
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft
File: iTEhgF-UFH033MbXS2N4Rvcjl8U.mft (raw, json)
Hash identifier: wMxPKzumDcE/NlXeEF5UxFxze5IVzrheYkRoi09WfEo=
Subject key identifier: 58:BE:E1:58:33:88:40:97:B0:79:14:75:2C:8C:2F:07:49:D6:20:C1
Authority key identifier: 89:31:21:80:5F:94:14:7D:37:DC:C6:D7:4B:63:78:46:F7:23:97:C5
Certificate issuer: /CN=A917E00F/serialNumber=893121805F94147D37DCC6D74B637846F72397C5
Certificate serial: 062B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft
Manifest number: 0804
Signing time: Wed 22 Jul 2026 23:29:40 +0000
Manifest this update: Wed 22 Jul 2026 23:29:40 +0000
Manifest next update: Wed 29 Jul 2026 23:29:40 +0000
Files and hashes: 1: iTEhgF-UFH033MbXS2N4Rvcjl8U.crl (hash: ITo/St9BYxalfHQ+1vO9Hlriqe/j86DWUKm8vypGFTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.crl
rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1579 (0x62b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E00F, serialNumber=893121805F94147D37DCC6D74B637846F72397C5
Validity
Not Before: Jul 22 23:29:40 2026 GMT
Not After : Jul 29 23:29:40 2026 GMT
Subject: CN=6a615264-2dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:af:27:98:da:e4:b9:c8:d3:84:a9:83:aa:ec:
a7:42:e6:d6:f3:0b:56:02:56:49:43:8a:1e:7c:24:
33:d4:ab:94:d9:4d:f0:65:93:89:4e:d4:fb:b5:96:
7b:18:8f:8d:a4:7e:ad:fe:1e:93:3d:70:eb:f5:67:
1b:b8:33:d9:84:86:fd:41:0b:ac:2f:21:c6:2b:d2:
98:da:13:10:56:9f:91:db:62:7c:6a:c7:e7:c3:c5:
a8:18:5d:69:80:44:37:bf:12:a3:cf:ab:8a:ba:60:
55:f6:09:83:c1:c2:84:f4:f9:da:23:67:66:a2:21:
42:f7:64:65:5f:4e:47:9a:32:d9:92:bc:ca:8e:6c:
61:84:dd:44:17:29:c6:f2:f9:7e:c4:b4:e4:d5:05:
16:98:8b:eb:d8:99:0d:ed:dd:f7:a4:29:af:4e:98:
d4:56:6d:28:cf:d8:d4:c4:52:7f:0d:94:6e:26:ef:
78:08:97:d0:52:67:77:71:6f:88:34:c2:74:e4:ee:
b4:ab:16:24:d9:6d:4d:ec:48:e5:d0:ec:0a:2a:e3:
df:ec:bf:c4:b2:b4:8d:33:a0:4d:0a:a2:49:9e:1b:
ef:cd:16:34:39:8c:88:ce:37:a8:33:81:98:b7:65:
87:48:10:70:dd:23:c2:20:0b:5c:e6:42:af:ef:70:
20:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BE:E1:58:33:88:40:97:B0:79:14:75:2C:8C:2F:07:49:D6:20:C1
X509v3 Authority Key Identifier:
keyid:89:31:21:80:5F:94:14:7D:37:DC:C6:D7:4B:63:78:46:F7:23:97:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:7c:d9:56:d7:27:07:3c:23:1c:82:f6:18:5d:c9:a5:c1:58:
68:49:6a:d4:81:14:d2:81:57:d7:73:56:84:c0:e2:26:ef:40:
57:a3:62:3a:67:7a:7a:fa:9b:b8:c0:79:bb:fa:f4:1b:21:8d:
3f:ad:5d:a8:5f:00:48:b8:01:b3:9d:e6:05:96:d7:45:85:85:
d5:ef:d7:f0:03:73:44:cb:61:3c:83:bb:85:9a:f0:3d:4e:97:
59:6d:81:20:87:a2:b0:90:43:cf:c2:20:fd:15:02:19:49:6c:
08:47:df:c5:cb:59:1e:fb:64:73:95:12:a3:01:1c:5b:77:4c:
da:ca:16:eb:b3:d3:ef:f5:60:20:15:a0:ba:7f:98:9e:32:a0:
d4:cc:69:c3:6a:23:ba:b4:36:39:2b:70:0b:3a:bb:fa:23:a7:
b1:9c:c3:e0:c3:7f:63:5c:22:cf:f7:a1:1d:b5:e6:7d:e5:67:
0e:81:ee:fd:6c:d8:74:f2:8a:43:29:e3:97:b0:b3:68:cb:4c:
91:64:32:f2:bb:05:cd:01:4a:b6:2d:64:1c:c2:68:73:a4:03:
19:93:d3:12:ab:b6:5b:6c:43:93:5e:4d:22:b5:a1:f4:18:61:
f9:a6:6f:22:79:21:d7:bb:78:c0:12:73:e4:c6:dc:75:96:48:
ae:4a:0b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:04:06 2026 by rpki-client