
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft
File: ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft (raw, json)
Hash identifier: eQ7vjmt7u8twLY3Q5V4HPS/kV/nIpj75aN7KfoSDvjU=
Subject key identifier: D9:D7:71:67:0B:35:DF:6A:C9:41:ED:3F:B4:A6:A0:2A:2E:6E:3B:50
Authority key identifier: 21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC
Certificate issuer: /CN=A912382E/serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC
Certificate serial: 1998
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft
Manifest number: 198D
Signing time: Fri 04 Sep 2026 16:22:36 +0000
Manifest this update: Fri 04 Sep 2026 16:22:36 +0000
Manifest next update: Fri 11 Sep 2026 16:22:36 +0000
Files and hashes: 1: ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl (hash: fRJg7gkYa6pW0wSqsgyU0lLhJ1Vlld/pW2FOjMo0Pss=)
2: BD843CCE984011E79A256C82C4F9AE02.roa (hash: jJwP90lV+q6WXhwVY0B4Efvs4u3oObXh+KWbb3d4U00=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl
rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 16:22:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6552 (0x1998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912382E, serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC
Validity
Not Before: Sep 4 16:22:36 2026 GMT
Not After : Sep 11 16:22:36 2026 GMT
Subject: CN=6a9af04c-fe45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e1:e1:42:b0:e5:2a:16:65:36:85:a7:41:43:
84:fb:a8:8d:78:f4:71:a5:1e:f1:ca:c5:09:72:16:
31:bb:96:4f:49:75:52:1e:7b:3f:e6:d2:d2:7e:9e:
29:fa:e6:65:4f:43:cf:b7:c3:02:d8:bd:9b:bb:42:
3f:22:fc:11:71:8f:c0:09:e3:e6:08:e7:67:1f:13:
e2:56:1b:20:78:81:f5:b7:5f:02:1c:9b:aa:46:2d:
20:d9:34:83:66:7e:0f:e7:d8:ac:45:4c:7b:6a:50:
e5:82:d9:67:1e:b1:58:1e:03:df:14:d1:ed:7a:e3:
9e:5d:63:31:94:91:96:33:59:0a:df:5f:05:cf:f1:
d8:6e:1c:b1:da:5d:75:15:a7:fb:0e:b1:2e:01:a1:
0d:ef:42:18:93:4e:70:a3:b7:2e:c5:f1:bd:42:c9:
8a:11:8e:c6:db:02:8f:ee:ec:ed:ea:7d:11:ca:62:
20:05:2a:6b:86:f8:a5:48:b8:cb:d0:18:dd:e8:e2:
a0:97:e2:89:63:2a:e7:4f:d7:3b:4d:fd:84:ad:c9:
85:37:5d:35:48:3c:f3:7a:30:a2:44:3e:78:76:6b:
34:63:0d:2b:d0:a2:e5:97:c7:df:ed:9f:2f:dd:92:
64:cf:c3:24:b9:c8:e0:9b:65:89:f2:c4:66:a2:f9:
af:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D7:71:67:0B:35:DF:6A:C9:41:ED:3F:B4:A6:A0:2A:2E:6E:3B:50
X509v3 Authority Key Identifier:
keyid:21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:44:6a:ce:21:3e:ae:f6:76:71:df:b6:2a:26:f9:85:3f:4f:
0a:29:8c:ee:a8:74:44:62:85:23:88:60:aa:51:5d:a3:3a:b4:
fc:04:1f:1a:77:a3:7b:b1:7d:34:b0:00:fb:04:6f:9a:b4:ac:
01:0c:ee:2a:54:ab:c7:10:5d:89:48:c7:db:06:46:4b:7f:68:
76:a9:71:6f:14:9b:96:28:3c:fa:fd:f5:df:be:37:4d:ed:31:
70:56:7d:f0:f5:3d:29:0d:da:f2:7c:a5:0a:f3:59:7e:28:bb:
be:39:33:a3:96:22:c0:75:dd:00:af:7a:5a:ec:49:8b:04:64:
bd:67:dd:d4:0c:57:0d:39:f9:bb:cf:e9:25:73:29:68:3c:7c:
f9:8d:93:fc:ab:d0:f1:dc:8b:c2:c8:ac:b2:30:c4:20:f4:ab:
5b:17:a4:99:0a:ff:35:6e:cd:4f:62:0f:21:51:d2:c9:4c:ac:
c2:02:4b:02:27:13:76:55:e2:c2:9e:b4:79:31:dd:5d:a1:6d:
92:b4:b6:0d:9a:f1:7e:4f:1d:7e:3a:16:fc:84:20:ca:7c:23:
a7:66:62:e2:80:4f:f8:76:1e:d4:be:28:d0:b6:4a:5c:35:22:
f5:77:0c:e1:d0:ff:91:51:f8:4c:b1:bf:21:1d:45:07:18:76:
bb:af:27:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:19:40 2026 by rpki-client