
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft
File: ivWYKUtrI6E57fVPJCi8YZZRqhc.mft (raw, json)
Hash identifier: CMAUqNTLeRQeXReIvGS8uLunte0dw41JIacHCK9x7PE=
Subject key identifier: 52:D2:7F:F1:A5:7E:51:E5:3B:F4:2E:95:07:0F:1E:74:AD:39:4C:AE
Authority key identifier: 8A:F5:98:29:4B:6B:23:A1:39:ED:F5:4F:24:28:BC:61:96:51:AA:17
Certificate issuer: /CN=A917DB77/serialNumber=8AF598294B6B23A139EDF54F2428BC619651AA17
Certificate serial: CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivWYKUtrI6E57fVPJCi8YZZRqhc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft
Manifest number: C7
Signing time: Thu 23 Jul 2026 08:39:42 +0000
Manifest this update: Thu 23 Jul 2026 08:39:42 +0000
Manifest next update: Thu 30 Jul 2026 08:39:42 +0000
Files and hashes: 1: ivWYKUtrI6E57fVPJCi8YZZRqhc.crl (hash: /PtZPWdXZJz19buQH4un5J5kNt9XtnvNJn/dbqxq+5A=)
2: 69F70CA058AC11F09233031BC4F9AE02.roa (hash: 5x5L97/2BZdvvgKkOU0ZIN1wQnp6OeudRNfppKCkvFw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.crl
rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivWYKUtrI6E57fVPJCi8YZZRqhc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:39:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DB77, serialNumber=8AF598294B6B23A139EDF54F2428BC619651AA17
Validity
Not Before: Jul 23 08:39:42 2026 GMT
Not After : Jul 30 08:39:42 2026 GMT
Subject: CN=6a61d34e-b20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:fa:65:bf:ee:34:4c:6c:ce:76:b5:6b:53:
69:fd:9a:76:e3:f9:2d:3e:72:f4:9b:bd:0f:ec:63:
c7:4a:ea:35:89:22:33:a9:40:72:17:45:5f:37:49:
e5:93:0f:38:bb:82:50:f3:2c:ec:2d:fc:53:59:6a:
f0:a1:90:97:1a:70:0e:00:51:2b:dc:8c:9d:f8:cb:
0c:5f:9f:16:28:7d:a2:ec:b9:54:b8:b9:2c:9d:75:
45:8e:33:f3:39:00:01:f8:f9:79:fb:46:a6:57:94:
f3:9a:1d:e8:3f:cf:70:e2:fd:63:b2:3a:3a:c2:c3:
f1:ae:ad:b4:7c:38:41:69:b9:99:f9:b1:6f:53:52:
11:94:81:15:46:d0:fc:76:db:2b:94:b7:44:0e:08:
87:01:17:cb:35:f6:cc:fd:db:f1:d1:4c:39:e9:42:
2f:0a:d1:a4:0b:e0:25:0a:77:63:1a:0d:1e:51:03:
87:3e:2d:23:bf:89:a3:13:8d:01:9c:df:7d:4a:e2:
c6:2a:21:61:77:a4:c8:a9:31:0a:dd:62:7b:86:4a:
84:37:76:16:9a:9e:d0:55:b0:51:23:ff:2b:93:c8:
a7:61:8f:76:9a:a7:18:db:16:68:b4:fe:f0:20:c3:
6b:c9:4e:a6:54:85:b8:9a:bd:56:2a:2c:c1:e6:fa:
22:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D2:7F:F1:A5:7E:51:E5:3B:F4:2E:95:07:0F:1E:74:AD:39:4C:AE
X509v3 Authority Key Identifier:
keyid:8A:F5:98:29:4B:6B:23:A1:39:ED:F5:4F:24:28:BC:61:96:51:AA:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivWYKUtrI6E57fVPJCi8YZZRqhc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:df:71:52:5c:5a:ad:c4:6b:c6:ab:9d:88:f8:d9:55:3b:e3:
7a:55:ef:e2:a1:3e:fd:77:a5:3d:be:99:14:b1:1f:7f:12:30:
17:b5:2f:b1:0e:7d:3e:ac:52:39:f4:db:5b:ae:ae:11:b3:5c:
1e:44:33:ba:ad:25:67:37:9a:b2:fc:51:90:dd:07:cb:d4:39:
5c:d2:d1:71:1e:58:f6:fe:cb:6f:1e:b2:1e:fe:c1:94:a8:f1:
0e:f7:76:72:a3:38:8f:8b:de:d4:84:40:b7:25:f3:d7:32:a1:
9b:bf:85:ba:f7:ea:92:eb:62:5f:9d:64:38:19:3c:fd:0a:a8:
15:84:17:3e:af:7e:9b:b2:a3:19:a4:af:cf:83:2c:1e:2b:b1:
5f:18:88:52:cd:54:82:2b:1c:22:ab:21:60:fa:ff:27:77:13:
55:3a:7a:5c:6b:43:d6:e0:7a:5e:1f:b0:a5:ea:87:e8:7e:4f:
76:28:99:c9:99:60:d5:ac:18:c7:50:0e:75:e6:f6:32:e3:96:
92:9c:8d:80:6f:56:72:50:2c:4d:91:a9:9c:ee:cd:58:9e:e9:
94:ec:5a:a3:69:b2:fd:88:b6:3d:f2:85:e5:dd:cc:ca:0f:f6:
79:1e:c1:d6:69:84:43:04:87:71:77:69:1e:20:b5:cb:13:20:
3c:66:57:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:35:31 2026 by rpki-client