
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
File: IYqKoFAmewgF4_3IqTm_j7ywAQE.mft (raw, json)
Hash identifier: /PD4NnaVKy6i88wqdoUnlw16X/x/H4dbgNBtK9ixW7A=
Subject key identifier: 0C:58:23:15:B3:49:6F:07:47:4A:48:5D:E7:55:D9:71:5E:54:C6:FC
Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01
Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
Certificate serial: 07C2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
Manifest number: 0776
Signing time: Fri 18 Sep 2026 21:46:36 +0000
Manifest this update: Fri 18 Sep 2026 21:46:36 +0000
Manifest next update: Fri 25 Sep 2026 21:46:36 +0000
Files and hashes: 1: IYqKoFAmewgF4_3IqTm_j7ywAQE.crl (hash: SCG0ptzTXId7rn+67fdtujzPsW6BtkZCR0VhQw7zEHQ=)
2: 005CDC821F1411EC85E08546C4F9AE02.roa (hash: RtrKmXveYib5rppP1DIWCcPNm3D6+Flm33UJR0UA860=)
3: A08AFBB284F211EE89828225C4F9AE02.roa (hash: vbG5EXXlgYlGq5jnBwc913dKTc7sUfrG2TC/jANpYLY=)
4: 7BD18B9EA69D11ED970A2E1EC4F9AE02.roa (hash: K3aeCKo2mZ2NOnnVOuFmorGAloq7x6dVjZPYqNrpk70=)
5: 7C7AE9B4A69D11ED970A2E1EC4F9AE02.roa (hash: trmRq5WmOXOs/y5qTNJdndK+x4aDzPI8UTGr6I0y6to=)
6: 7EACD6DEA69D11ED970A2E1EC4F9AE02.roa (hash: jQXlUzW3VHeQZYuGACvXU8X1tTMwFhRUqHJL1OYJ9/8=)
7: 7DFD24A0A69D11ED970A2E1EC4F9AE02.roa (hash: 6caEdCnhzmI2hwVR8XFxrGjD5Z484ugUGSA346QGS2I=)
8: 3CEA8114429511F1AFCCDC75B2833773.roa (hash: ZPrkUcTW0dkUrha+IDL+C0J+DeJogup9DGfp3ayHM4Q=)
9: EC545C28A72B11EDAC3DA56CC4F9AE02.roa (hash: GZPk+z2xKk+h7BjajU40ooW3BALI+9amXS7D2eVeUI4=)
10: 7D4AEECAA69D11ED970A2E1EC4F9AE02.roa (hash: 8lXFNalp+VAtXH5P3uOSawpn+k9++H+OieLK+bsEIlU=)
11: EDA092C2A72B11EDAC3DA56CC4F9AE02.roa (hash: rQhMSDBbxcSI6MB5lHu+8q8Nh6WWXRx41SB2RuJ5eQo=)
12: ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa (hash: iXLK649RmoeUhSGlA25MdX2Oj5QWfIOM0pF/QXQTaps=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl
rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1986 (0x7c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
Validity
Not Before: Sep 18 21:46:36 2026 GMT
Not After : Sep 25 21:46:36 2026 GMT
Subject: CN=6aadb13c-af80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:ef:4a:eb:0b:9d:65:77:a9:c3:26:67:78:
1e:37:01:af:70:7a:c1:d6:d6:dd:c2:33:dc:3a:da:
48:c7:68:10:79:29:f3:63:85:bc:b0:d1:f5:68:3f:
2a:5f:df:f2:53:ab:7a:0c:b7:74:33:2a:15:92:a6:
19:04:02:12:85:c4:96:cc:4c:87:10:12:35:b1:c9:
b4:9d:31:de:17:69:91:31:43:85:fc:99:6b:81:2e:
b6:3a:50:8b:ca:34:55:d8:91:b5:d6:d0:d7:0c:8e:
b6:25:db:99:f6:8e:de:80:a4:1f:6e:c2:2d:f8:fa:
83:e4:42:aa:c7:6d:b8:7c:4d:06:2c:b1:ba:82:c6:
a7:33:18:c0:4c:92:71:7d:05:ab:8f:26:2c:1a:72:
4c:2b:c8:70:7d:8d:7c:2b:59:a6:cd:af:46:74:91:
f2:08:9a:14:16:54:4c:07:7b:47:46:09:aa:29:7b:
fd:4e:a7:c3:1a:53:b3:d8:b8:bd:2f:46:99:e2:cc:
de:a6:20:18:4e:cc:70:6f:55:98:a2:6a:58:84:15:
af:95:93:11:c3:bd:e2:2f:fc:77:3b:7e:d4:65:93:
0e:7f:9f:45:41:55:e5:de:67:b3:a9:ca:79:8c:63:
6e:81:92:f6:e8:ea:46:0b:8b:c7:50:47:02:70:21:
e1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:58:23:15:B3:49:6F:07:47:4A:48:5D:E7:55:D9:71:5E:54:C6:FC
X509v3 Authority Key Identifier:
keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:3e:35:5a:82:06:f5:96:4c:da:2a:28:b5:70:ac:30:38:03:
d1:b6:95:05:12:28:93:48:56:2c:8d:4d:01:8b:62:45:7c:dd:
ed:b7:dd:d6:ca:d9:2a:4f:11:e7:23:af:f8:e2:b0:4c:45:b0:
93:3d:c2:e5:13:4f:ad:a8:aa:3b:2a:b2:8b:6f:6a:e2:a8:1f:
99:aa:e4:1b:50:23:1d:9e:15:01:03:aa:f1:a1:d4:0c:d1:ee:
ce:19:98:de:fd:69:bb:d1:7f:2f:88:5b:46:6d:cd:b9:57:7b:
7d:7b:7b:f0:20:91:05:a2:7a:ec:4c:08:c4:df:be:fe:e5:d4:
0c:0e:0e:af:ee:ba:38:46:2a:ff:69:6a:86:d3:69:0c:54:00:
6a:71:ad:25:b7:54:80:b1:ad:81:c4:83:97:f9:c1:43:57:86:
18:04:93:4e:9a:87:ff:ca:b0:d5:d3:9e:f5:08:15:e2:8f:3e:
0c:0a:59:f1:49:72:b0:bd:1a:59:d9:a7:b6:8b:52:f2:07:49:
0c:d4:fd:fe:2c:4d:83:4c:d4:4f:34:de:50:c3:02:4a:08:93:
79:72:c1:1f:9d:15:98:27:79:d0:90:b4:a5:cc:e1:6f:a2:2c:
7e:92:d6:93:4d:4e:92:7d:02:f4:d1:8d:3b:7a:17:c7:9d:b0:
c9:5e:e7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:09:19 2026 by rpki-client