
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
File: CKtUearwyEilFC1v5NyZFitFwzc.mft (raw, json)
Hash identifier: mePlwGCK0erQZSY/kI2EebkkdWmtBlZ1RXTTS0Dw2IQ=
Subject key identifier: 08:50:B6:B8:E4:E4:37:75:61:9B:8B:77:22:7A:E8:CF:54:26:73:39
Authority key identifier: 08:AB:54:79:AA:F0:C8:48:A5:14:2D:6F:E4:DC:99:16:2B:45:C3:37
Certificate issuer: /CN=A916DC7C/serialNumber=08AB5479AAF0C848A5142D6FE4DC99162B45C337
Certificate serial: 017E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
Manifest number: 0177
Signing time: Thu 23 Jul 2026 01:05:07 +0000
Manifest this update: Thu 23 Jul 2026 01:05:06 +0000
Manifest next update: Thu 30 Jul 2026 01:05:06 +0000
Files and hashes: 1: CKtUearwyEilFC1v5NyZFitFwzc.crl (hash: MLqETwm5ub5k+4vFnvOLxEvKdVSRHPSxOzxJR12Lniw=)
2: A6D577E2754D11F18B0D078183A30FBC.roa (hash: 55tJBQHzkVQe/2MtjgyE37tRr0q4GYCshDeazyFaUhU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.crl
rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DC7C, serialNumber=08AB5479AAF0C848A5142D6FE4DC99162B45C337
Validity
Not Before: Jul 23 01:05:06 2026 GMT
Not After : Jul 30 01:05:06 2026 GMT
Subject: CN=6a6168c3-ecfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bb:78:8e:ea:5d:81:78:c6:5e:d7:4f:05:50:
4a:47:06:b7:85:77:f2:09:fc:2c:92:5f:f6:30:a5:
96:16:e3:85:7a:1d:ce:fa:79:08:30:e7:3c:13:ae:
cf:01:d8:cf:1b:54:af:68:e2:10:1c:13:c2:13:3c:
28:8e:df:a5:af:4e:91:e7:28:c8:ce:ce:3c:07:8c:
47:7d:5e:6b:bc:dc:0b:de:a1:33:06:f7:ce:98:b3:
23:52:dc:ed:ac:c6:ed:61:18:77:ee:36:06:36:fa:
5f:b5:c0:fc:65:a3:ad:e4:e2:0a:4e:be:63:79:fd:
ca:8a:12:e9:f7:e1:55:88:e5:37:b7:f3:dd:02:19:
64:5d:f0:5a:2d:29:66:15:ad:49:7c:88:eb:f6:52:
31:bb:8b:34:76:73:be:8c:1f:6a:c9:8a:31:23:db:
04:c8:93:15:47:c7:98:3a:7b:67:22:fd:9a:7c:f5:
b8:a5:55:94:3d:aa:e8:7d:64:ff:d7:7a:07:47:ec:
2f:2d:86:dd:b6:b6:54:22:60:c6:ba:07:00:f4:27:
89:45:d1:50:72:ac:61:7c:32:4f:e5:b4:7d:82:38:
c2:97:b7:10:ed:c5:67:33:eb:66:0f:5e:8b:0b:bf:
03:bc:ca:b2:d1:24:b0:c0:7e:6e:c4:f8:10:a6:24:
1c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:50:B6:B8:E4:E4:37:75:61:9B:8B:77:22:7A:E8:CF:54:26:73:39
X509v3 Authority Key Identifier:
keyid:08:AB:54:79:AA:F0:C8:48:A5:14:2D:6F:E4:DC:99:16:2B:45:C3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:e4:d6:b0:80:ef:7f:07:82:14:14:a0:c7:72:b5:04:cd:d5:
90:41:b6:71:49:1a:5a:f3:90:c5:ed:47:6b:de:4f:9d:af:a9:
c3:8b:9d:77:fe:19:17:1c:35:d5:fb:c5:51:b2:53:24:6b:9f:
f6:39:af:dc:5c:93:dd:6f:b0:30:78:3a:87:5d:89:10:a6:e4:
ec:89:26:04:fd:3e:bc:0e:f9:d0:1c:3d:26:b0:57:42:8e:28:
85:65:00:16:f9:56:e6:28:09:08:d3:3a:ce:94:82:d3:94:79:
54:40:ea:c2:b6:d2:2f:c8:05:e4:ba:80:87:f5:ee:a3:81:ac:
54:47:ad:e3:56:94:13:46:65:51:6b:c7:eb:c3:b4:c5:f3:36:
00:da:40:28:23:b1:7e:d5:09:bb:eb:c6:9b:cc:81:18:39:a2:
3c:64:17:60:1a:61:2f:bd:20:05:70:83:b0:02:97:af:e1:22:
bf:fe:51:2a:3b:1a:c3:fe:d0:75:6a:66:1e:96:e7:e8:7d:0c:
f4:d0:07:61:87:ad:73:37:31:d3:fb:1a:22:41:da:38:ac:48:
7f:cf:ba:5a:e5:37:8c:42:ee:02:81:70:57:57:ff:c2:ef:ff:
28:1d:83:a5:2b:45:9c:01:72:d6:d4:18:2e:15:2a:be:ab:8d:
57:9e:cd:9e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkRDN0MxMTAvBgNVBAUTKDA4QUI1NDc5QUFGMEM4NDhBNTE0MkQ2RkU0REM5OTE2
MkI0NUMzMzcwHhcNMjYwNzIzMDEwNTA2WhcNMjYwNzMwMDEwNTA2WjAYMRYwFAYD
VQQDEw02YTYxNjhjMy1lY2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlLt4jupdgXjGXtdPBVBKRwa3hXfyCfwskl/2MKWWFuOFeh3O+nkIMOc8E67P
AdjPG1SvaOIQHBPCEzwojt+lr06R5yjIzs48B4xHfV5rvNwL3qEzBvfOmLMjUtzt
rMbtYRh37jYGNvpftcD8ZaOt5OIKTr5jef3KihLp9+FViOU3t/PdAhlkXfBaLSlm
Fa1JfIjr9lIxu4s0dnO+jB9qyYoxI9sEyJMVR8eYOntnIv2afPW4pVWUParofWT/
13oHR+wvLYbdtrZUImDGugcA9CeJRdFQcqxhfDJP5bR9gjjCl7cQ7cVnM+tmD16L
C78DvMqy0SSwwH5uxPgQpiQcTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAhQtrjk
5Dd1YZuLdyJ66M9UJnM5MB8GA1UdIwQYMBaAFAirVHmq8MhIpRQtb+TcmRYrRcM3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM3Qy9BNEMxNDYyODU1
NDkxMUVGODJCNUQzNkZDNEY5QUUwMi9DS3RVZWFyd3lFaWxGQzF2NU55WkZpdEZ3
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0NLdFVlYXJ3eUVpbEZDMXY1TnlaRml0Rnd6Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
REM3Qy9BNEMxNDYyODU1NDkxMUVGODJCNUQzNkZDNEY5QUUwMi9DS3RVZWFyd3lF
aWxGQzF2NU55WkZpdEZ3emMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeeTWsIDvfweCFBSgx3K1BM3VkEG2cUkaWvOQxe1Ha95Pna+pw4udd/4ZFxw1
1fvFUbJTJGuf9jmv3FyT3W+wMHg6h12JEKbk7IkmBP0+vA750Bw9JrBXQo4ohWUA
FvlW5igJCNM6zpSC05R5VEDqwrbSL8gF5LqAh/Xuo4GsVEet41aUE0ZlUWvH68O0
xfM2ANpAKCOxftUJu+vGm8yBGDmiPGQXYBphL70gBXCDsAKXr+Eiv/5RKjsaw/7Q
dWpmHpbn6H0M9NAHYYetczcx0/saIkHaOKxIf8+6WuU3jELuAoFwV1f/wu//KB2D
pStFnAFy1tQYLhUqvquNV57Nng==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:59:46 2026 by rpki-client