
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
File: iTrFeQFBVhhq6vUDS6C0km-S43Q.mft (raw, json)
Hash identifier: fLGzGrQ/+Dj3gtdLPmnXzSDuqh8k0z3ByikBYBtnlhU=
Subject key identifier: 63:08:CC:E0:1B:6F:A8:DE:6B:39:3A:5A:09:25:69:14:08:7D:BD:AD
Authority key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74
Certificate issuer: /CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374
Certificate serial: 0170
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
Manifest number: 0167
Signing time: Thu 29 Oct 2026 05:40:57 +0000
Manifest this update: Thu 29 Oct 2026 05:40:57 +0000
Manifest next update: Thu 05 Nov 2026 05:40:57 +0000
Files and hashes: 1: iTrFeQFBVhhq6vUDS6C0km-S43Q.crl (hash: B2bhB3QTMZ1KJs4p8OnQv5hAxzH8D+tyrokF2IZ4QGg=)
2: FB729544B57F11EF8BDF3346C4F9AE02.roa (hash: lra+qhDRGNXUaND0a9KhE0KK0EaPsUI652BkcyFm2ic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl
rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 05:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E3C7, serialNumber=893AC579014156186AEAF5034BA0B4926F92E374
Validity
Not Before: Oct 29 05:40:57 2026 GMT
Not After : Nov 5 05:40:57 2026 GMT
Subject: CN=6ae2dc69-1377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:dc:27:2d:8b:8d:6a:df:2f:8d:22:31:32:
83:27:73:3f:b6:4e:3e:e1:32:d1:01:68:e8:bc:a0:
21:db:87:3c:79:29:80:6b:79:87:84:93:f7:18:ac:
bb:fc:55:3d:74:6d:f3:28:21:8b:e8:2d:ab:8a:f8:
9c:36:49:e3:74:72:27:55:2b:bb:6a:7f:9f:3c:9e:
d3:0a:56:fb:9c:b5:c9:99:6b:66:c4:0e:e1:2a:03:
69:36:53:b8:50:24:c6:aa:81:8a:22:83:6c:a2:0d:
2b:5c:4e:7f:7b:a3:8b:d1:fd:0c:69:9d:1c:6d:e6:
ec:cd:46:a8:a0:a9:f5:1d:e1:3e:e7:34:47:a8:6a:
35:8a:11:62:33:04:37:ce:4e:55:20:ec:5e:0e:cd:
56:7f:ae:06:ad:9a:7f:0f:5f:f5:ca:e0:53:39:69:
f8:3e:bd:c7:c5:32:59:e1:d9:af:62:c4:f3:53:77:
88:0c:8e:1f:d3:b2:f0:f4:2a:fa:04:e0:4b:83:f4:
2b:88:4b:30:5b:69:83:1b:7c:d0:2d:e2:3d:02:fc:
2c:00:65:86:17:2c:00:de:3c:f4:02:b4:13:bd:22:
51:46:7c:ef:1e:08:76:bc:0f:ca:da:0a:71:2d:f3:
b7:19:1e:f0:89:a8:9a:03:d6:77:44:9e:c4:3d:f4:
b6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:08:CC:E0:1B:6F:A8:DE:6B:39:3A:5A:09:25:69:14:08:7D:BD:AD
X509v3 Authority Key Identifier:
keyid:89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:dc:66:a2:dc:e5:87:ec:9e:2b:2c:d1:db:f7:15:f7:7f:9d:
26:1d:15:42:55:00:77:42:75:1a:6a:3f:5f:3f:e3:9a:6d:34:
55:a3:e0:26:9b:40:e3:00:84:b1:12:e2:a8:9c:64:c9:dc:b1:
24:5a:dc:5e:81:3d:25:45:08:7f:96:ed:ca:f5:a4:2f:c4:f0:
9b:8c:bc:77:89:11:a2:8e:ae:66:cb:2d:64:d9:21:13:7b:06:
24:91:a8:16:34:98:d3:c3:02:66:78:3e:86:cc:9d:81:31:71:
8a:07:e7:56:ac:8c:28:74:38:dc:1f:7d:65:1f:f0:f0:42:70:
24:bd:06:64:82:f6:a1:bc:3e:a5:f3:fd:02:1c:12:fb:00:e2:
80:eb:a9:7d:4d:0b:70:c5:c4:79:c7:95:de:45:15:6b:68:bb:
81:9e:45:02:11:9e:95:e3:a6:70:aa:bd:21:a7:d7:25:cb:5b:
97:c9:f8:41:8c:c7:b1:ba:c6:ff:d0:30:82:57:05:d2:0a:0b:
f0:4a:10:82:a6:80:41:77:12:ef:8f:5a:78:c0:12:34:58:8d:
2d:64:69:0a:cb:9a:82:86:2c:95:ec:3f:f7:95:8e:47:0c:d8:
fc:0c:de:c5:dd:9a:b2:a2:c9:a5:f4:ab:41:61:ed:bc:ae:ba:
ee:43:58:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkUzQzcxMTAvBgNVBAUTKDg5M0FDNTc5MDE0MTU2MTg2QUVBRjUwMzRCQTBCNDky
NkY5MkUzNzQwHhcNMjYxMDI5MDU0MDU3WhcNMjYxMTA1MDU0MDU3WjAYMRYwFAYD
VQQDEw02YWUyZGM2OS0xMzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAymncJy2LjWrfL40iMTKDJ3M/tk4+4TLRAWjovKAh24c8eSmAa3mHhJP3GKy7
/FU9dG3zKCGL6C2rivicNknjdHInVSu7an+fPJ7TClb7nLXJmWtmxA7hKgNpNlO4
UCTGqoGKIoNsog0rXE5/e6OL0f0MaZ0cbebszUaooKn1HeE+5zRHqGo1ihFiMwQ3
zk5VIOxeDs1Wf64GrZp/D1/1yuBTOWn4Pr3HxTJZ4dmvYsTzU3eIDI4f07Lw9Cr6
BOBLg/QriEswW2mDG3zQLeI9AvwsAGWGFywA3jz0ArQTvSJRRnzvHgh2vA/K2gpx
LfO3GR7wiaiaA9Z3RJ7EPfS2gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGMIzOAb
b6jeazk6WgklaRQIfb2tMB8GA1UdIwQYMBaAFIk6xXkBQVYYaur1A0ugtJJvkuN0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTNDNy84NjU4ODdCNkIy
NjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9pVHJGZVFGQlZoaHE2dlVEUzZDMGttLVM0
M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lUckZlUUZCVmhocTZ2VURTNkMwa20tUzQzUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTNDNy84NjU4ODdCNkIyNjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9pVHJGZVFGQlZo
aHE2dlVEUzZDMGttLVM0M1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA0Nxmotzlh+yeKyzR2/cV93+dJh0VQlUAd0J1Gmo/Xz/jmm00VaPgJptA4wCE
sRLiqJxkydyxJFrcXoE9JUUIf5btyvWkL8Twm4y8d4kRoo6uZsstZNkhE3sGJJGo
FjSY08MCZng+hsydgTFxigfnVqyMKHQ43B99ZR/w8EJwJL0GZIL2obw+pfP9AhwS
+wDigOupfU0LcMXEeceV3kUVa2i7gZ5FAhGeleOmcKq9IafXJctbl8n4QYzHsbrG
/9AwglcF0goL8EoQgqaAQXcS749aeMASNFiNLWRpCsuagoYslew/95WORwzY/Aze
xd2asqLJpfSrQWHtvK667kNY3w==
-----END CERTIFICATE-----
Generated at Fri Oct 30 04:09:48 2026 by rpki-client