
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
File: IaR__8gaEzNcB7kmBaLd_RgHoUw.mft (raw, json)
Hash identifier: zR0KuGrriM8Dm/YbPAbLUDMlw2adOP/aAK2rkkrKB7I=
Subject key identifier: A2:C3:AE:2E:A2:60:1A:DF:83:4F:00:94:AA:A4:BE:37:5D:C4:B0:60
Authority key identifier: 21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C
Certificate issuer: /CN=A91BF905/serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C
Certificate serial: 0BEC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
Manifest number: 0BD7
Signing time: Tue 18 Aug 2026 19:17:47 +0000
Manifest this update: Tue 18 Aug 2026 19:17:46 +0000
Manifest next update: Tue 25 Aug 2026 19:17:46 +0000
Files and hashes: 1: IaR__8gaEzNcB7kmBaLd_RgHoUw.crl (hash: zIi6//e/yHIjPDGtvrVc5Bh/toGPExUGG9gQ3FDLkLs=)
2: CDEFCF14801F11EF99206C47C4F9AE02.roa (hash: KbTYxfFy1GT8pB5c2e56lPcyBgZokB9iBVqKo/PqazE=)
3: 0C63520A89A311F19CE9D9314011F970.roa (hash: btffrqxnv+LEdVRDJ0NPhpvOIf7HzJYoZs3Wq7IbLmI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl
rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3052 (0xbec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF905, serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C
Validity
Not Before: Aug 18 19:17:46 2026 GMT
Not After : Aug 25 19:17:46 2026 GMT
Subject: CN=6a84afda-4482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:00:0e:ac:c5:ed:69:76:05:6c:88:9d:a8:e0:
57:b5:0e:09:6c:2f:7f:1a:22:94:21:9b:c9:fc:2f:
ea:32:bf:03:c4:7b:b1:ef:eb:c4:c0:e3:3e:2f:52:
41:41:07:6c:66:d9:9c:ec:b8:ea:97:38:3a:05:47:
34:c5:e9:6c:c9:fd:b6:5c:82:a8:22:d9:e2:91:06:
bb:a0:e3:a4:cf:46:fb:65:df:d8:aa:36:71:69:e9:
61:4a:27:31:83:0e:56:f2:2a:e3:8c:aa:86:e9:5b:
9b:a7:bb:d7:85:5f:53:9d:05:a2:e4:2d:e9:85:d5:
5d:1a:be:61:f4:f7:70:07:60:4d:eb:e1:14:bc:80:
39:28:8a:28:85:98:1b:c1:f8:d3:48:16:84:9b:62:
fe:fd:34:eb:06:1c:bb:e6:af:e9:8e:1c:dc:0c:91:
08:4b:89:10:7e:a9:40:51:11:3e:6e:69:d3:9d:26:
8b:b9:2a:0d:2a:20:06:99:d0:e0:74:b6:84:58:18:
87:44:b5:85:24:08:04:12:b8:3f:d4:0a:87:a9:c6:
b4:47:8a:90:da:ea:02:f2:0e:b2:c2:3f:f1:8c:16:
23:b9:a8:83:7c:b4:5f:eb:2c:c0:2e:7b:d1:63:b2:
e6:38:60:90:14:87:f6:2a:54:12:39:32:52:67:05:
e0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C3:AE:2E:A2:60:1A:DF:83:4F:00:94:AA:A4:BE:37:5D:C4:B0:60
X509v3 Authority Key Identifier:
keyid:21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:89:15:50:89:c3:16:c7:b6:92:79:81:40:37:19:1e:97:7e:
a9:6f:6c:27:8b:b7:2d:73:dd:5a:a9:5a:87:b3:b1:9f:15:db:
65:13:41:7a:98:84:e6:95:72:74:03:90:a8:5c:b5:2d:c4:9d:
ee:7d:61:4a:a5:ca:62:1d:d6:ed:31:bb:8f:d5:ee:2d:76:48:
f2:f7:4b:d7:4c:f7:47:30:33:bd:1d:7c:e1:7a:79:aa:ad:f8:
f2:5b:3f:55:cb:a9:d0:8e:e0:15:16:2d:70:bc:60:aa:b3:36:
d6:6a:ef:df:15:02:c6:ab:e4:c4:2a:e9:9c:87:5d:ec:98:e5:
f6:c5:ee:5a:4b:80:01:13:b3:c6:ee:4c:00:f0:d4:e3:f5:65:
5c:59:43:af:bd:9c:c8:a8:14:35:9f:97:2a:5f:71:fa:51:5a:
ff:01:5e:07:81:b3:6f:06:02:c1:2f:bf:f7:46:74:f4:11:12:
df:b2:2b:61:3b:d9:b9:62:1d:18:aa:03:6e:1c:5f:56:2c:cc:
22:f7:41:85:f2:48:4d:91:51:98:25:1e:14:d2:52:7a:38:1b:
17:bc:1a:e0:0b:6c:fa:9d:6d:1f:51:47:85:68:bf:8d:a9:23:
ad:23:f1:7e:32:9f:45:e3:62:1a:d9:4a:29:53:93:7f:12:8e:
5f:b3:89:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:55 2026 by rpki-client