
$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
File: IYqKoFAmewgF4_3IqTm_j7ywAQE.mft (raw, json)
Hash identifier: kvX5XLl5Gui8xecYbSG4AqCFy4Ju7QQmBF7g6VF+16s=
Subject key identifier: E6:85:E8:0F:D4:02:8C:4A:BE:5A:2F:FA:F6:17:75:3F:C4:D9:C8:DB
Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01
Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
Certificate serial: 07AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
Manifest number: 075F
Signing time: Tue 04 Aug 2026 22:20:52 +0000
Manifest this update: Tue 04 Aug 2026 22:20:52 +0000
Manifest next update: Tue 11 Aug 2026 22:20:52 +0000
Files and hashes: 1: IYqKoFAmewgF4_3IqTm_j7ywAQE.crl (hash: jJ8ocu+sgcnI1dVuBv9nYsV4TAqa//847Utr70yr79I=)
2: ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa (hash: iXLK649RmoeUhSGlA25MdX2Oj5QWfIOM0pF/QXQTaps=)
3: 7EACD6DEA69D11ED970A2E1EC4F9AE02.roa (hash: jQXlUzW3VHeQZYuGACvXU8X1tTMwFhRUqHJL1OYJ9/8=)
4: 7DFD24A0A69D11ED970A2E1EC4F9AE02.roa (hash: 6caEdCnhzmI2hwVR8XFxrGjD5Z484ugUGSA346QGS2I=)
5: 7BD18B9EA69D11ED970A2E1EC4F9AE02.roa (hash: K3aeCKo2mZ2NOnnVOuFmorGAloq7x6dVjZPYqNrpk70=)
6: A08AFBB284F211EE89828225C4F9AE02.roa (hash: vbG5EXXlgYlGq5jnBwc913dKTc7sUfrG2TC/jANpYLY=)
7: 005CDC821F1411EC85E08546C4F9AE02.roa (hash: RtrKmXveYib5rppP1DIWCcPNm3D6+Flm33UJR0UA860=)
8: 7D4AEECAA69D11ED970A2E1EC4F9AE02.roa (hash: 8lXFNalp+VAtXH5P3uOSawpn+k9++H+OieLK+bsEIlU=)
9: EC545C28A72B11EDAC3DA56CC4F9AE02.roa (hash: GZPk+z2xKk+h7BjajU40ooW3BALI+9amXS7D2eVeUI4=)
10: EDA092C2A72B11EDAC3DA56CC4F9AE02.roa (hash: rQhMSDBbxcSI6MB5lHu+8q8Nh6WWXRx41SB2RuJ5eQo=)
11: 3CEA8114429511F1AFCCDC75B2833773.roa (hash: ZPrkUcTW0dkUrha+IDL+C0J+DeJogup9DGfp3ayHM4Q=)
12: 7C7AE9B4A69D11ED970A2E1EC4F9AE02.roa (hash: trmRq5WmOXOs/y5qTNJdndK+x4aDzPI8UTGr6I0y6to=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl
rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Aug 2026 15:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1963 (0x7ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
Validity
Not Before: Aug 4 22:20:52 2026 GMT
Not After : Aug 11 22:20:52 2026 GMT
Subject: CN=6a7265c4-6b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f9:3d:be:91:56:d4:11:d1:3b:e8:1c:45:dd:
c8:90:d0:14:48:8c:01:46:e0:3f:43:f6:99:a8:36:
6d:17:2f:96:27:ef:99:3f:e1:06:ea:56:55:c5:b0:
16:13:df:54:fb:04:60:a0:9d:89:a7:df:d0:ea:7b:
78:9e:af:d2:f1:97:51:2b:4f:4d:15:40:5f:ac:c0:
74:0c:c1:fe:7c:64:92:e3:b1:3d:e4:f9:f9:35:88:
89:cb:ea:30:55:d5:da:11:e7:4b:15:45:13:33:2f:
28:5b:d5:7a:8b:33:81:9f:93:23:40:e8:a4:36:32:
bb:03:f8:0b:16:e9:63:91:a2:74:e1:81:b7:2b:f8:
8f:8a:67:20:a1:14:0d:c7:a4:c7:33:6a:79:45:b5:
62:dd:cd:7a:15:3c:8e:71:4b:e8:6d:3c:d3:fe:0d:
b1:2d:26:f9:83:34:49:8d:1b:30:86:e5:12:02:c4:
9a:4f:81:41:c6:b0:e8:c8:20:d2:13:fd:22:aa:59:
f1:c0:be:32:c3:19:a2:35:fa:1c:77:b1:d8:82:28:
66:31:77:ac:f9:9e:41:81:fd:7d:06:22:a9:77:61:
5c:32:ba:e2:a7:4f:2f:d4:1b:af:6e:df:bc:bc:84:
85:d6:03:9d:aa:4f:a7:76:0c:1c:7b:0f:f0:e7:d0:
56:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:85:E8:0F:D4:02:8C:4A:BE:5A:2F:FA:F6:17:75:3F:C4:D9:C8:DB
X509v3 Authority Key Identifier:
keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:88:b6:74:0b:77:81:17:cf:69:61:19:9d:d3:a7:e5:75:05:
08:eb:2c:72:97:01:16:f8:3c:46:b2:19:34:90:ea:1d:58:3a:
71:c8:ce:35:de:77:04:b5:cf:a3:64:a3:5b:87:bf:3d:14:e2:
1e:1d:70:e8:c9:ba:76:d6:28:7f:1f:72:30:36:08:2e:42:50:
b2:27:cf:7b:f0:91:02:21:b3:1b:9b:0e:4b:79:af:b7:86:49:
47:6e:ef:88:28:a1:32:4f:5d:1a:ab:1b:af:c8:a8:e9:a5:79:
46:a8:82:94:55:61:92:b5:33:af:e4:35:19:0c:2c:63:0b:9e:
7b:cd:84:06:0b:e0:63:2f:e0:76:16:f4:98:5c:05:45:cf:e3:
ec:42:36:1b:a0:38:5d:a6:6c:27:7d:13:e3:97:c2:9c:c9:6a:
84:09:bf:fa:71:91:0b:65:98:e3:9f:06:f2:3f:4c:a0:68:23:
e1:31:2a:18:f0:d8:8b:e2:1e:25:96:b0:f4:27:ec:76:68:dd:
c3:b8:8c:d5:5a:f6:b7:6e:31:9b:7e:8b:1e:4d:76:15:61:de:
ef:f4:68:28:42:86:b0:d9:8a:c1:d4:f8:57:b7:87:5b:cf:c8:
86:fa:2b:91:d7:52:fd:13:ec:22:82:f3:ab:70:99:1d:0b:31:
9d:11:6e:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDA2QUExMTAvBgNVBAUTKDIxOEE4QUEwNTAyNjdCMDgwNUUzRkRDOEE5MzlCRjhG
QkNCMDAxMDEwHhcNMjYwODA0MjIyMDUyWhcNMjYwODExMjIyMDUyWjAYMRYwFAYD
VQQDEw02YTcyNjVjNC02YjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4/k9vpFW1BHRO+gcRd3IkNAUSIwBRuA/Q/aZqDZtFy+WJ++ZP+EG6lZVxbAW
E99U+wRgoJ2Jp9/Q6nt4nq/S8ZdRK09NFUBfrMB0DMH+fGSS47E95Pn5NYiJy+ow
VdXaEedLFUUTMy8oW9V6izOBn5MjQOikNjK7A/gLFuljkaJ04YG3K/iPimcgoRQN
x6THM2p5RbVi3c16FTyOcUvobTzT/g2xLSb5gzRJjRswhuUSAsSaT4FBxrDoyCDS
E/0iqlnxwL4ywxmiNfocd7HYgihmMXes+Z5Bgf19BiKpd2FcMrrip08v1Buvbt+8
vISF1gOdqk+ndgwcew/w59BWoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOaF6A/U
AoxKvlov+vYXdT/E2cjbMB8GA1UdIwQYMBaAFCGKiqBQJnsIBeP9yKk5v4+8sAEB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84NjU4RTQ2Njg2
QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3Z0Y0XzNJcVRtX2o3eXdB
UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0lZcUtvRkFtZXdnRjRfM0lxVG1fajd5d0FRRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MDZBQS84NjU4RTQ2Njg2QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3
Z0Y0XzNJcVRtX2o3eXdBUUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHYi2dAt3gRfPaWEZndOn5XUFCOsscpcBFvg8RrIZNJDqHVg6ccjONd53BLXP
o2SjW4e/PRTiHh1w6Mm6dtYofx9yMDYILkJQsifPe/CRAiGzG5sOS3mvt4ZJR27v
iCihMk9dGqsbr8io6aV5RqiClFVhkrUzr+Q1GQwsYwuee82EBgvgYy/gdhb0mFwF
Rc/j7EI2G6A4XaZsJ30T45fCnMlqhAm/+nGRC2WY458G8j9MoGgj4TEqGPDYi+Ie
JZaw9Cfsdmjdw7iM1Vr2t24xm36LHk12FWHe7/RoKEKGsNmKwdT4V7eHW8/Ihvor
kddS/RPsIoLzq3CZHQsxnRFuRw==
-----END CERTIFICATE-----
Generated at Wed Aug 5 00:10:05 2026 by rpki-client