
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
File: IUKTP75ufF-3Z6hqXiHdYBeOo50.mft (raw, json)
Hash identifier: y9u/UhPDc2SQzWEw592n0MpxJvEQXR1Nn+RivzQ/RNg=
Subject key identifier: 1F:CC:36:E7:63:61:84:A2:4D:1B:6C:4F:02:81:29:4B:43:BA:DD:31
Authority key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D
Certificate issuer: /CN=A9168D00/serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
Manifest number: EF
Signing time: Thu 08 Oct 2026 22:20:26 +0000
Manifest this update: Thu 08 Oct 2026 22:20:26 +0000
Manifest next update: Thu 15 Oct 2026 22:20:26 +0000
Files and hashes: 1: IUKTP75ufF-3Z6hqXiHdYBeOo50.crl (hash: PTGfKzWKmO04MF7mYo0c85gy9wMOAiy6tAnJ4DO1SVA=)
2: E92F49E661EA11F087750C23C4F9AE02.roa (hash: TR3KMntthAwVhbNksuMzt3WXfXIJDm+0sJy4E3HFO4A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl
rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 22:20:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
Validity
Not Before: Oct 8 22:20:26 2026 GMT
Not After : Oct 15 22:20:26 2026 GMT
Subject: CN=6ac8172a-d0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:94:19:42:65:af:fd:00:3d:f3:6f:34:ab:81:
bd:de:39:81:38:56:29:52:f5:04:11:71:ee:0f:cd:
9e:d6:7d:e3:60:84:2c:9b:27:3a:96:9b:d6:8c:b8:
f1:b0:8b:2f:67:99:1a:12:cf:84:1b:cf:fa:5f:6b:
c9:a4:70:a9:f5:68:75:68:e4:0f:2f:9b:b2:37:75:
df:e1:3f:17:c5:d9:33:6c:c4:04:3e:84:5e:cb:db:
28:91:29:73:ba:07:78:5b:41:dd:c5:5e:1e:a5:a2:
76:c6:84:cc:3a:03:d7:f0:b7:00:af:b0:24:ef:c4:
64:5c:d0:91:bb:af:67:17:67:cc:a8:4d:06:19:cf:
83:fc:ed:8f:64:d9:d0:9a:1a:9b:ce:14:07:90:af:
77:b9:d7:f2:eb:06:5a:a3:46:43:5d:ad:08:64:94:
0b:79:51:35:e9:23:de:f0:4d:80:c5:b2:68:a9:79:
1b:88:ac:be:17:16:e4:38:41:b4:a8:ff:cb:34:b7:
d3:80:73:ec:1b:2a:77:00:b2:39:a9:2d:57:f7:a2:
88:60:c2:e3:78:30:f1:ef:66:14:f5:4a:b8:f7:91:
09:4a:19:65:5a:77:8c:b6:9d:09:ca:f0:a0:7c:be:
f1:66:14:47:3c:55:11:51:84:3c:03:c8:e1:f9:95:
2d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CC:36:E7:63:61:84:A2:4D:1B:6C:4F:02:81:29:4B:43:BA:DD:31
X509v3 Authority Key Identifier:
keyid:21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:c4:be:fe:b1:57:f9:f2:61:c3:2d:96:ed:fd:81:0b:7d:81:
37:98:4c:60:26:d1:45:4d:78:d7:02:89:87:ed:7b:e8:f0:48:
52:4d:45:fc:e2:60:d0:f6:7e:ed:cb:0f:e5:78:da:d9:1b:d1:
83:97:d0:ca:0d:5a:15:de:d6:59:c5:e5:b0:8e:67:2d:99:48:
28:53:a9:fa:2e:cc:f1:7f:78:de:7e:6e:1e:ff:da:3e:9a:99:
8d:5e:f8:8d:47:99:39:f3:0a:89:2e:b7:3c:65:80:6b:f9:39:
e3:a9:17:80:51:0d:59:f6:b8:6f:39:5a:68:8c:4a:dc:98:21:
d8:3a:b9:9a:58:30:51:e1:ef:91:bb:56:f3:88:9c:f8:92:f9:
b5:36:16:59:b4:85:1e:3a:92:18:a1:0b:80:2b:5c:7d:4e:b9:
f5:c3:86:fc:dc:3c:07:75:58:2a:50:a0:e4:77:eb:96:e1:1d:
a6:c8:74:ad:a1:b7:bd:11:3c:0f:86:ca:55:95:ea:f1:86:67:
2e:f6:fd:68:73:a5:a3:22:d1:23:72:57:2f:2f:b4:b8:d3:cd:
0e:05:53:0a:85:81:14:9f:a1:90:52:aa:7f:b1:5c:36:43:d7:
0d:20:71:34:e6:6d:e4:58:16:e5:5d:82:f0:0a:35:b5:47:d8:
c7:8f:90:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjhEMDAxMTAvBgNVBAUTKDIxNDI5MzNGQkU2RTdDNUZCNzY3QTg2QTVFMjFERDYw
MTc4RUEzOUQwHhcNMjYxMDA4MjIyMDI2WhcNMjYxMDE1MjIyMDI2WjAYMRYwFAYD
VQQDEw02YWM4MTcyYS1kMGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA05QZQmWv/QA98280q4G93jmBOFYpUvUEEXHuD82e1n3jYIQsmyc6lpvWjLjx
sIsvZ5kaEs+EG8/6X2vJpHCp9Wh1aOQPL5uyN3Xf4T8XxdkzbMQEPoRey9sokSlz
ugd4W0HdxV4epaJ2xoTMOgPX8LcAr7Ak78RkXNCRu69nF2fMqE0GGc+D/O2PZNnQ
mhqbzhQHkK93udfy6wZao0ZDXa0IZJQLeVE16SPe8E2AxbJoqXkbiKy+FxbkOEG0
qP/LNLfTgHPsGyp3ALI5qS1X96KIYMLjeDDx72YU9Uq495EJShllWneMtp0JyvCg
fL7xZhRHPFURUYQ8A8jh+ZUtJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/MNudj
YYSiTRtsTwKBKUtDut0xMB8GA1UdIwQYMBaAFCFCkz++bnxft2eoal4h3WAXjqOd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQwMC9GMUFGMTA1MjYx
REYxMUYwQTZGNzREN0ZDNEY5QUUwMi9JVUtUUDc1dWZGLTNaNmhxWGlIZFlCZU9v
NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0lVS1RQNzV1ZkYtM1o2aHFYaUhkWUJlT281MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OEQwMC9GMUFGMTA1MjYxREYxMUYwQTZGNzREN0ZDNEY5QUUwMi9JVUtUUDc1dWZG
LTNaNmhxWGlIZFlCZU9vNTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiMS+/rFX+fJhwy2W7f2BC32BN5hMYCbRRU141wKJh+176PBIUk1F/OJg0PZ+
7csP5Xja2RvRg5fQyg1aFd7WWcXlsI5nLZlIKFOp+i7M8X943n5uHv/aPpqZjV74
jUeZOfMKiS63PGWAa/k546kXgFENWfa4bzlaaIxK3Jgh2Dq5mlgwUeHvkbtW84ic
+JL5tTYWWbSFHjqSGKELgCtcfU659cOG/Nw8B3VYKlCg5HfrluEdpsh0raG3vRE8
D4bKVZXq8YZnLvb9aHOloyLRI3JXLy+0uNPNDgVTCoWBFJ+hkFKqf7FcNkPXDSBx
NOZt5FgW5V2C8Ao1tUfYx4+Q3Q==
-----END CERTIFICATE-----
Generated at Sat Oct 10 15:57:01 2026 by rpki-client