
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
File: ItPpdE2tSXUDbMQirBHEBHIOZuo.mft (raw, json)
Hash identifier: imFWpNRC8tAkN8mAau1R6PnQhKGvM9/A9mInIpvF2zQ=
Subject key identifier: 12:39:3C:29:BB:AF:22:46:46:34:A5:55:96:85:D7:3E:E3:64:4F:C4
Authority key identifier: 22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA
Certificate issuer: /CN=A917A4F7/serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA
Certificate serial: 0201
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
Manifest number: 01FB
Signing time: Thu 23 Jul 2026 04:29:54 +0000
Manifest this update: Thu 23 Jul 2026 04:29:54 +0000
Manifest next update: Thu 30 Jul 2026 04:29:54 +0000
Files and hashes: 1: ItPpdE2tSXUDbMQirBHEBHIOZuo.crl (hash: ycSjFn8G/kGuPS/E0dwn+Eb292j2DBvPZrrbQpXNFgQ=)
2: 9BE3C7087E8311EEBC7E6681C4F9AE02.roa (hash: HD0K5jglBpup2Ya1bJZyAOnbAr95k75UE1CHe344A3s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl
rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A4F7, serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA
Validity
Not Before: Jul 23 04:29:54 2026 GMT
Not After : Jul 30 04:29:54 2026 GMT
Subject: CN=6a6198c2-882d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ce:79:a8:9f:f2:02:c3:b9:66:94:b2:dc:eb:
4c:f7:2e:0c:fa:32:20:6b:45:33:cc:6a:39:b2:90:
06:05:05:ef:b4:d7:d1:d8:52:ab:f0:e8:ad:1b:05:
af:0d:a1:93:a5:f0:a9:0b:4e:9f:bf:c6:3b:0b:a6:
1b:04:0c:06:36:4b:40:f3:3b:26:bc:67:56:b4:cb:
27:5b:27:10:6e:9f:a1:eb:e8:8b:e9:54:12:3b:e0:
f4:31:89:b4:0a:48:52:fc:ac:7e:3e:f8:f9:26:13:
a4:20:eb:7e:24:06:02:89:e1:ae:c4:9b:97:32:10:
f3:24:49:37:e3:73:2f:89:39:f4:7f:44:1d:09:0a:
a6:56:e8:b6:4c:33:7f:5b:36:14:6e:49:0b:30:99:
4e:c3:82:82:b1:42:26:9d:9d:68:81:93:e7:36:90:
79:a8:9b:83:05:35:44:d9:74:08:b3:d5:98:3d:e9:
fd:17:31:ed:ce:c0:d4:78:94:3a:fc:96:49:65:e0:
e8:3c:9f:c1:86:b3:7b:67:ad:ba:64:2d:f4:87:98:
ea:41:ad:c0:61:75:05:70:15:bd:6e:48:b2:93:f7:
78:03:22:f9:68:80:99:67:54:4c:54:3d:51:1d:be:
f4:f7:90:22:57:ce:fd:83:4b:d3:3d:6b:d8:fd:91:
60:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:39:3C:29:BB:AF:22:46:46:34:A5:55:96:85:D7:3E:E3:64:4F:C4
X509v3 Authority Key Identifier:
keyid:22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c4:92:cd:24:58:43:3f:0e:89:58:48:c9:2c:4f:e2:1e:04:
ed:94:ef:39:40:52:91:ba:21:7c:71:b7:48:c1:4d:84:61:c8:
b7:94:0c:d4:29:91:27:e8:b2:18:22:b0:ca:13:19:92:da:33:
d9:1a:4b:34:9f:d2:5d:be:1e:10:2c:7e:18:af:c6:a1:f5:52:
1b:b8:3d:34:00:63:b9:d5:0a:19:7a:74:af:8d:d1:fe:db:7d:
00:c7:0c:34:40:7f:82:3e:93:ce:7b:b5:b9:d7:9e:f6:f4:63:
7b:8a:80:6e:6c:8a:35:95:2d:0f:90:a4:b1:4a:de:3d:71:65:
35:2b:43:fd:42:45:87:e3:3f:a4:c3:bd:90:53:d3:38:a2:6e:
3e:6a:d1:75:ea:ca:98:80:9b:15:a1:4e:65:40:88:3f:6a:f1:
8b:a1:81:98:1e:6c:76:4a:7f:97:6c:aa:be:49:6a:38:f6:31:
4d:4d:21:d9:65:07:9e:fc:c2:a5:3c:f2:27:0b:47:37:f7:44:
39:8e:1e:61:5e:61:b7:18:a1:15:80:57:cf:ce:ba:8d:11:09:
55:af:b4:20:90:bd:a2:cb:9e:a5:5a:61:52:95:ff:7a:60:7d:
6d:59:cf:ca:be:0d:7f:4b:be:f1:da:a9:7d:10:92:47:0f:0c:
a6:0a:3b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:52:39 2026 by rpki-client