
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
File: IUKTP75ufF-3Z6hqXiHdYBeOo50.mft (raw, json)
Hash identifier: CBN0V2sbssQkQBIZNv45025vmC4D395xTx3qEaP/ZvU=
Subject key identifier: 24:74:09:1C:E0:70:81:20:3F:2C:A6:66:56:DD:B1:26:89:85:B7:89
Authority key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D
Certificate issuer: /CN=A9168D00/serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
Certificate serial: CA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
Manifest number: C7
Signing time: Wed 22 Jul 2026 22:57:15 +0000
Manifest this update: Wed 22 Jul 2026 22:57:14 +0000
Manifest next update: Wed 29 Jul 2026 22:57:14 +0000
Files and hashes: 1: IUKTP75ufF-3Z6hqXiHdYBeOo50.crl (hash: jWBYjyFEo6+wo4+f2V905dA7ZQNmAQ6aUPujnx7wva8=)
2: E92F49E661EA11F087750C23C4F9AE02.roa (hash: TR3KMntthAwVhbNksuMzt3WXfXIJDm+0sJy4E3HFO4A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl
rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:57:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
Validity
Not Before: Jul 22 22:57:14 2026 GMT
Not After : Jul 29 22:57:14 2026 GMT
Subject: CN=6a614acb-a99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:68:84:d7:a0:39:61:7e:4f:0a:02:fd:1d:ca:
7f:fa:41:b8:18:12:4e:93:b3:cf:67:ca:74:14:39:
00:4d:23:6e:c5:21:4a:6e:99:15:6c:c7:67:88:b0:
ad:20:68:9e:45:1e:ec:4b:4a:06:fc:eb:a5:2c:c6:
4c:86:6e:ba:ab:71:f0:e0:ad:20:c2:a7:9b:34:40:
f7:b1:dc:54:52:18:9f:60:b8:b7:6d:2a:1c:4c:04:
b5:ce:88:9b:11:0d:6c:80:57:b7:f3:49:78:8b:ad:
c7:5a:95:b4:35:77:84:a0:f3:e5:d6:72:1d:d4:cb:
1e:de:f9:30:84:8d:d9:7a:60:0e:ad:fd:66:fb:36:
56:f9:ae:9a:1a:07:30:78:4c:78:62:e0:a7:60:04:
7c:ce:45:5a:a6:b5:32:cb:93:27:f9:2b:43:78:ec:
3e:f8:5b:2a:92:c0:4a:9b:3f:82:53:3a:cb:e1:1f:
6c:3b:85:e8:d6:c2:fb:a7:75:8a:8c:30:35:fa:d7:
20:49:18:81:2b:11:69:3f:e9:7d:88:29:49:91:cf:
1c:2c:d7:78:38:e7:d2:20:90:ff:28:e9:3a:37:22:
32:e3:c9:9e:28:67:ce:85:68:ce:e8:e8:78:25:e6:
0d:df:30:df:77:26:b4:54:60:fc:4e:71:d9:c4:99:
1a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:74:09:1C:E0:70:81:20:3F:2C:A6:66:56:DD:B1:26:89:85:B7:89
X509v3 Authority Key Identifier:
keyid:21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:07:5f:60:39:9e:f9:75:c5:09:a6:cf:5c:35:74:9a:ae:19:
f3:81:42:aa:13:54:d1:22:0a:38:36:c9:3c:af:eb:47:ac:30:
2b:45:ce:8e:8d:67:62:27:24:16:0e:56:e0:3b:5e:ca:fb:03:
68:41:c5:38:44:55:52:bb:f7:19:47:84:f3:c5:ae:a2:37:d1:
84:6a:9c:8d:94:43:39:34:e9:3e:6f:7d:83:ae:ae:fe:e5:96:
f5:0b:b6:3a:98:17:ef:91:38:01:14:ef:2d:02:53:6c:89:89:
47:13:a7:6a:12:24:d4:6b:e7:cc:e8:94:9a:c6:3a:6f:6e:cc:
98:f3:28:b2:2e:6e:c1:b7:36:85:39:fe:7e:a4:87:5a:4a:a4:
8b:10:e5:5d:c7:11:70:13:f3:1e:81:73:53:e9:74:f7:29:4e:
78:98:ad:62:d6:59:1e:71:a3:ca:d4:ec:9b:b8:f9:22:fe:de:
a3:c5:d5:18:3b:e8:ce:1d:8c:53:f6:92:ac:32:43:4e:36:44:
2e:40:b7:fc:a0:8b:55:28:74:e6:36:af:59:24:7a:5e:d3:97:
fc:73:97:ac:1f:7e:c5:94:db:1c:2a:88:f1:9c:b9:0a:47:e1:
83:df:ee:6c:a4:fe:0e:3b:21:f4:83:97:e0:9f:f7:2f:d0:74:
a3:57:bd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:19 2026 by rpki-client