
$ rpki-client -vvf rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft
File: ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft (raw, json)
Hash identifier: njdARB85PdaLtmo18MeTLKK2r10HclpnYfeBh743zqk=
Subject key identifier: E1:62:26:80:00:D6:3E:FC:9B:B2:24:3F:82:ED:F8:76:0B:A8:A8:42
Authority key identifier: 21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC
Certificate issuer: /CN=A912382E/serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC
Certificate serial: 197E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft
Manifest number: 1973
Signing time: Thu 16 Jul 2026 16:28:01 +0000
Manifest this update: Thu 16 Jul 2026 16:28:01 +0000
Manifest next update: Thu 23 Jul 2026 16:28:01 +0000
Files and hashes: 1: ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl (hash: Ig4ydqamSr4rXa1eamMGjwEmvfS4LrAK10OyD06PdM0=)
2: BD843CCE984011E79A256C82C4F9AE02.roa (hash: jJwP90lV+q6WXhwVY0B4Efvs4u3oObXh+KWbb3d4U00=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl
rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 16:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6526 (0x197e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912382E, serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC
Validity
Not Before: Jul 16 16:28:01 2026 GMT
Not After : Jul 23 16:28:01 2026 GMT
Subject: CN=6a590691-8c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e7:ea:0a:97:f6:f0:3c:0e:6a:a3:30:fb:45:
a8:c9:e3:b9:95:11:ca:22:4c:08:d1:55:52:6d:a2:
01:94:40:e1:d0:8b:9d:48:42:a5:0c:6f:46:3e:d6:
bf:e4:da:f7:0d:6b:3b:50:84:0b:7d:69:76:06:2f:
0d:a7:bf:41:08:58:75:be:41:51:ef:9d:ee:bd:a9:
31:72:1b:da:7d:55:bc:1a:49:c9:d4:c1:2d:96:00:
87:78:df:68:b1:ce:b7:05:53:e4:c3:09:47:89:9a:
0b:de:1f:b2:8c:dd:f0:76:de:b2:9d:5e:e1:67:5c:
f0:45:e7:df:ae:14:2c:44:05:a3:c6:39:71:71:d4:
ad:ef:17:3a:04:df:58:d0:b2:29:62:d1:7e:a7:b4:
94:67:95:99:bf:0e:ff:be:33:6c:36:14:63:a3:d4:
f7:bc:86:8b:15:53:19:38:c4:7e:4e:97:3c:51:96:
79:ba:31:0b:c4:30:7c:aa:da:2a:ca:5c:ca:be:84:
e0:7f:d3:3e:46:6f:e7:7b:fa:a4:51:fb:21:9c:0d:
71:0e:a4:d3:7b:5e:e5:ba:d7:e0:bd:c6:3f:1c:48:
6b:fb:2d:a3:23:a0:13:65:34:99:74:f0:55:44:be:
8a:f2:a2:23:7a:aa:47:cc:bd:60:31:9b:cc:cb:30:
db:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:62:26:80:00:D6:3E:FC:9B:B2:24:3F:82:ED:F8:76:0B:A8:A8:42
X509v3 Authority Key Identifier:
keyid:21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:20:d2:bc:0a:25:d6:20:37:b6:e0:e8:3f:6b:65:f8:1d:11:
ef:9c:7f:5f:10:3c:e4:06:ac:99:d5:d6:ef:86:74:55:97:3a:
bd:01:04:3e:22:f3:b7:1b:e3:37:97:80:9c:00:a6:df:7e:ec:
ec:64:92:c9:82:f6:54:14:89:21:4a:f9:30:42:25:f1:55:63:
e8:6c:6e:1f:6c:54:b9:85:79:9b:78:35:00:e9:07:e2:50:2c:
7c:57:6d:86:84:35:d5:fc:9d:71:b8:8b:91:8a:1c:ee:5c:dd:
80:47:46:4b:d5:ac:78:6a:4d:31:5d:e4:dd:e1:f5:32:52:33:
97:b5:2a:97:dc:89:0f:37:1f:b6:e8:f4:53:fc:6c:93:00:77:
24:39:c4:4e:1d:31:b0:aa:73:a8:ad:c3:e2:54:73:9f:7c:a9:
f3:4b:d2:c0:48:4f:66:2c:8b:d9:b8:b1:c1:ba:21:a1:a8:00:
e0:e0:ef:95:bb:6f:cf:d3:05:5d:3a:13:a2:00:b2:e7:51:88:
1c:0f:91:80:2a:1c:aa:f8:a7:6d:1c:73:84:1c:86:31:34:bc:
45:35:9d:aa:44:d2:8a:bd:0b:2c:ff:30:e9:3f:8a:22:32:a8:
fa:01:bb:0a:cb:72:39:1e:a7:c3:36:f7:c3:a6:ab:79:b5:f8:
46:4d:68:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:17:45 2026 by rpki-client