
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
File: It6TcViumN6iIR-bvJp10O0NRDY.mft (raw, json)
Hash identifier: pMIQR58rmeZLEVGW7KeV8QmB8UsOgd6IbrL0DBdONe0=
Subject key identifier: 18:27:2A:93:6A:75:47:29:38:9D:EC:16:2F:EE:A0:D9:4C:21:1C:87
Authority key identifier: 22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36
Certificate issuer: /CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436
Certificate serial: 0167
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
Manifest number: 0167
Signing time: Thu 23 Jul 2026 06:25:35 +0000
Manifest this update: Thu 23 Jul 2026 06:25:34 +0000
Manifest next update: Thu 30 Jul 2026 06:25:34 +0000
Files and hashes: 1: It6TcViumN6iIR-bvJp10O0NRDY.crl (hash: tP48erIJwTLwas7oVqaQpP0+1kdHYCw1lNOS6GOQ4Ag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl
rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:25:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359 (0x167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189B41, serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436
Validity
Not Before: Jul 23 06:25:34 2026 GMT
Not After : Jul 30 06:25:34 2026 GMT
Subject: CN=6a61b3df-44aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:43:a0:86:d7:ce:6a:bf:13:25:28:4c:f7:
3b:c0:1a:71:8d:3c:bc:41:64:0d:8f:01:dc:12:08:
c2:1d:89:d9:02:6d:ee:3b:68:bb:de:e1:2d:5c:53:
6e:fe:dd:71:3d:a7:af:77:22:6b:67:71:08:f4:5b:
e7:18:d5:cf:fa:a5:df:28:1d:30:6a:77:20:bd:80:
fa:96:1c:0b:da:89:56:69:72:59:83:03:5c:3a:c0:
08:ae:32:83:9d:bb:51:3c:4d:12:a0:4f:52:62:1c:
04:dc:fa:7f:9d:bd:80:fa:c9:4a:35:b4:45:cd:53:
78:fa:a6:66:a6:da:a0:78:28:9b:d5:ab:d6:1e:b8:
6d:60:2b:66:c1:53:9d:c4:06:dc:3d:9c:66:ed:f2:
09:57:f1:b1:ec:56:c4:9f:c0:de:8f:1b:d3:16:96:
d4:01:a3:86:ba:e1:42:73:e0:be:59:d7:17:0f:1e:
6b:e8:11:9b:4d:26:8f:68:09:e0:24:65:db:84:29:
06:3d:7c:95:40:07:ab:0b:ef:9a:39:ed:d0:86:ee:
6d:9b:f5:a9:21:c3:6a:60:df:04:df:4a:70:49:81:
2d:6f:01:df:a4:03:3d:5f:37:ef:f6:13:f0:4b:7c:
82:56:97:84:dd:8c:db:93:37:40:a3:a2:2b:57:4a:
b5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:27:2A:93:6A:75:47:29:38:9D:EC:16:2F:EE:A0:D9:4C:21:1C:87
X509v3 Authority Key Identifier:
keyid:22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:93:ef:8c:64:73:1d:0f:93:ac:4b:bd:67:fb:5a:3a:3d:f8:
98:2e:26:3d:bc:ae:ed:ca:2d:ff:6b:31:0e:cb:1f:ab:b4:38:
59:43:32:6f:f9:81:a5:66:08:72:32:7c:71:40:f3:c0:94:7d:
7a:cc:1d:03:6e:9b:ee:c9:c4:ff:c6:1b:93:3f:73:fb:ab:36:
c9:c2:b7:36:f2:4a:8b:ac:bd:2b:b5:59:20:bf:26:10:6d:5c:
b1:e3:ab:50:36:a0:50:b5:9e:ca:65:e3:a7:35:07:b7:2e:10:
78:06:81:47:d3:5e:22:a0:ab:27:38:82:a6:9f:a8:c5:68:ff:
38:0d:28:c6:aa:86:11:b0:b5:1e:2b:54:0b:57:8f:e6:27:d3:
cc:e3:b1:46:9c:cf:5f:0b:cd:55:70:54:c6:30:b8:05:55:8e:
90:c6:8d:6f:a3:9c:51:64:0e:6a:be:96:f9:a0:df:8f:e1:4a:
37:25:1a:b8:f0:fa:e0:b5:a2:03:ca:be:76:f3:04:4d:6f:35:
03:b6:18:a5:71:19:2b:8a:20:64:d1:06:bc:49:4e:05:b2:43:
1e:76:34:f9:7d:cc:ba:72:b6:c6:4a:4a:94:fd:65:06:4f:2a:
ee:f7:c4:1d:da:7a:f4:28:4d:09:e4:53:f4:8f:3c:ec:2e:d1:
0f:c6:ae:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:36:27 2026 by rpki-client