
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/iEJo0B0Z6qM0kqniXPayue5vG34.mft
File: iEJo0B0Z6qM0kqniXPayue5vG34.mft (raw, json)
Hash identifier: 6ZlVHjRF0UV6n5tOuNv0JEvou2/YlrBM86J7kR4DV78=
Subject key identifier: 94:5F:CA:33:F3:AE:C1:51:9D:3C:45:95:58:92:C5:92:B7:C3:82:75
Authority key identifier: 88:42:68:D0:1D:19:EA:A3:34:92:A9:E2:5C:F6:B2:B9:EE:6F:1B:7E
Certificate issuer: /CN=A91C9ADB/serialNumber=884268D01D19EAA33492A9E25CF6B2B9EE6F1B7E
Certificate serial: 0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEJo0B0Z6qM0kqniXPayue5vG34.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/iEJo0B0Z6qM0kqniXPayue5vG34.mft
Manifest number: 0C
Signing time: Wed 19 Aug 2026 09:53:55 +0000
Manifest this update: Wed 19 Aug 2026 09:53:55 +0000
Manifest next update: Wed 26 Aug 2026 09:53:55 +0000
Files and hashes: 1: iEJo0B0Z6qM0kqniXPayue5vG34.crl (hash: oibs2Yipf70uI7xd/t21TrV9bqVD78tzxUCrqlc76IQ=)
2: 2571056C8F1611F1B716621D3511F970.roa (hash: hfGZNvQE+P3B8l2oyHgnKQJxAfVEZlWoNG/6zvrHKow=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/iEJo0B0Z6qM0kqniXPayue5vG34.crl
rsync://rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/iEJo0B0Z6qM0kqniXPayue5vG34.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEJo0B0Z6qM0kqniXPayue5vG34.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9ADB, serialNumber=884268D01D19EAA33492A9E25CF6B2B9EE6F1B7E
Validity
Not Before: Aug 19 09:53:55 2026 GMT
Not After : Aug 26 09:53:55 2026 GMT
Subject: CN=6a857d33-20d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8a:cb:7f:d4:39:e6:d3:da:7e:f7:bd:89:85:
62:35:da:7c:f1:62:57:99:60:1b:10:61:17:9b:4f:
39:86:af:6c:b8:3d:36:25:f8:5d:5e:3b:8b:3d:1d:
a8:68:84:ae:b0:a4:71:d7:fc:0a:97:61:c0:5c:52:
96:9e:0f:17:32:d1:61:22:b4:b9:14:e1:56:2b:8b:
e1:d9:d2:b7:02:7b:b4:8f:eb:51:f4:49:93:c0:55:
f7:20:50:68:06:97:46:44:1c:1f:8b:b2:6f:14:b0:
bc:a9:26:42:92:46:81:94:ca:da:f6:52:24:20:0e:
fe:33:5d:d9:b7:20:26:22:bd:77:37:28:08:bf:84:
1e:d7:bf:b6:e2:74:2a:b5:a4:d2:2f:0a:6e:76:2f:
fc:d5:93:d5:fa:e8:07:80:d3:c8:a8:5a:65:d0:75:
33:1a:0a:e0:ce:40:e0:5c:cd:5a:a9:a1:5b:bf:4d:
ec:ae:01:6d:8a:3d:34:04:9d:cf:6a:ad:79:c0:8a:
3f:60:01:0f:15:63:42:97:7a:cd:41:2a:67:9f:04:
22:98:6e:ce:64:d8:c3:00:75:81:c0:47:df:44:30:
18:d1:3c:84:ca:0a:02:c9:c8:f0:03:9d:90:75:46:
2c:2a:e9:a0:23:13:b1:8d:30:6b:2d:4a:04:44:46:
b1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5F:CA:33:F3:AE:C1:51:9D:3C:45:95:58:92:C5:92:B7:C3:82:75
X509v3 Authority Key Identifier:
keyid:88:42:68:D0:1D:19:EA:A3:34:92:A9:E2:5C:F6:B2:B9:EE:6F:1B:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/iEJo0B0Z6qM0kqniXPayue5vG34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEJo0B0Z6qM0kqniXPayue5vG34.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/iEJo0B0Z6qM0kqniXPayue5vG34.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:3c:22:5a:e3:3b:62:67:a4:20:98:ac:54:f1:c1:ac:a7:8b:
48:9d:e2:af:41:d0:96:73:17:ce:0a:16:30:59:62:60:b1:ec:
14:8b:65:29:b1:e1:50:fd:50:70:63:64:16:22:67:f0:08:db:
b8:18:56:22:8b:0b:8b:ff:a8:0f:88:fa:18:05:74:47:6b:df:
6b:37:08:ac:e8:ba:99:f8:95:10:e8:7b:a1:7c:9f:b9:46:69:
e2:7c:24:88:0e:74:c3:e7:7e:e2:c5:06:1d:b4:04:ec:98:d9:
3a:a8:4e:ff:ca:53:19:cf:3a:2a:7f:71:46:97:75:b1:c2:23:
1d:a9:c1:9e:49:1e:3c:ee:87:23:95:2e:00:36:28:77:6d:d1:
db:72:97:5e:02:93:9f:09:da:8d:2d:97:38:f7:7c:50:0c:d9:
66:de:35:5d:c9:24:79:db:01:ef:5b:95:1c:21:55:d9:95:7e:
64:23:47:84:df:71:f1:cb:02:91:07:85:ad:eb:d9:b0:5e:7a:
bf:4d:be:3b:20:40:89:5d:b2:59:f8:90:b7:37:79:f9:f5:58:
33:98:5d:79:15:90:6e:92:67:ce:a0:05:9e:ae:5c:d4:72:de:
61:89:db:c0:1f:d8:ac:18:cc:44:07:a1:cc:56:60:19:30:88:
e8:e4:bf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:41:53 2026 by rpki-client