
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
File: It6TcViumN6iIR-bvJp10O0NRDY.mft (raw, json)
Hash identifier: V0m1EB1XzSKRNssuowSWdzICoebT4lsgw2ET0/cOTno=
Subject key identifier: F5:EE:8D:50:D3:C0:57:1C:CF:08:32:FD:8E:69:9F:4A:E7:C5:0E:22
Authority key identifier: 22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36
Certificate issuer: /CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436
Certificate serial: 018A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
Manifest number: 018A
Signing time: Tue 29 Sep 2026 04:57:04 +0000
Manifest this update: Tue 29 Sep 2026 04:57:04 +0000
Manifest next update: Tue 06 Oct 2026 04:57:04 +0000
Files and hashes: 1: It6TcViumN6iIR-bvJp10O0NRDY.crl (hash: cUVHi6KBmLwoGh5lT9NOOajBSwgnn9MbgPIaS4CeHOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl
rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 04:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189B41, serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436
Validity
Not Before: Sep 29 04:57:04 2026 GMT
Not After : Oct 6 04:57:04 2026 GMT
Subject: CN=6abb4520-50b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:61:2c:e2:41:02:9d:f8:a1:4a:ac:d8:27:
b2:70:fd:33:15:67:4c:f4:2d:82:fa:be:48:c5:ec:
47:57:cc:7b:bc:1b:47:0e:d7:f8:33:03:04:63:c1:
bf:ca:67:4b:bc:cd:02:cd:de:f7:6a:06:d4:c9:46:
b8:9d:c0:27:ee:6d:e0:24:ab:27:33:42:dc:b1:21:
03:31:26:61:9d:12:f6:b5:0f:79:ec:ab:97:d2:45:
72:12:41:10:02:4d:31:14:6e:67:2b:ca:a0:67:82:
af:5b:ff:0f:76:35:e2:60:02:21:37:e2:66:f7:53:
e8:dd:05:37:e7:12:4a:0a:e7:f3:34:ed:25:22:0c:
59:65:53:32:6c:b7:f8:ca:fc:3e:52:28:74:98:03:
55:b2:6e:71:54:6f:ad:11:ea:f0:66:a9:44:0a:49:
43:ad:50:aa:c6:80:37:cb:b3:81:46:c4:f7:cf:1c:
96:43:d9:16:c4:ba:87:31:cd:df:da:b9:10:c4:45:
14:2b:f2:14:6b:63:87:a0:93:73:e8:6f:2f:e8:21:
fa:eb:e5:b6:31:64:b0:14:47:12:7f:37:32:01:c5:
52:6f:b9:d2:02:a7:72:4c:3d:56:54:8f:61:45:cf:
a7:d4:9e:79:79:bb:33:95:bb:20:b1:a8:ff:5f:7a:
96:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EE:8D:50:D3:C0:57:1C:CF:08:32:FD:8E:69:9F:4A:E7:C5:0E:22
X509v3 Authority Key Identifier:
keyid:22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:36:fc:6b:b7:9d:5d:0f:6f:e5:9a:5a:b8:8c:b4:b6:51:93:
0f:7e:25:07:c3:b0:83:9b:fc:f9:08:b3:da:5d:a4:42:01:8b:
59:3d:fd:41:30:ed:b8:19:d1:1f:bc:d7:46:a8:cd:e6:15:7b:
57:76:52:54:26:bb:3a:de:bd:c8:a7:0c:a1:38:86:2e:95:52:
71:23:a9:4d:ce:a4:e0:9b:f3:a0:5c:37:96:6c:9e:2f:23:98:
ef:f5:5e:ff:80:f6:5f:a8:40:3e:43:71:d4:88:99:b9:ea:57:
cc:ec:40:c5:42:ef:4a:9e:6f:05:c4:17:fe:f4:ca:c9:e4:e0:
d5:e8:50:ff:9a:fa:ca:fa:60:52:80:ab:c2:b6:38:20:64:5f:
b2:4c:ce:1b:e3:61:85:9e:f1:a6:8e:55:e6:b6:1e:23:93:75:
1d:7d:a0:96:e7:1c:8f:fe:59:29:5e:fd:ba:1d:05:1b:c4:29:
d9:b3:9f:3c:be:d4:2f:02:e0:a1:87:d5:10:2b:78:88:11:3d:
9f:94:26:b4:1b:13:1c:f6:ca:64:7f:15:c7:b6:66:fe:94:9c:
6f:8d:2e:cb:6a:ff:34:0e:ee:26:84:61:34:3b:47:aa:41:e8:
74:7a:ca:cc:6b:97:f2:83:1a:87:48:5f:04:56:cc:e3:c1:f1:
28:f7:16:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:23:06 2026 by rpki-client