
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft
File: Iq_UzdnE9MODdis-k-7PGub_nRY.mft (raw, json)
Hash identifier: KpXL1tDG4TfR7GVaOfpT7KxU0FImbpXzB9DlfWE6PCE=
Subject key identifier: 60:85:62:20:4F:24:98:87:07:44:66:13:E5:C2:7A:92:07:A3:3A:58
Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16
Certificate issuer: /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16
Certificate serial: 019A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft
Manifest number: 0191
Signing time: Fri 17 Jul 2026 05:27:15 +0000
Manifest this update: Fri 17 Jul 2026 05:27:15 +0000
Manifest next update: Fri 24 Jul 2026 05:27:15 +0000
Files and hashes: 1: Iq_UzdnE9MODdis-k-7PGub_nRY.crl (hash: r4+46u09A8If05gert19mveVT63TNfZ9/rZI01sJpZs=)
2: 1E85ABA6231E11EFA893585AC4F9AE02.roa (hash: uE9BZOQRvrYyitomF6RoiQleo5uOBCO+TRSMtaSljks=)
3: 493F98CE230111EFB4355F5FC4F9AE02.roa (hash: PBjbgLkLmMBj/F7PFO+ds4NYTRx+qR9D6LQ6bjgmDuc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl
rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 05:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410 (0x19a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DFDA, serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16
Validity
Not Before: Jul 17 05:27:15 2026 GMT
Not After : Jul 24 05:27:15 2026 GMT
Subject: CN=6a59bd33-aab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:b3:8a:bc:08:e4:ae:dc:b4:f8:aa:8b:fb:
8a:f4:56:5c:75:46:c8:b9:6a:42:f9:e4:00:f6:5d:
39:af:97:d6:d2:bf:3e:9d:1c:d4:e2:32:70:fa:0a:
47:88:86:1c:78:0c:94:df:e4:4d:d5:38:37:d1:b4:
a4:1d:5c:07:62:9c:c2:ab:2d:f2:cc:ae:b8:63:ee:
c0:bb:21:de:1f:4b:c1:85:54:79:17:32:0b:f5:c5:
19:55:e0:7f:9b:b0:24:19:5a:7c:20:c4:e9:c7:aa:
68:a2:d8:a0:98:4c:8f:47:f7:cb:5e:41:27:73:a8:
f8:a9:59:6f:37:1e:c1:f3:75:f4:ed:a2:2e:c2:92:
1b:20:7a:50:e6:b0:60:79:6f:7d:52:3b:b2:40:e2:
80:99:b8:e5:f9:ce:7f:bd:77:ea:ad:37:1d:a6:d1:
2f:c8:22:03:79:43:56:f9:52:32:21:92:64:17:16:
06:da:16:f2:45:df:c1:d0:c1:5a:93:12:c0:ac:5e:
98:eb:6d:2b:a0:8f:58:cc:41:0c:20:6a:7e:24:31:
61:fc:6d:56:65:bb:1a:e5:37:84:0e:74:97:0b:04:
d0:e7:84:11:65:89:53:3f:05:63:be:c2:d4:11:cb:
03:0f:13:5e:55:bc:0e:48:e6:a4:e3:e3:00:02:a0:
9c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:85:62:20:4F:24:98:87:07:44:66:13:E5:C2:7A:92:07:A3:3A:58
X509v3 Authority Key Identifier:
keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:14:3a:e9:df:70:14:f2:03:07:09:b4:44:c6:90:42:01:26:
8d:09:c7:36:8d:68:d2:11:6b:4e:20:2f:d3:1c:3d:2c:72:31:
b4:4c:6f:71:75:4b:93:ca:ef:63:22:08:f4:78:08:cc:59:b1:
40:23:5b:49:94:d3:37:30:aa:66:2a:42:d8:ea:8c:3f:2f:bf:
88:3e:62:68:19:de:50:a1:9b:ea:60:71:3d:bc:5f:7f:aa:87:
01:fb:ba:ce:37:04:45:fb:fc:5d:5c:c6:6f:6a:ee:5c:00:3f:
dc:c5:e6:95:7e:b6:75:2c:ea:f1:bb:1f:64:e9:fd:a7:a4:75:
93:34:16:9a:d3:45:de:b9:20:0b:94:68:e4:11:a0:69:96:9f:
77:47:4e:fb:73:c1:09:da:0a:e8:03:11:f5:df:d3:ea:eb:4f:
b5:40:39:fd:12:b7:80:b5:7a:38:3d:0e:74:bf:ad:89:1d:88:
6d:31:14:9b:70:b1:a3:01:a9:0a:84:73:a6:0c:2d:ba:a1:44:
64:1f:15:b8:5c:01:93:76:f5:26:d3:b9:39:d0:6e:58:20:db:
a2:ca:e0:6c:ae:07:4e:9d:9a:2a:6b:d4:80:24:92:2f:ed:f9:
5f:71:d5:f6:86:21:78:52:63:6a:80:38:d5:52:69:15:5c:44:
1c:e5:82:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:15:04 2026 by rpki-client