
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
File: ItPpdE2tSXUDbMQirBHEBHIOZuo.mft (raw, json)
Hash identifier: mx7cpn4+tOfYDVRBIOi6G35KBg9JC0lErHCxOW6qB6U=
Subject key identifier: C7:68:06:5C:AD:6B:13:8E:C4:1A:C2:7D:2D:05:41:94:6F:98:31:30
Authority key identifier: 22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA
Certificate issuer: /CN=A917A4F7/serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA
Certificate serial: 0221
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
Manifest number: 021B
Signing time: Wed 23 Sep 2026 02:44:59 +0000
Manifest this update: Wed 23 Sep 2026 02:44:59 +0000
Manifest next update: Wed 30 Sep 2026 02:44:59 +0000
Files and hashes: 1: ItPpdE2tSXUDbMQirBHEBHIOZuo.crl (hash: 627usikBoqS0bKl/q28xtWjPC3F2a505mBsJRQ21vfI=)
2: 9BE3C7087E8311EEBC7E6681C4F9AE02.roa (hash: HD0K5jglBpup2Ya1bJZyAOnbAr95k75UE1CHe344A3s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl
rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A4F7, serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA
Validity
Not Before: Sep 23 02:44:59 2026 GMT
Not After : Sep 30 02:44:59 2026 GMT
Subject: CN=6ab33d2b-b7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:17:bb:e8:7c:0a:ac:4d:67:40:4c:8b:c6:
6f:9a:20:be:62:2a:1e:0a:a6:d2:da:fb:da:86:1a:
8f:cc:94:9e:5f:e0:a3:fb:69:f3:dc:12:c3:87:e5:
30:65:5f:e4:c3:f2:f7:c1:7a:5b:f4:3d:fa:d7:ee:
02:82:5e:72:8d:c1:9b:a0:48:20:2c:75:c7:16:17:
fd:7a:9d:7f:92:df:69:b6:c6:53:ab:c3:3f:b4:3b:
2a:a5:d8:b6:cb:7b:9a:22:9c:eb:34:10:be:df:41:
5e:42:29:2e:f8:37:63:41:9f:ef:b4:4f:57:46:f4:
4e:b7:9e:a1:fc:3d:fc:4b:b4:09:8c:6c:82:ed:ec:
e8:71:19:2b:8a:8d:a0:88:a1:f2:a9:e3:fb:d8:15:
ee:f4:cb:bd:1a:1d:bb:20:cf:eb:5f:d8:e6:e9:db:
2a:0e:87:6c:34:d9:8d:c0:8b:dd:ab:c4:4b:1d:06:
12:9b:8b:1c:56:6b:30:7a:73:32:75:45:76:0b:a5:
e9:a3:3f:7c:68:6f:d9:7b:34:59:e8:4b:ec:36:38:
5c:df:07:f6:33:e6:4f:0b:70:52:c6:2f:7e:ab:6e:
7f:45:f6:42:c1:00:b2:f2:e9:91:d8:9c:2f:a6:d9:
1b:3d:1d:d8:59:d4:f3:1a:26:23:14:e3:9b:4d:75:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:68:06:5C:AD:6B:13:8E:C4:1A:C2:7D:2D:05:41:94:6F:98:31:30
X509v3 Authority Key Identifier:
keyid:22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:bc:08:21:62:5e:65:b5:65:52:82:e7:9d:49:fb:a2:ea:19:
34:6e:c8:2a:72:3e:98:e7:60:84:b4:fd:c1:bd:1a:24:87:2c:
9a:66:cf:0c:69:80:f1:71:89:a7:b7:63:b4:42:24:4c:e1:3e:
a2:88:0f:1d:88:a5:30:db:4a:9a:96:5a:fc:23:04:b3:6b:c1:
18:bf:d3:ab:63:43:62:51:73:28:c4:d3:93:0b:df:db:4a:2d:
c9:7c:70:22:71:ee:c4:d3:d4:81:f6:ac:f9:19:74:d5:0b:44:
be:b1:d3:ba:89:6b:88:71:22:58:08:1d:63:b6:33:6d:81:c0:
4f:8e:01:ff:ba:fd:e1:65:4b:78:80:74:18:e5:87:7b:10:b1:
f8:eb:f9:31:08:41:da:c9:6c:be:4b:64:ef:16:b8:13:0d:12:
bc:66:4a:07:53:9c:c2:31:04:5a:cc:0a:44:55:4e:5f:07:fd:
4d:c6:92:f2:94:32:fd:2d:ba:bc:12:e0:40:20:8b:af:80:af:
3b:4d:b3:8c:33:76:a5:27:01:39:56:b8:24:73:48:e6:b4:dd:
0a:66:21:9c:50:b4:b7:ad:0e:8a:6f:53:99:d3:f0:84:25:1a:
86:9a:76:74:9e:88:cb:19:de:d0:d7:64:61:8f:7e:e4:a1:69:
09:58:14:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E0RjcxMTAvBgNVBAUTKDIyRDNFOTc0NERBRDQ5NzUwMzZDQzQyMkFDMTFDNDA0
NzIwRTY2RUEwHhcNMjYwOTIzMDI0NDU5WhcNMjYwOTMwMDI0NDU5WjAYMRYwFAYD
VQQDEw02YWIzM2QyYi1iN2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqmIXu+h8CqxNZ0BMi8ZvmiC+YioeCqbS2vvahhqPzJSeX+Cj+2nz3BLDh+Uw
ZV/kw/L3wXpb9D361+4Cgl5yjcGboEggLHXHFhf9ep1/kt9ptsZTq8M/tDsqpdi2
y3uaIpzrNBC+30FeQiku+DdjQZ/vtE9XRvROt56h/D38S7QJjGyC7ezocRkrio2g
iKHyqeP72BXu9Mu9Gh27IM/rX9jm6dsqDodsNNmNwIvdq8RLHQYSm4scVmswenMy
dUV2C6Xpoz98aG/ZezRZ6EvsNjhc3wf2M+ZPC3BSxi9+q25/RfZCwQCy8umR2Jwv
ptkbPR3YWdTzGiYjFOObTXWNsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMdoBlyt
axOOxBrCfS0FQZRvmDEwMB8GA1UdIwQYMBaAFCLT6XRNrUl1A2zEIqwRxARyDmbq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTRGNy8yQTQ4OTM4NjdF
ODIxMUVFOTlEQTlCN0FDNEY5QUUwMi9JdFBwZEUydFNYVURiTVFpckJIRUJISU9a
dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0l0UHBkRTJ0U1hVRGJNUWlyQkhFQkhJT1p1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTRGNy8yQTQ4OTM4NjdFODIxMUVFOTlEQTlCN0FDNEY5QUUwMi9JdFBwZEUydFNY
VURiTVFpckJIRUJISU9adW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAu7wIIWJeZbVlUoLnnUn7ouoZNG7IKnI+mOdghLT9wb0aJIcsmmbPDGmA8XGJ
p7djtEIkTOE+oogPHYilMNtKmpZa/CMEs2vBGL/Tq2NDYlFzKMTTkwvf20otyXxw
InHuxNPUgfas+Rl01QtEvrHTuolriHEiWAgdY7YzbYHAT44B/7r94WVLeIB0GOWH
exCx+Ov5MQhB2slsvktk7xa4Ew0SvGZKB1OcwjEEWswKRFVOXwf9TcaS8pQy/S26
vBLgQCCLr4CvO02zjDN2pScBOVa4JHNI5rTdCmYhnFC0t60Oim9TmdPwhCUahpp2
dJ6Iyxne0NdkYY9+5KFpCVgUhA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:11:28 2026 by rpki-client