e3:ce:83:
36:c7:d3:f2:da:60:78:e9:24:85:0f:9c:45:b7:2b:3e:0c:de:
f4:89:e0:8d:8b:99:60:c8:67:1e:c2:13:7d:34:a2:61:7b:f3:
0a:e5:96:c0:75:d7:f4:be:ac:0b:e6:c3:b4:fd:77:f2:60:45:
d2:16:a3:d6:9c:b3:93:7f:fc:df:a9:71:4e:33:e9:9a:8f:33:
24:14:d7:09:71:d8:5f:2b:81:1c:dd:7f:cb:ac:97:d3:6b:a2:
a0:d3:c8:fb:c3:02:87:3e:9e:d6:2f:ee:fb:59:a8:08:99:a2:
ca:bb:58:1c:1a:ea:8f:d5:a6:bf:08:17:bf:45:25:e8:40:7e:
4a:d8:28:17:e0:85:66:53:e1:d9:e4:be:e5:31:29:cd:98:2c:
5b:96:23:1c:e7:31:a5:b3:59:5a:6c:d9:a6:dd:32:00:b0:95:
23:bd:36:3b:b0:a5:d2:d4:32:a3:8d:04:02:5c:eb:0b:fe:59:
95:ec:be:a4:8a:18:c5:82:8b:46:a4:db:f1:cc:1e:bd:d9:c9:
92:13:2c:ea:4d:22:d3:1a:f1:4d:c5:33:75:12:3a:6c:3a:9e:
55:0a:b0:3d:93:81:35:0a:d2:bb:15:13:0d:23:87:55:5f:69:
a1:24:f4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:53:31 2026 by rpki-client