
$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
File: IdPtIffN68fQDxu3oJURuVze_iM.mft (raw, json)
Hash identifier: a2nshtjBqL66bolBE5Un3YtfqMQVVMVDosWFtFUdiMQ=
Subject key identifier: 25:95:B3:8E:73:0B:11:65:99:94:A7:DD:43:41:B7:CF:74:F3:F0:CF
Authority key identifier: 21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23
Certificate issuer: /CN=A917336A/serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23
Certificate serial: 018F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
Manifest number: 017F
Signing time: Wed 19 Aug 2026 05:15:38 +0000
Manifest this update: Wed 19 Aug 2026 05:15:38 +0000
Manifest next update: Wed 26 Aug 2026 05:15:38 +0000
Files and hashes: 1: IdPtIffN68fQDxu3oJURuVze_iM.crl (hash: e+U4g88goe90dWq2WKH8WEJJAvQ5wlVSg4ruN3QmvKc=)
2: 809F6BF2990511F090DACC2BC4F9AE02.roa (hash: ePh5F//jVgKgbKd9KhC0MLvbTZUoIXDojFlNTXr56Xo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl
rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 05:15:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917336A, serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23
Validity
Not Before: Aug 19 05:15:38 2026 GMT
Not After : Aug 26 05:15:38 2026 GMT
Subject: CN=6a853bfa-29ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:b2:77:be:82:fb:7e:cc:21:c2:73:bb:cb:
9c:d6:25:75:b3:a3:cc:0a:16:a9:b6:88:34:a1:f8:
b2:33:99:a3:3a:33:30:f2:28:d3:fa:fd:86:97:87:
f4:a2:2e:83:e3:54:91:52:ca:66:c1:76:b9:94:f6:
69:f2:fc:06:ee:55:d8:d5:ad:67:52:8d:c8:cb:1d:
8b:a2:d9:04:b9:f4:2d:e3:18:01:66:fd:9a:40:63:
65:3c:d2:ef:50:47:5e:c1:dc:90:30:04:96:a8:6b:
30:9b:cf:8a:1c:f4:5b:b5:03:ba:11:bf:ae:07:a6:
a7:dc:30:3a:54:aa:6f:3b:93:cb:81:2d:df:ed:cd:
9b:1a:8d:d4:9c:eb:96:0c:8e:fe:61:a9:ba:8a:33:
cc:97:b5:1b:33:7f:e7:2a:3f:21:cd:93:07:a1:49:
15:4a:8c:48:a9:2f:83:38:99:51:0b:51:0c:70:b4:
bb:30:9d:6c:d1:59:ff:43:68:e2:7d:09:a5:30:97:
fe:66:ff:3b:1b:49:d2:13:e2:6c:29:a6:cc:43:4d:
4c:c4:6e:07:f2:f5:de:d4:45:66:57:53:29:93:69:
b7:e5:90:f5:c6:a0:10:69:d2:45:44:2f:c0:14:a5:
f7:8a:fa:19:3f:83:40:da:2c:23:0f:29:1d:1e:dd:
55:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:95:B3:8E:73:0B:11:65:99:94:A7:DD:43:41:B7:CF:74:F3:F0:CF
X509v3 Authority Key Identifier:
keyid:21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:8f:ed:5a:52:3c:f1:c9:fc:e6:9d:6d:53:ed:76:2d:75:7b:
43:20:13:9c:97:cc:ae:af:24:c2:79:e1:b8:28:26:0e:2b:5a:
3d:d1:48:32:b9:5a:8e:9a:ef:13:b2:5a:cf:b7:7b:69:54:b5:
55:a9:c5:11:1b:ea:76:90:2d:99:d7:61:87:e7:88:21:1c:3b:
d9:18:75:59:0f:7c:25:3d:24:c8:6e:46:46:36:8c:77:2b:a6:
13:7a:04:5d:68:ec:91:4e:e1:4e:2b:38:cd:7e:11:3c:2c:da:
17:c0:c6:65:21:aa:42:82:e1:64:60:80:cb:a7:8c:69:4b:0b:
66:ea:64:6a:81:f5:6c:b2:f8:0a:c9:38:53:53:da:d1:be:b7:
5c:43:44:1a:f2:98:7f:b2:7c:81:a1:19:05:65:53:d6:a4:6c:
d5:0d:40:7a:bf:8a:ab:e7:38:1c:d5:4b:01:3b:7e:8d:17:1c:
b5:d3:78:d6:af:89:50:d4:a1:73:d2:b1:e8:77:93:f0:15:f6:
dc:0d:a1:d6:18:ed:e2:4f:f0:28:96:fc:fc:93:42:7c:58:50:
da:66:ae:e2:19:8c:f6:91:ac:e0:ea:bb:3a:e6:23:6d:20:2e:
83:12:34:99:bf:0b:86:4c:7d:57:5c:e3:56:82:5a:23:4e:32:
8d:1e:cf:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzMzNkExMTAvBgNVBAUTKDIxRDNFRDIxRjdDREVCQzdEMDBGMUJCN0EwOTUxMUI5
NUNERUZFMjMwHhcNMjYwODE5MDUxNTM4WhcNMjYwODI2MDUxNTM4WjAYMRYwFAYD
VQQDEw02YTg1M2JmYS0yOWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Dmyd76C+37MIcJzu8uc1iV1s6PMChaptog0ofiyM5mjOjMw8ijT+v2Gl4f0
oi6D41SRUspmwXa5lPZp8vwG7lXY1a1nUo3Iyx2LotkEufQt4xgBZv2aQGNlPNLv
UEdewdyQMASWqGswm8+KHPRbtQO6Eb+uB6an3DA6VKpvO5PLgS3f7c2bGo3UnOuW
DI7+Yam6ijPMl7UbM3/nKj8hzZMHoUkVSoxIqS+DOJlRC1EMcLS7MJ1s0Vn/Q2ji
fQmlMJf+Zv87G0nSE+JsKabMQ01MxG4H8vXe1EVmV1Mpk2m35ZD1xqAQadJFRC/A
FKX3ivoZP4NA2iwjDykdHt1VrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCWVs45z
CxFlmZSn3UNBt8908/DPMB8GA1UdIwQYMBaAFCHT7SH3zevH0A8bt6CVEblc3v4j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzM2QS84RjVBOTM1NjVB
RUExMUVGOTRFOTNENkVDNEY5QUUwMi9JZFB0SWZmTjY4ZlFEeHUzb0pVUnVWemVf
aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lkUHRJZmZONjhmUUR4dTNvSlVSdVZ6ZV9pTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzM2QS84RjVBOTM1NjVBRUExMUVGOTRFOTNENkVDNEY5QUUwMi9JZFB0SWZmTjY4
ZlFEeHUzb0pVUnVWemVfaU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF4/tWlI88cn85p1tU+12LXV7QyATnJfMrq8kwnnhuCgmDitaPdFIMrlajprv
E7Jaz7d7aVS1VanFERvqdpAtmddhh+eIIRw72Rh1WQ98JT0kyG5GRjaMdyumE3oE
XWjskU7hTis4zX4RPCzaF8DGZSGqQoLhZGCAy6eMaUsLZupkaoH1bLL4Csk4U1Pa
0b63XENEGvKYf7J8gaEZBWVT1qRs1Q1Aer+Kq+c4HNVLATt+jRcctdN41q+JUNSh
c9Kx6HeT8BX23A2h1hjt4k/wKJb8/JNCfFhQ2mau4hmM9pGs4Oq7OuYjbSAugxI0
mb8Lhkx9V1zjVoJaI04yjR7PvA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:32:19 2026 by rpki-client