
$ rpki-client -vvf rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft
File: iQyucO4FJzcpUQC_DPAR6zIEYrc.mft (raw, json)
Hash identifier: ND+dztEkVGT0Lv6u7ILMSYKSo8zsFvlzl2HF38unW0w=
Subject key identifier: B7:5E:A3:2B:F4:96:DE:5F:E0:F3:10:CE:D0:7E:5B:E6:B5:47:22:CC
Authority key identifier: 89:0C:AE:70:EE:05:27:37:29:51:00:BF:0C:F0:11:EB:32:04:62:B7
Certificate issuer: /CN=A91801AC/serialNumber=890CAE70EE052737295100BF0CF011EB320462B7
Certificate serial: 64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft
Manifest number: 62
Signing time: Wed 19 Aug 2026 08:53:17 +0000
Manifest this update: Wed 19 Aug 2026 08:53:17 +0000
Manifest next update: Wed 26 Aug 2026 08:53:17 +0000
Files and hashes: 1: iQyucO4FJzcpUQC_DPAR6zIEYrc.crl (hash: LPnzVhuU0XPQanKfL6C+TxJpevh4+Qc3LuSItNZw32k=)
2: 28C5A13E58D711F1A51CFA3FA6833773.roa (hash: vdn++VmCdwWiyzm/zFcI+x86Ju8nJ7UCVdrrR8Mfcxg=)
3: 58548E7E58D711F193388669A6833773.roa (hash: 5SoJbf8FG3By3aUEH9+1tHflBLhQTGm7shpUveBVDcQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.crl
rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:53:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91801AC, serialNumber=890CAE70EE052737295100BF0CF011EB320462B7
Validity
Not Before: Aug 19 08:53:17 2026 GMT
Not After : Aug 26 08:53:17 2026 GMT
Subject: CN=6a856efd-f063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:02:09:99:28:6b:65:09:8c:92:71:14:4a:b5:
19:97:b5:32:05:78:fc:c9:a3:33:ed:29:3c:37:5a:
5e:26:25:de:85:de:a5:62:ce:67:37:9d:55:f2:ab:
4a:e4:4a:26:e1:84:ca:c4:03:9b:b9:2f:02:f2:9f:
da:aa:3e:c2:78:c3:c8:91:8d:45:e2:8b:23:a6:99:
b5:6b:20:97:bf:8b:d5:3c:ac:f5:3c:bc:76:54:73:
4b:fe:a4:46:61:ad:30:28:29:37:26:c1:80:df:d1:
01:d1:5a:d7:61:10:a1:6c:eb:45:2a:14:b8:db:63:
85:0d:a8:f8:fa:f0:80:ac:55:d6:93:00:07:12:7c:
2e:60:f0:02:6f:22:d9:54:ed:e5:29:bc:c3:2f:4d:
19:a0:2a:67:f5:96:70:5c:6f:f9:d5:f9:43:9d:9c:
61:4d:94:db:51:1a:25:87:06:8f:e4:96:51:63:68:
50:5b:71:5b:b5:f8:2b:8d:ca:3d:b3:fa:cc:45:1a:
b5:35:b3:ab:fb:c9:60:bb:c2:d4:4d:fa:00:dd:9f:
bf:69:83:21:18:c2:2e:63:7e:b6:06:38:ce:83:aa:
02:83:b6:ac:65:e2:15:66:68:9d:f8:cb:05:0f:3f:
17:3c:63:1f:c5:a8:c9:1e:cb:1b:6f:70:7c:4e:81:
8b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5E:A3:2B:F4:96:DE:5F:E0:F3:10:CE:D0:7E:5B:E6:B5:47:22:CC
X509v3 Authority Key Identifier:
keyid:89:0C:AE:70:EE:05:27:37:29:51:00:BF:0C:F0:11:EB:32:04:62:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0b:23:44:3a:fd:e5:bf:27:48:c1:da:5b:78:b8:c7:d3:8b:
5f:62:29:2d:ba:3d:7e:d0:84:a7:32:f6:62:cb:17:e7:7b:94:
db:35:55:ea:57:f3:9e:5c:8a:b6:35:d6:1d:7c:ac:07:c9:e1:
37:f2:fe:c4:23:ae:4d:3e:bb:71:79:73:6f:d0:d8:00:e8:ea:
de:86:e7:12:d3:dc:2a:4d:4d:c8:ae:d4:18:0c:4d:10:20:6f:
f7:40:4b:8a:d0:34:b6:19:c7:b2:49:23:30:13:6d:69:b2:a9:
dd:04:7a:72:d8:6e:29:a1:00:90:6f:c6:11:f9:ce:36:f9:3c:
fa:81:cc:04:55:67:4c:f2:60:b1:f5:e0:4d:a3:84:e6:e8:41:
56:c3:c4:24:28:53:99:ae:58:a3:b0:7e:bb:7b:57:33:ce:14:
11:ed:b9:29:88:09:ab:3f:22:b6:1a:ea:c4:20:4c:0e:a1:d2:
c8:e1:83:52:7d:ed:ff:d3:5d:43:1c:2d:5a:ae:c3:bb:ca:4b:
51:25:85:62:c3:32:50:f9:43:f2:3d:00:eb:81:5e:b7:61:82:
66:ec:40:91:1c:ae:67:40:bd:1d:28:cf:e6:27:ff:97:84:d0:
1c:96:fc:d7:56:e1:e6:b7:0a:c2:e1:55:05:58:97:19:14:68:
1d:e4:15:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:31:59 2026 by rpki-client