
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
File: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft (raw, json)
Hash identifier: 1BtkBSs5GF9H+AJgRDvIOU3WRSOGNQui33ULrWOArkk=
Subject key identifier: 8D:19:FC:3D:27:89:9D:93:F8:38:71:FA:F0:FD:AE:27:FE:8C:D1:FF
Authority key identifier: 21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24
Certificate issuer: /CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24
Certificate serial: 07D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
Manifest number: 07BD
Signing time: Wed 26 Aug 2026 21:20:48 +0000
Manifest this update: Wed 26 Aug 2026 21:20:48 +0000
Manifest next update: Wed 02 Sep 2026 21:20:48 +0000
Files and hashes: 1: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl (hash: UKBRkdPFAHy6DZtAF/Rgcr3n6gT65t6f/fVEQQWOFHU=)
2: 0F206AEA776F11ED8E7B8775C4F9AE02.roa (hash: Uh0sBPuZpoy8sTTNiUroNOAmNS0FTfsDSQBW+NkNyHo=)
3: 0DDC2C14776F11ED8E7B8775C4F9AE02.roa (hash: v2YonyCo9R/dlcaHZ1jfDPJlrOShqZgPxJ5RkLy9g6I=)
4: ED7C5416CD3711EDB6A0F37BC4F9AE02.roa (hash: TFtBaz3XXYr53c4KFkqYw9OsCBY/VjjGiRVEIJaG+ss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl
rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 21:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2006 (0x7d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A314, serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24
Validity
Not Before: Aug 26 21:20:48 2026 GMT
Not After : Sep 2 21:20:48 2026 GMT
Subject: CN=6a8f58b0-a0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c1:75:84:79:92:1d:05:a2:5e:d6:cc:18:49:
6e:6b:f2:41:f6:95:c3:4e:05:75:fb:87:f1:62:06:
bf:93:2e:de:64:8a:8f:ba:51:c6:70:7b:04:9a:08:
6f:79:a8:f4:91:f2:66:69:74:6d:ba:25:ab:ad:d6:
bb:e1:55:0d:65:8e:71:26:41:fe:5b:20:c8:e7:35:
10:d3:d5:4b:73:f0:09:20:74:06:5d:44:ef:04:56:
e2:ff:a6:82:ad:09:16:60:cd:98:36:a6:83:87:d8:
2a:e1:56:1d:a3:30:56:f1:88:d8:78:1c:32:97:eb:
f9:21:ca:40:42:7d:b1:28:f9:e3:23:6b:3b:f2:33:
85:58:31:19:db:15:c5:4b:a8:5a:ef:35:f2:f0:5c:
3d:17:13:c9:cc:ef:f7:3b:20:38:01:f8:27:2f:7e:
a0:76:98:f9:6d:30:0c:ad:6a:00:1b:8d:3e:9a:9a:
94:28:61:ae:64:2a:b7:87:eb:3d:50:d2:bf:ec:09:
44:19:f1:88:cc:8f:5b:00:cf:1d:63:80:d9:94:76:
8a:44:a4:ed:28:63:78:83:71:02:3a:26:da:27:87:
c5:7a:47:20:48:82:40:cd:ca:78:a2:f9:15:66:4c:
df:d6:b9:bb:f6:db:6c:8b:94:37:de:67:a2:b2:ab:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:19:FC:3D:27:89:9D:93:F8:38:71:FA:F0:FD:AE:27:FE:8C:D1:FF
X509v3 Authority Key Identifier:
keyid:21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:ca:2a:b9:52:5a:6d:81:fa:11:84:71:28:bd:db:54:33:03:
a5:5c:17:f2:46:31:71:e3:17:09:71:e7:4d:65:21:a4:53:84:
c7:74:65:f2:b7:c4:3c:1b:b2:72:2a:cf:53:7f:7c:4e:b5:e1:
df:30:89:7b:c8:e0:41:1e:b3:1d:af:2c:c2:fa:4f:72:3f:c9:
da:e9:5c:76:bf:62:7c:97:1f:ab:11:42:46:9b:38:85:44:21:
1f:71:7b:46:25:c8:48:73:f9:04:de:4a:d4:6d:7d:b0:f3:2c:
92:71:e3:22:5d:08:82:71:1c:6e:9c:c0:e2:44:d1:2a:a8:d9:
bc:f7:ba:d7:96:3c:b0:97:6f:20:38:bd:2c:ad:38:f6:0a:24:
c8:ca:48:0b:e2:1a:ef:64:a2:e9:26:10:17:50:15:82:3f:5d:
06:8b:6f:cf:63:c2:4f:f0:bc:e7:04:86:e9:c9:47:07:ed:dd:
e7:79:c9:62:4d:8f:74:c1:d6:c1:78:a5:04:94:14:f3:84:96:
f0:39:83:1b:f4:c5:6e:f5:f5:68:d8:46:ef:10:76:10:1c:bd:
78:92:d3:b5:19:98:c9:84:6c:f9:43:9b:40:e1:1c:8b:99:93:
33:45:ca:08:f5:c8:59:8f:12:fc:a8:c7:1e:bb:75:7e:0e:ca:
3d:d8:ff:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:10:47 2026 by rpki-client