
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft
File: IAAAWsWhdEBL07_CmUMyPpYGJbk.mft (raw, json)
Hash identifier: rRW9xvjshiw5cyNUjO0ge4PqP7uQNZIDtWRZkiJ05Nw=
Subject key identifier: 11:CB:D9:C4:DD:C7:90:A2:C0:FC:10:8C:65:F4:DB:6C:0C:78:AD:A6
Authority key identifier: 20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9
Certificate issuer: /CN=A91DA590/serialNumber=2000005AC5A174404BD3BFC29943323E960625B9
Certificate serial: 043A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft
Manifest number: 042C
Signing time: Wed 19 Aug 2026 00:40:06 +0000
Manifest this update: Wed 19 Aug 2026 00:40:05 +0000
Manifest next update: Wed 26 Aug 2026 00:40:05 +0000
Files and hashes: 1: IAAAWsWhdEBL07_CmUMyPpYGJbk.crl (hash: ND9kqkdVzVk/f73a4wCnXuMdm41u5GNFAOZGrY51J1A=)
2: 09E46A74C07F11ECB0707F18C4F9AE02.roa (hash: d9abjcEhs9/di2KPJ0Tgn2dnNXYERKiguvM4ngPYdno=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.crl
rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1082 (0x43a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA590, serialNumber=2000005AC5A174404BD3BFC29943323E960625B9
Validity
Not Before: Aug 19 00:40:05 2026 GMT
Not After : Aug 26 00:40:05 2026 GMT
Subject: CN=6a84fb66-a712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5e:11:45:ea:17:a2:95:cf:74:ff:ba:55:1f:
de:f9:39:bd:6c:04:03:9a:61:ec:a6:87:f9:89:a7:
72:9c:5c:45:05:b6:27:c0:e0:16:08:c5:62:14:b4:
22:76:60:0e:be:e3:dd:39:a6:14:56:8e:6f:83:69:
76:5a:83:e9:e5:14:3d:ea:16:f0:f0:e1:f3:43:f9:
4d:0f:aa:d7:e5:48:fc:2e:fd:7a:9d:ac:a4:a8:52:
38:94:57:bc:4a:2b:07:46:0c:a6:99:7e:6a:4b:83:
cc:93:02:c5:ea:54:d3:21:df:a8:3f:19:03:e2:f2:
49:fe:14:46:f3:06:a9:d1:5c:81:d3:38:d2:27:59:
c2:4b:12:d2:01:f8:24:d4:4b:ee:c6:17:44:ce:c9:
09:26:f9:e3:02:eb:bb:78:62:9f:52:1b:0e:14:a5:
d6:75:33:94:91:28:70:c2:6e:cd:ae:bb:56:17:3a:
6e:22:c8:e9:ea:97:43:c1:e8:61:b0:0d:4c:f3:50:
41:fe:f7:ef:18:18:69:70:80:19:ce:f3:2b:ea:41:
4b:3e:74:c3:f1:27:06:b4:2c:81:3b:3a:23:eb:36:
cf:42:a5:0c:58:cd:dc:ec:21:26:81:4f:cc:ef:b5:
e9:91:02:db:43:ff:61:6f:2d:48:33:a4:e5:fd:54:
ed:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CB:D9:C4:DD:C7:90:A2:C0:FC:10:8C:65:F4:DB:6C:0C:78:AD:A6
X509v3 Authority Key Identifier:
keyid:20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:95:71:25:a5:8f:62:42:fa:f4:79:4f:be:3e:43:c1:d0:ea:
d0:1b:eb:bf:b0:a8:c0:97:4a:29:58:d2:d9:e5:d1:13:eb:73:
d8:52:75:2c:c2:90:41:78:f2:4e:91:72:4a:15:00:77:80:3b:
75:55:af:5b:09:d2:2e:64:e9:b5:20:37:87:6d:ee:1b:a1:3d:
1b:ff:38:c9:d4:8c:42:b2:62:dc:0e:81:83:f0:39:63:2b:de:
31:24:30:62:ca:30:dd:58:19:da:32:f4:92:d5:aa:bf:20:94:
02:7a:35:50:7c:a1:5a:79:19:6e:26:d6:d2:8d:a0:26:85:6f:
b3:e9:80:73:60:17:c2:ed:80:b2:fd:02:f0:38:8e:db:08:43:
19:c4:df:db:30:74:c7:54:0a:5e:97:ce:f0:bc:e3:fa:51:98:
ab:80:68:11:15:5c:a1:49:e5:c3:d1:f7:05:74:21:28:66:d4:
3c:66:17:a8:5a:3a:46:63:3a:e6:ac:b9:34:f6:02:c5:71:62:
4b:38:c8:ca:5b:10:02:fd:bd:0b:50:00:cd:72:72:e2:e1:b3:
62:21:88:58:cb:2c:6a:8c:d1:f9:27:8f:84:fe:ac:09:c9:d8:
2f:c6:5c:b0:a8:b3:e4:c0:15:13:33:0e:c7:ad:eb:5e:b0:65:
81:8c:3d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:33 2026 by rpki-client