
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft
File: iQyucO4FJzcpUQC_DPAR6zIEYrc.mft (raw, json)
Hash identifier: nwAKLqN8Ve/c+98pXAcl55bwCVGcFYE+7Qsh4W80lpo=
Subject key identifier: 70:88:0C:87:94:C1:5B:27:71:E4:65:69:CD:2E:04:E0:2F:8A:90:60
Authority key identifier: 89:0C:AE:70:EE:05:27:37:29:51:00:BF:0C:F0:11:EB:32:04:62:B7
Certificate issuer: /CN=A91801AC/serialNumber=890CAE70EE052737295100BF0CF011EB320462B7
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft
Manifest number: 7C
Signing time: Fri 09 Oct 2026 08:35:32 +0000
Manifest this update: Fri 09 Oct 2026 08:35:31 +0000
Manifest next update: Fri 16 Oct 2026 08:35:31 +0000
Files and hashes: 1: iQyucO4FJzcpUQC_DPAR6zIEYrc.crl (hash: ywINTainf+wMzYQFQ1BoLtKKjWJkki5CVI4zpAxCAyc=)
2: 58548E7E58D711F193388669A6833773.roa (hash: 5SoJbf8FG3By3aUEH9+1tHflBLhQTGm7shpUveBVDcQ=)
3: 28C5A13E58D711F1A51CFA3FA6833773.roa (hash: vdn++VmCdwWiyzm/zFcI+x86Ju8nJ7UCVdrrR8Mfcxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.crl
rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 08:35:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91801AC, serialNumber=890CAE70EE052737295100BF0CF011EB320462B7
Validity
Not Before: Oct 9 08:35:31 2026 GMT
Not After : Oct 16 08:35:31 2026 GMT
Subject: CN=6ac8a754-5112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:1d:1d:04:3e:a7:b1:e6:c3:2f:27:8e:ea:
20:fa:87:55:ac:a1:1d:9d:6b:51:11:2c:6c:4a:d2:
8d:be:2b:84:c1:db:4d:66:8a:ef:78:d0:4a:43:fc:
1b:b5:f3:2c:2a:07:b9:44:c7:d1:c2:8a:8f:94:0a:
5d:1c:67:14:71:9b:9a:08:76:c3:f4:7d:55:cf:ce:
6e:2f:c4:ac:ed:25:d0:b5:8c:80:e2:4c:ba:f6:11:
e4:52:24:bb:75:c2:c5:cc:4c:5e:06:91:35:f8:04:
d4:6a:a6:02:d2:7a:4b:6f:3e:bd:0a:e5:91:68:9e:
88:2d:d8:98:5d:38:49:ef:5e:3f:5a:5f:1f:2e:7d:
03:21:8b:1f:11:72:05:d3:11:09:bd:c9:67:3b:be:
63:b7:8c:b2:36:f1:00:29:8c:52:10:54:ce:28:20:
f9:d0:69:ce:c7:09:86:5e:ae:80:fe:ab:53:af:93:
4c:4a:e1:6f:a3:7c:05:c1:93:66:e4:cc:1e:a7:33:
e5:3d:5a:a2:bc:bd:85:e2:f0:cc:7a:cf:38:27:c8:
17:53:48:bf:41:da:63:f2:c3:7c:8d:50:7d:4c:d2:
00:c1:3a:14:03:cd:f3:29:95:b5:b2:63:0f:a1:30:
9f:63:3f:e1:ba:d1:11:8b:bb:81:8d:e0:72:e0:8e:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:88:0C:87:94:C1:5B:27:71:E4:65:69:CD:2E:04:E0:2F:8A:90:60
X509v3 Authority Key Identifier:
keyid:89:0C:AE:70:EE:05:27:37:29:51:00:BF:0C:F0:11:EB:32:04:62:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:b9:07:1d:07:ee:b3:96:9b:ee:69:18:5d:56:9e:a4:2a:ed:
3b:ea:c8:63:f4:ea:b1:4e:93:0f:c6:d6:20:eb:cb:dd:2a:3c:
5e:44:6c:38:7a:ed:ef:3f:97:ee:4f:ac:f8:e8:bd:44:0d:f6:
aa:c9:0f:b5:a6:f7:26:63:d8:7d:65:9a:1b:0d:38:7e:14:a3:
64:3b:8f:64:0c:0b:bf:52:0e:4d:21:45:1b:d7:a9:a5:3f:1a:
cf:a2:20:d1:d3:15:59:41:ca:de:74:e5:9f:f1:85:85:f6:5d:
8f:00:1c:2d:84:af:9a:f6:a4:06:6d:63:7d:86:5d:96:f8:a4:
84:42:bc:f3:12:eb:cb:ce:18:be:54:59:e5:a7:fb:ce:da:ac:
05:2e:06:61:e4:b7:83:1b:32:f4:05:b7:eb:c4:e9:0d:3f:13:
15:0e:9e:fe:ad:7f:7e:52:b6:37:4a:50:0a:c6:17:c1:1b:47:
c3:0e:c6:0a:df:83:4f:fc:6d:d2:9f:78:18:7f:84:bd:87:3a:
13:59:00:35:9e:6e:21:cf:f3:59:16:88:ec:c7:32:e7:c1:04:
32:08:b0:86:a7:bb:fe:ee:98:77:a8:fa:55:f6:df:f7:59:28:
a6:8a:c8:3a:45:a4:e9:e5:f7:0c:71:f7:98:cf:a0:4d:96:e0:
8d:ad:5a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 18:59:17 2026 by rpki-client