
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
File: IUKTP75ufF-3Z6hqXiHdYBeOo50.mft (raw, json)
Hash identifier: 2QS9UjDW4vlpMleHbq1taccGKYsFz61qcaEDwl+0CrQ=
Subject key identifier: 14:60:18:95:4D:6E:26:37:83:30:6E:BC:94:ED:19:CA:F6:A8:FC:06
Authority key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D
Certificate issuer: /CN=A9168D00/serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
Certificate serial: AD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
Manifest number: AB
Signing time: Sun 31 May 2026 22:59:37 +0000
Manifest this update: Sun 31 May 2026 22:59:37 +0000
Manifest next update: Sun 07 Jun 2026 22:59:37 +0000
Files and hashes: 1: IUKTP75ufF-3Z6hqXiHdYBeOo50.crl (hash: 9nbdsdkLJ6mrlKDHyfXKX8cOcQfY1QLv6ASkzjKfPN0=)
2: E92F49E661EA11F087750C23C4F9AE02.roa (hash: I1AL4lbWGPIfV3u+8QvI9wVl+esLP3oBbI38pSI4a6c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl
rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 22:59:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
Validity
Not Before: May 31 22:59:37 2026 GMT
Not After : Jun 7 22:59:37 2026 GMT
Subject: CN=6a1cbd59-0426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:c5:89:b3:39:f5:11:cd:bf:36:86:f1:d1:
c9:1b:9a:af:71:f1:64:af:d2:ec:ac:ae:ef:29:d3:
2c:96:a1:ce:70:5f:8f:da:6a:cd:00:7e:6a:13:5e:
41:49:0c:48:14:9c:da:19:ad:ad:f9:f4:3a:8f:14:
5c:68:3a:bc:96:83:d0:00:fd:3b:7a:2d:15:2a:96:
17:4d:22:b2:12:26:36:f5:55:3c:4d:19:21:e6:fc:
9b:5a:84:ab:b8:92:c1:39:94:9c:16:fe:5e:14:22:
87:0c:12:c5:21:b2:2a:53:bd:3f:36:eb:b8:bd:3b:
68:41:08:f7:63:b6:34:6c:ea:ac:33:ae:4b:99:b7:
08:c7:77:85:2f:ef:f0:49:17:a9:0a:5f:d6:d4:aa:
e0:94:69:a0:09:d1:9c:68:ad:16:50:0d:c8:fe:70:
e7:03:4b:ca:8b:9b:71:55:c6:f8:3e:25:66:28:ee:
d0:68:c2:e3:69:aa:97:ba:31:e1:35:a9:a4:98:92:
ff:50:ac:c0:da:c1:51:d4:44:f4:70:fe:48:14:64:
36:9b:0f:77:06:71:12:20:de:d2:57:29:a7:4c:80:
39:1d:57:b9:65:31:34:0f:70:ab:06:6a:6f:b7:7a:
3b:22:73:d5:d8:ab:f3:b7:c5:40:e4:86:8a:38:fa:
ab:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:60:18:95:4D:6E:26:37:83:30:6E:BC:94:ED:19:CA:F6:A8:FC:06
X509v3 Authority Key Identifier:
keyid:21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:57:68:ee:d5:c2:15:03:72:71:ad:fc:89:1f:d9:60:03:bd:
d5:b5:d1:0b:3a:50:b1:33:b2:53:b8:83:bd:61:c5:4e:ca:9f:
7f:fa:c9:5e:47:7a:ea:ba:5c:5d:5a:0f:72:2d:67:38:8c:bc:
e6:16:22:e0:27:34:36:e8:0b:a7:c8:40:dc:57:28:7e:b5:90:
70:6d:bb:c9:c5:1c:89:f6:ca:06:1a:04:09:f2:58:40:c8:34:
18:f5:58:f3:3f:0b:73:c0:7b:d0:c8:b9:9a:14:f5:8c:b7:ce:
1b:c3:18:64:8f:4a:ae:d5:53:21:c8:f4:c5:5b:ed:8c:48:4b:
c2:78:58:58:ba:8d:94:9c:54:43:a9:77:71:8a:4f:81:e7:a8:
33:89:24:4c:dc:33:80:b7:4a:1c:70:27:ce:b8:ae:14:4e:a7:
54:41:25:d8:a4:bc:c8:83:1f:4a:45:80:d2:86:ae:71:d4:71:
d9:cf:ea:93:37:29:fd:30:b5:e1:2b:0e:61:21:f1:89:9c:54:
d2:5c:08:c4:5d:1d:da:74:86:c1:92:c9:96:22:d7:93:3d:aa:
ff:0d:24:de:13:4b:42:fc:69:f3:a3:78:22:dd:31:24:22:8b:
a7:4e:43:7b:76:0d:f6:22:e0:5f:56:5b:29:cf:c1:d4:8f:16:
e4:70:63:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:39 2026 by rpki-client