
$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
File: IYqKoFAmewgF4_3IqTm_j7ywAQE.mft (raw, json)
Hash identifier: vrmvY9yzvQUnRE4BFQ1iuUvbhIQq+2h1xX8TCrzyipQ=
Subject key identifier: D1:99:E0:66:E0:DF:E4:8A:2E:A2:F5:76:95:AE:95:73:E7:70:55:D5
Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01
Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
Certificate serial: 0791
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
Manifest number: 0745
Signing time: Sun 14 Jun 2026 21:58:06 +0000
Manifest this update: Sun 14 Jun 2026 21:58:05 +0000
Manifest next update: Sun 21 Jun 2026 21:58:05 +0000
Files and hashes: 1: IYqKoFAmewgF4_3IqTm_j7ywAQE.crl (hash: eBOg16+LQ/BcjsGR+njf3iNX1M1iXFKddChvwGFPAO8=)
2: EC545C28A72B11EDAC3DA56CC4F9AE02.roa (hash: GZPk+z2xKk+h7BjajU40ooW3BALI+9amXS7D2eVeUI4=)
3: 7D4AEECAA69D11ED970A2E1EC4F9AE02.roa (hash: 8lXFNalp+VAtXH5P3uOSawpn+k9++H+OieLK+bsEIlU=)
4: EDA092C2A72B11EDAC3DA56CC4F9AE02.roa (hash: rQhMSDBbxcSI6MB5lHu+8q8Nh6WWXRx41SB2RuJ5eQo=)
5: 7EACD6DEA69D11ED970A2E1EC4F9AE02.roa (hash: jQXlUzW3VHeQZYuGACvXU8X1tTMwFhRUqHJL1OYJ9/8=)
6: 7DFD24A0A69D11ED970A2E1EC4F9AE02.roa (hash: 6caEdCnhzmI2hwVR8XFxrGjD5Z484ugUGSA346QGS2I=)
7: 3CEA8114429511F1AFCCDC75B2833773.roa (hash: ZPrkUcTW0dkUrha+IDL+C0J+DeJogup9DGfp3ayHM4Q=)
8: ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa (hash: iXLK649RmoeUhSGlA25MdX2Oj5QWfIOM0pF/QXQTaps=)
9: 7C7AE9B4A69D11ED970A2E1EC4F9AE02.roa (hash: trmRq5WmOXOs/y5qTNJdndK+x4aDzPI8UTGr6I0y6to=)
10: 7BD18B9EA69D11ED970A2E1EC4F9AE02.roa (hash: K3aeCKo2mZ2NOnnVOuFmorGAloq7x6dVjZPYqNrpk70=)
11: A08AFBB284F211EE89828225C4F9AE02.roa (hash: vbG5EXXlgYlGq5jnBwc913dKTc7sUfrG2TC/jANpYLY=)
12: 005CDC821F1411EC85E08546C4F9AE02.roa (hash: RtrKmXveYib5rppP1DIWCcPNm3D6+Flm33UJR0UA860=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl
rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 21:58:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1937 (0x791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
Validity
Not Before: Jun 14 21:58:05 2026 GMT
Not After : Jun 21 21:58:05 2026 GMT
Subject: CN=6a2f23ed-0a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:96:68:93:3b:6a:a9:6f:0a:e1:07:ae:fc:51:
21:b6:58:c4:67:4a:36:1b:7a:d0:06:cb:31:4a:74:
27:f0:29:d9:95:dd:41:32:ac:ba:b7:7e:8b:c9:53:
70:7b:f0:a6:68:bb:93:42:87:15:28:4b:cc:0f:b2:
88:6a:0c:09:bf:97:97:44:58:27:1a:d9:12:f4:25:
e4:c4:c1:21:12:f3:8b:b1:e0:c5:9a:3f:f6:15:f5:
57:6b:6a:b5:d7:5a:fe:ea:8e:d7:ec:d6:92:80:b1:
43:a8:00:eb:47:1e:70:cb:c5:93:8d:06:dc:1a:ee:
7f:17:4f:87:65:0b:95:39:50:b7:a8:f4:29:ab:e4:
19:49:c7:19:c8:f5:ba:89:8e:02:41:77:1c:97:4d:
fc:8e:b7:a2:d8:85:52:c4:34:4f:5a:e5:77:2d:1f:
60:97:53:22:54:7c:54:c3:0c:b7:f9:eb:ee:20:83:
2c:c5:9e:d2:b5:aa:34:db:82:33:4f:2f:d6:14:4c:
f4:f8:9f:b8:ed:d2:2b:d9:00:3f:17:3e:03:e4:45:
f3:25:eb:7c:68:58:98:88:21:2e:02:23:5b:1e:6b:
f1:ec:25:3a:a5:c7:7f:62:fd:47:d3:64:63:38:df:
c2:08:8f:a9:7b:73:39:cf:ef:ff:47:dd:8a:17:37:
ad:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:99:E0:66:E0:DF:E4:8A:2E:A2:F5:76:95:AE:95:73:E7:70:55:D5
X509v3 Authority Key Identifier:
keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:e0:c7:23:28:80:33:dc:4a:3e:23:6a:cd:42:a4:21:f4:e2:
73:ca:ab:a6:4f:dd:8b:d6:59:21:16:d7:80:9d:53:76:1a:30:
c8:e8:46:0a:7e:40:50:80:ed:d2:14:46:ac:63:ed:b3:0b:76:
ef:2f:63:0b:a1:18:ef:ee:f3:42:a2:85:45:c2:aa:84:24:be:
8f:96:13:94:62:3d:77:c4:7f:bc:f0:1d:42:f4:5e:b7:a7:da:
81:b0:d5:41:8e:59:74:0e:aa:34:d6:b1:da:e4:97:5c:3f:80:
02:c2:e5:87:7d:c9:c4:5b:e5:0d:42:77:60:12:d8:be:83:5b:
7f:ca:60:d0:83:cc:44:81:6a:a0:0e:5e:12:2c:92:18:11:80:
9f:d7:c7:7d:9e:f2:4c:75:f7:7b:09:dd:a3:e6:1a:46:85:4a:
63:75:dc:26:bb:0f:90:fe:7a:de:da:48:2e:f2:1a:f4:f6:f9:
d6:76:47:a2:f2:fa:ed:39:bd:06:02:aa:d8:48:e6:f0:16:83:
e8:76:0c:6e:6a:44:bc:b9:12:20:6e:05:27:c5:a3:f3:4b:e2:
fb:ec:d6:6d:a6:47:9e:65:46:10:92:87:5d:d7:cb:6b:3f:ef:
5a:71:aa:88:49:96:41:76:cd:e1:a5:b0:34:62:4f:fa:1c:27:
07:8f:e9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 13:39:49 2026 by rpki-client