
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft
File: iTEhgF-UFH033MbXS2N4Rvcjl8U.mft (raw, json)
Hash identifier: FKnr11ZrAigq6WOEUVAO963mjJcguLSXDZOyKHc7ENY=
Subject key identifier: 5A:A7:3D:1F:76:CA:2F:F4:D3:73:87:8D:EF:CA:17:A6:89:F1:83:93
Authority key identifier: 89:31:21:80:5F:94:14:7D:37:DC:C6:D7:4B:63:78:46:F7:23:97:C5
Certificate issuer: /CN=A917E00F/serialNumber=893121805F94147D37DCC6D74B637846F72397C5
Certificate serial: 0651
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft
Manifest number: 0851
Signing time: Fri 02 Oct 2026 22:57:10 +0000
Manifest this update: Fri 02 Oct 2026 22:57:09 +0000
Manifest next update: Fri 09 Oct 2026 22:57:09 +0000
Files and hashes: 1: iTEhgF-UFH033MbXS2N4Rvcjl8U.crl (hash: 6XrXabiJOwqypoe5qOsfl56Ingw0f/OGQtm2OmTmqec=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.crl
rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 22:57:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1617 (0x651)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E00F, serialNumber=893121805F94147D37DCC6D74B637846F72397C5
Validity
Not Before: Oct 2 22:57:09 2026 GMT
Not After : Oct 9 22:57:09 2026 GMT
Subject: CN=6ac036c5-6a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:43:3d:8c:b8:e2:c8:e2:ca:27:14:30:a4:04:
66:6e:8b:74:2f:62:b8:39:81:f0:6a:d1:1c:0d:db:
03:1c:ed:fb:63:92:2e:f3:ef:f7:6a:27:53:97:91:
27:9f:2a:9b:7a:a8:ad:24:e4:3a:36:91:3f:48:dd:
58:26:5f:a6:a3:78:cb:76:5a:95:81:fd:73:4c:b0:
88:39:f7:1b:47:3f:20:88:30:06:6a:3d:7d:d6:6b:
c3:97:00:39:4d:f5:ad:18:61:cf:80:86:86:53:01:
4a:f3:cd:c2:13:b4:c9:f1:6b:e7:4a:4c:a6:b2:93:
25:de:95:6e:c0:5a:9b:52:0e:a0:68:3d:39:f1:06:
25:b5:d0:f2:e3:ca:bd:a5:28:63:19:f5:95:f2:e0:
69:31:c2:d3:50:9d:da:74:e4:40:9c:c4:c6:26:57:
d4:9c:ac:e8:d9:99:94:bd:f2:0d:f0:ca:18:e6:4e:
05:ec:2f:22:66:35:e3:47:21:c9:18:f8:bd:2f:3e:
23:4c:d2:8e:3b:5d:65:99:bf:da:39:1d:79:ad:ff:
d1:6b:97:68:98:85:2f:7b:cc:fa:6a:60:fa:c7:f4:
16:c0:1f:65:81:df:28:11:a3:69:fa:94:16:f9:50:
26:be:7f:ab:58:ea:89:96:88:49:7a:d9:98:f1:14:
c4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A7:3D:1F:76:CA:2F:F4:D3:73:87:8D:EF:CA:17:A6:89:F1:83:93
X509v3 Authority Key Identifier:
keyid:89:31:21:80:5F:94:14:7D:37:DC:C6:D7:4B:63:78:46:F7:23:97:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:be:76:7b:77:88:f9:11:af:16:91:ac:83:96:36:41:34:19:
3f:fa:9b:c6:5b:a4:c7:c8:c5:99:4e:31:a7:c2:90:47:7a:d2:
60:49:ba:5b:70:35:72:ab:76:85:d4:1a:14:13:9f:26:8e:ed:
75:55:fc:d9:97:4d:35:96:c0:ab:07:34:0d:75:33:2c:e0:08:
2c:41:d7:e0:16:35:86:69:49:00:28:37:66:7a:5d:8f:e8:b5:
af:0d:05:be:27:ea:44:2a:23:49:0e:ca:fb:55:59:03:9f:31:
31:c6:b6:71:97:64:13:15:de:6a:17:3c:e1:e1:dd:cc:be:3b:
61:20:ca:30:3f:ef:8a:66:64:90:3f:d6:ef:1a:bc:10:61:b0:
b2:41:b8:6a:69:75:47:bf:2c:52:05:f1:8a:b5:c0:a8:9f:33:
58:f8:e8:73:70:b9:98:de:82:2b:81:c3:90:76:e8:0a:e7:2a:
12:e5:ee:3b:37:b2:c2:64:bc:6e:91:a6:9d:46:43:bc:ce:90:
51:50:0a:c4:bb:69:dd:12:99:db:04:a4:7f:28:eb:99:25:eb:
9d:7c:b9:0f:c2:6a:d7:58:e3:ff:ba:bd:e3:52:3a:0f:bc:bd:
f2:02:96:fc:d5:0f:38:70:59:13:cd:c2:dd:d5:5a:97:7b:12:
b9:25:30:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:36:01 2026 by rpki-client