
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft
File: ivWYKUtrI6E57fVPJCi8YZZRqhc.mft (raw, json)
Hash identifier: tRpxhyn0eHVzml4bxPWptv0muZhpy8c1UaIoOT39EwA=
Subject key identifier: BF:13:A9:79:28:D2:B2:18:30:3B:B0:22:CB:27:FC:82:D3:DD:6C:A9
Authority key identifier: 8A:F5:98:29:4B:6B:23:A1:39:ED:F5:4F:24:28:BC:61:96:51:AA:17
Certificate issuer: /CN=A917DB77/serialNumber=8AF598294B6B23A139EDF54F2428BC619651AA17
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivWYKUtrI6E57fVPJCi8YZZRqhc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 06:31:31 +0000
Manifest this update: Fri 25 Sep 2026 06:31:30 +0000
Manifest next update: Fri 02 Oct 2026 06:31:30 +0000
Files and hashes: 1: ivWYKUtrI6E57fVPJCi8YZZRqhc.crl (hash: HqS/kF0z/05QuseeTnGp9eDNzbYRRpc67NkKX9k40hg=)
2: 69F70CA058AC11F09233031BC4F9AE02.roa (hash: 5x5L97/2BZdvvgKkOU0ZIN1wQnp6OeudRNfppKCkvFw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.crl
rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivWYKUtrI6E57fVPJCi8YZZRqhc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DB77, serialNumber=8AF598294B6B23A139EDF54F2428BC619651AA17
Validity
Not Before: Sep 25 06:31:30 2026 GMT
Not After : Oct 2 06:31:30 2026 GMT
Subject: CN=6ab61543-f3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a0:2e:3f:2b:19:85:19:be:1f:5f:3f:69:17:
7c:13:4c:ec:01:6e:e7:f2:4f:76:11:74:02:c4:5a:
7e:8b:d7:4d:b2:5a:80:57:2e:c9:04:b4:82:80:a2:
97:61:2b:a8:69:5b:27:3e:80:ae:b3:56:64:89:78:
bf:25:29:e4:0b:82:e2:44:b3:4c:90:64:17:a6:a2:
14:ac:1e:69:20:13:70:c9:b6:48:f4:83:0c:4a:e1:
e4:c1:af:1d:c6:38:95:5f:c8:d9:83:38:72:50:f9:
e7:a9:08:f7:73:26:e7:8e:cd:32:63:c8:44:b8:c5:
a1:39:e6:20:ce:d3:77:55:00:be:20:dc:74:35:cd:
2f:dc:3b:63:28:13:a5:35:f8:47:ec:7f:62:ef:de:
69:50:66:38:af:28:55:cd:8a:f6:d9:14:5d:87:19:
be:43:ac:6e:cf:00:f0:60:0d:b2:ba:d1:86:45:8f:
13:fe:ac:75:c1:7f:2e:2a:52:27:ec:b4:0d:04:42:
e6:7b:e1:e8:55:f2:83:7c:6c:ea:dd:26:7f:6d:fe:
fc:d2:14:9b:c3:dd:e5:20:30:b7:a7:9c:8d:df:9a:
94:ab:d1:72:0c:ba:3e:8b:68:54:f4:2d:ab:f6:6c:
3d:76:33:55:f8:62:0b:f5:8c:03:3b:7a:20:ce:c0:
76:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:13:A9:79:28:D2:B2:18:30:3B:B0:22:CB:27:FC:82:D3:DD:6C:A9
X509v3 Authority Key Identifier:
keyid:8A:F5:98:29:4B:6B:23:A1:39:ED:F5:4F:24:28:BC:61:96:51:AA:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivWYKUtrI6E57fVPJCi8YZZRqhc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:a9:ab:25:4a:c6:2e:4d:c0:4d:c2:17:6b:6a:0c:d2:8d:99:
48:29:de:b9:ad:e3:61:f1:c2:5c:5b:5c:5b:76:6b:50:03:c5:
ee:bc:63:d5:85:9e:c0:f0:ed:e0:9c:42:01:29:70:3d:6a:ca:
34:6f:46:19:55:de:b1:74:19:71:f7:9e:42:f5:bf:87:fa:07:
e4:07:84:5e:cc:fd:d1:22:64:5e:92:a2:8b:6e:b5:20:56:cc:
dd:37:e1:0d:c5:9e:b5:30:54:54:bc:c0:c3:bc:b0:ef:59:f4:
91:30:9d:87:31:d3:b0:e0:5a:ce:39:14:85:86:bf:cf:1c:17:
7d:19:74:ef:a6:2e:c9:66:39:fa:bb:38:e7:72:7b:45:01:36:
90:f8:57:40:5d:87:c0:19:9e:05:4a:a3:14:76:f6:68:6c:8e:
87:28:dc:82:ad:d5:59:e8:44:ec:79:65:40:ee:43:f2:4a:2c:
f2:01:93:02:90:e1:b6:2a:73:02:83:45:f8:69:83:5a:ac:b4:
84:d1:e5:e1:c5:3f:35:dd:60:27:bf:12:2e:b8:0a:0a:28:6c:
0e:86:e0:4c:6f:e9:fc:23:3f:f2:93:e2:69:45:6c:47:3d:a7:
07:41:eb:c9:53:09:b3:33:13:1e:e7:80:36:1b:8d:c4:1d:b5:
0e:a4:9f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:32:48 2026 by rpki-client