
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft
File: IadvO7gWz_58RmVVwrC-vJx7xW4.mft (raw, json)
Hash identifier: 5N3qZMzra1BhtMb73AdmKDSIwhB8mbcLf7KiJdBA07M=
Subject key identifier: 45:18:86:98:23:38:2C:3D:A2:B5:FC:EA:64:1F:FC:B1:41:8A:E3:A8
Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E
Certificate issuer: /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E
Certificate serial: 05B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft
Manifest number: 059F
Signing time: Fri 04 Sep 2026 22:58:53 +0000
Manifest this update: Fri 04 Sep 2026 22:58:53 +0000
Manifest next update: Fri 11 Sep 2026 22:58:53 +0000
Files and hashes: 1: IadvO7gWz_58RmVVwrC-vJx7xW4.crl (hash: 1LWaIqxKPI8u+S3HCCESJCEa21zFEYecEB0mssbfnus=)
2: 44D508E43C8311ECA86D031EC4F9AE02.roa (hash: rybthJdFuq/pPEywNNw6CY2xy0sjK2dGh2/15++J1U4=)
3: 45CC5B763C8311ECA86D031EC4F9AE02.roa (hash: Uw2FZTkHUIqrr7yagK8cTLFCJvmGH/94ekgNsNUOejg=)
4: 5295B96E705F11F1BD79389570A30FBC.roa (hash: n1nOWdau1wyLHktQpIFU/BOos2aKf6aKxaZ+x98puqQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl
rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 22:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1458 (0x5b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA559, serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E
Validity
Not Before: Sep 4 22:58:53 2026 GMT
Not After : Sep 11 22:58:53 2026 GMT
Subject: CN=6a9b4d2d-6219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:e4:d0:29:7d:ea:89:90:0b:67:ef:66:6e:
36:f8:b1:9a:61:f6:13:86:fe:c8:bf:01:2c:20:b4:
ac:da:76:e8:8c:c4:b0:6b:0e:75:8d:06:d6:da:1e:
33:8e:f2:4d:59:53:f5:11:05:db:09:77:d1:2d:39:
a0:f2:c2:bc:05:08:0b:c2:73:19:bb:c6:83:c1:11:
38:25:00:95:05:38:5f:be:3d:96:06:d5:c9:b7:b7:
cb:ca:4f:e3:8a:b9:ba:b8:a0:4f:60:5a:50:57:99:
a0:49:08:be:09:47:2d:aa:66:5a:7c:42:61:56:8a:
c0:ad:b2:2a:47:f0:11:78:9c:8c:c4:65:19:e3:87:
bb:72:0d:5b:b1:cb:f0:98:1d:a1:31:d5:58:3e:1d:
18:f9:14:63:bb:b8:3e:d5:92:cf:7b:51:1b:0a:79:
2b:e9:75:6e:dc:34:4f:0f:26:62:bf:d6:2a:a8:a2:
47:3f:46:d9:d4:a8:bd:be:2d:3f:66:44:51:25:31:
b7:0f:89:14:1d:70:a7:69:71:61:d1:bf:6e:42:b3:
0f:7a:2d:6c:20:bf:3b:e3:f7:83:d6:98:37:7e:9e:
0b:3c:2a:86:e5:b2:0e:ee:c9:28:a8:8a:56:bc:e2:
ae:26:fa:8f:d0:1c:d4:71:9e:32:1b:40:58:b5:d9:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:18:86:98:23:38:2C:3D:A2:B5:FC:EA:64:1F:FC:B1:41:8A:E3:A8
X509v3 Authority Key Identifier:
keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:74:50:86:69:e0:a6:8f:45:0b:9c:8a:d6:99:ef:e5:9b:06:
83:f4:c9:52:cf:46:04:77:c6:4c:02:73:ed:ec:28:94:27:7b:
f1:c0:8e:02:cf:af:b1:0c:11:a0:a8:40:ed:4d:9e:77:11:00:
4a:d4:54:a9:31:3c:f0:32:84:d3:31:b3:29:a5:17:3e:f7:47:
a2:c6:3d:be:4f:ff:99:60:2f:7e:f4:74:7b:65:20:63:b6:8d:
66:67:25:0c:53:b3:a6:73:8d:3f:5c:3b:a6:87:08:b6:0c:70:
da:d6:a0:b3:40:5a:17:26:0a:67:25:93:b9:d2:05:28:38:84:
25:21:b3:d7:6a:0b:e4:06:49:12:e1:a0:c7:5e:eb:f1:f1:0b:
2c:85:ac:46:5e:2e:2d:b2:bc:ab:e0:31:a7:43:b8:49:f4:53:
c9:c7:fd:aa:d5:83:0f:ed:a4:a8:e4:4e:3d:e7:53:3d:78:c4:
4a:17:2f:7b:1c:b5:88:34:6c:df:b6:a0:71:ca:5d:8b:aa:ce:
f5:39:fa:68:5c:6d:e1:f8:ac:cd:cd:98:45:6b:c0:e5:3f:a9:
64:4a:56:78:9d:2c:88:46:5e:90:6b:13:7e:18:8d:69:aa:2e:
71:f1:b4:94:91:74:50:4c:73:cf:76:4f:7e:dc:c9:20:2b:29:
ae:3c:cc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:56:15 2026 by rpki-client