
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
File: iTrFeQFBVhhq6vUDS6C0km-S43Q.mft (raw, json)
Hash identifier: F+YeROGlg08vgKOaSihJ/Jwp3S9Q+vWy9R+LJUG7y3A=
Subject key identifier: 06:8D:16:9E:CC:15:26:D2:D3:F1:4B:8C:42:CE:5F:C9:A5:92:51:89
Authority key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74
Certificate issuer: /CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374
Certificate serial: 013E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
Manifest number: 0135
Signing time: Thu 23 Jul 2026 07:13:54 +0000
Manifest this update: Thu 23 Jul 2026 07:13:54 +0000
Manifest next update: Thu 30 Jul 2026 07:13:54 +0000
Files and hashes: 1: iTrFeQFBVhhq6vUDS6C0km-S43Q.crl (hash: 83u/Ooa7jHZ+2Oq8Yj97/R0+c+tDlc2MIyj4EonTED0=)
2: FB729544B57F11EF8BDF3346C4F9AE02.roa (hash: lra+qhDRGNXUaND0a9KhE0KK0EaPsUI652BkcyFm2ic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl
rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:13:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318 (0x13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E3C7, serialNumber=893AC579014156186AEAF5034BA0B4926F92E374
Validity
Not Before: Jul 23 07:13:54 2026 GMT
Not After : Jul 30 07:13:54 2026 GMT
Subject: CN=6a61bf32-ab8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:9e:ed:05:8d:19:ea:a4:ac:d3:7f:f8:f7:
1e:28:3a:49:f2:80:1c:ea:21:74:2a:91:3d:c5:86:
1e:29:67:c2:a9:55:2e:72:b5:2b:c5:d4:de:1b:11:
59:f7:47:44:ab:7b:d0:d2:f5:af:e9:e0:9f:53:f3:
17:77:19:c2:01:88:02:24:02:50:e8:62:1c:05:92:
c8:fa:ca:5d:05:42:24:0d:0d:5a:2f:c0:87:5c:b3:
eb:39:1c:73:fb:59:12:c7:ef:5e:2e:41:52:dc:27:
39:11:c4:eb:94:86:69:f9:72:18:35:f7:42:b8:59:
72:8d:21:52:c4:19:79:b5:cd:66:56:0b:75:e0:fc:
9a:e8:13:60:0f:00:a9:98:f6:2e:e7:b2:5f:be:97:
b6:c8:b7:c4:fa:68:25:05:c7:21:a5:8b:e6:10:75:
d4:3e:31:f6:5b:82:e8:a1:b9:76:29:e8:66:9a:77:
59:4d:14:be:7f:db:f2:ca:2f:b6:23:d4:5c:50:98:
8c:45:c0:40:1b:2a:f9:92:94:e8:91:16:32:75:d2:
31:e8:bf:f3:49:0a:d0:f5:5d:37:4f:6c:55:b5:9c:
61:47:7a:0a:df:12:45:4a:f2:c4:30:72:ae:44:db:
2e:e9:20:da:97:7c:59:16:48:30:42:0d:89:ff:6b:
0e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8D:16:9E:CC:15:26:D2:D3:F1:4B:8C:42:CE:5F:C9:A5:92:51:89
X509v3 Authority Key Identifier:
keyid:89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3c:15:05:5e:68:44:b2:5c:7e:86:f6:e4:50:cd:3f:7f:dc:
13:77:6c:1a:a4:43:56:4d:cb:9e:82:53:38:f3:25:ac:95:63:
f8:20:bb:05:74:69:5c:0d:ab:92:7f:3a:d2:22:f4:5b:e7:d0:
da:8c:e0:f5:99:2d:24:4b:6a:05:f5:67:34:b5:0e:8f:ad:66:
3c:99:43:49:33:36:59:5d:72:dc:15:95:c8:b7:c1:03:b7:3b:
5b:7a:38:7d:61:fb:2b:84:3b:59:c0:24:a2:cc:8b:50:2b:65:
a1:c3:0d:20:fe:46:e8:ab:4b:74:95:39:ec:26:33:3b:23:4c:
51:df:c7:0d:db:7e:04:1c:75:49:b9:0d:12:19:63:4c:53:26:
be:07:64:8e:aa:8c:87:d9:06:e9:68:a1:a9:65:f7:09:c5:3e:
5f:23:0d:4e:3c:07:ca:58:64:e6:9c:8f:ad:1b:a0:68:02:8d:
4f:f3:78:8c:d9:c5:42:58:32:b2:45:53:f8:f6:06:03:0f:45:
d0:e0:65:b3:7b:40:07:ec:05:2b:77:3f:2b:ca:03:d0:d1:74:
5b:6b:fc:71:d5:cc:a6:70:c8:f1:44:5d:32:f4:f3:b8:6e:db:
22:ab:d7:6c:9c:49:c9:27:a9:ba:e3:97:69:2c:cf:7b:45:23:
ef:fc:6f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:52:51 2026 by rpki-client