
$ rpki-client -vvf rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft
File: iQyucO4FJzcpUQC_DPAR6zIEYrc.mft (raw, json)
Hash identifier: BeTtoobxa2SS2rmbWnMqhjJkHWQNF1D0QpYvIboPMFw=
Subject key identifier: 6F:4B:62:BF:50:75:F2:C3:13:45:D0:B0:53:07:1D:AA:0E:5A:A6:52
Authority key identifier: 89:0C:AE:70:EE:05:27:37:29:51:00:BF:0C:F0:11:EB:32:04:62:B7
Certificate issuer: /CN=A91801AC/serialNumber=890CAE70EE052737295100BF0CF011EB320462B7
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft
Manifest number: 4B
Signing time: Sun 05 Jul 2026 09:10:03 +0000
Manifest this update: Sun 05 Jul 2026 09:10:02 +0000
Manifest next update: Sun 12 Jul 2026 09:10:02 +0000
Files and hashes: 1: iQyucO4FJzcpUQC_DPAR6zIEYrc.crl (hash: Me+GFHBFwwOpQPG1EiSbpBzvI9D9QwgyiuMocH43SV0=)
2: 28C5A13E58D711F1A51CFA3FA6833773.roa (hash: vdn++VmCdwWiyzm/zFcI+x86Ju8nJ7UCVdrrR8Mfcxg=)
3: 58548E7E58D711F193388669A6833773.roa (hash: 5SoJbf8FG3By3aUEH9+1tHflBLhQTGm7shpUveBVDcQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.crl
rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 09:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91801AC, serialNumber=890CAE70EE052737295100BF0CF011EB320462B7
Validity
Not Before: Jul 5 09:10:02 2026 GMT
Not After : Jul 12 09:10:02 2026 GMT
Subject: CN=6a4a1f6b-51e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:be:94:db:21:41:66:83:d7:40:90:a8:e8:b0:
be:ec:53:88:6c:5b:f8:58:70:19:7c:69:ce:33:46:
78:a8:33:c4:86:3e:03:7e:f3:f1:d0:d9:90:38:76:
48:e0:37:2d:d0:38:65:a1:8b:01:f9:09:ef:70:42:
38:e8:1a:8e:e5:b1:08:76:dc:a6:40:cd:6a:c8:dc:
bd:68:d2:98:05:16:0d:c9:7f:ec:10:c4:1d:d5:dc:
a3:39:fe:e1:4c:f0:eb:d9:3b:dd:71:d0:01:d6:ca:
bd:01:60:a5:1e:28:bc:54:9f:04:2b:97:9f:62:5f:
a6:0e:d6:89:4e:d7:19:62:bf:5a:4e:ea:bb:91:c0:
93:79:74:cd:a8:4d:c3:d7:bd:1a:d1:7d:91:5d:b6:
f4:12:c6:8b:44:f0:64:51:67:9c:70:c3:ba:e3:fa:
c7:60:7d:3a:6a:6c:ee:18:38:39:4e:4e:de:ee:91:
56:1b:c3:8d:23:10:c9:ec:12:03:06:23:f2:cd:a0:
90:47:ea:79:49:ce:c0:9e:6a:89:1a:31:6f:f4:a0:
8b:9d:75:37:91:4b:e7:df:47:21:f8:7b:53:83:36:
e1:cb:79:f2:9b:86:02:57:32:8b:8b:d0:9d:4c:24:
87:df:96:22:d5:b7:88:8e:d5:3f:9b:1e:22:12:d8:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4B:62:BF:50:75:F2:C3:13:45:D0:B0:53:07:1D:AA:0E:5A:A6:52
X509v3 Authority Key Identifier:
keyid:89:0C:AE:70:EE:05:27:37:29:51:00:BF:0C:F0:11:EB:32:04:62:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:35:a1:bc:87:5b:7d:70:c6:24:4b:c3:8b:29:70:ff:9e:0d:
b9:61:85:81:99:35:ab:7b:1b:3a:67:f8:5a:b9:8d:29:74:97:
3f:9d:cc:87:5a:78:8b:71:d5:0b:83:84:22:8a:1c:c5:33:89:
6e:23:4d:e9:c5:4d:b5:ca:a0:7b:53:ed:01:6f:74:a8:b2:0b:
fc:00:42:07:2c:06:b4:8c:49:dd:65:9b:28:5f:44:9e:27:1d:
12:94:bb:7a:82:3d:cd:32:79:a2:4b:6d:c7:0a:51:5a:b2:0b:
98:70:1b:aa:ae:5e:27:4b:1b:44:d5:3a:5e:36:e4:3c:1c:27:
d1:b3:bf:a9:54:23:81:f2:49:0c:2f:d6:b8:df:22:97:17:e0:
ea:61:32:c9:6e:11:08:c5:b3:28:81:a8:27:29:d8:b6:90:67:
c8:07:0e:c5:f4:bc:72:f9:ef:6b:a1:ec:13:de:0e:2d:ca:b9:
e2:2b:ba:97:a4:48:f7:e1:cd:c0:db:37:be:0b:07:71:c0:48:
5b:95:65:73:fb:4b:4f:16:29:93:63:b2:5f:7e:de:d7:ec:3f:
b9:e9:c1:3d:12:f6:a8:8a:ad:db:d2:b5:f5:d8:ba:6c:c2:a2:
f1:26:8d:1e:7c:51:11:ce:55:8d:b4:7a:b6:68:2a:2f:2e:7e:
5d:8b:a5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 23:16:13 2026 by rpki-client