
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
File: ItPpdE2tSXUDbMQirBHEBHIOZuo.mft (raw, json)
Hash identifier: eXQD0NwBE9ykSheyj5h2hiaxe3y2P0jttdUpdptcHfM=
Subject key identifier: 5B:26:23:4A:9B:71:AD:5B:68:FD:4E:0B:1C:E7:04:A8:25:65:BD:0C
Authority key identifier: 22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA
Certificate issuer: /CN=A917A4F7/serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA
Certificate serial: 01EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
Manifest number: 01EA
Signing time: Tue 23 Jun 2026 03:31:39 +0000
Manifest this update: Tue 23 Jun 2026 03:31:39 +0000
Manifest next update: Tue 30 Jun 2026 03:31:39 +0000
Files and hashes: 1: ItPpdE2tSXUDbMQirBHEBHIOZuo.crl (hash: YxEPi0D649d+EEQ1UChvJkFjnHToYee08xaZQi0NtaU=)
2: 9BE3C7087E8311EEBC7E6681C4F9AE02.roa (hash: WYx1m//KJzwNa0S4q543WlbT86cDIRSE3yzbaO/SMbI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl
rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 03:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 495 (0x1ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A4F7, serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA
Validity
Not Before: Jun 23 03:31:39 2026 GMT
Not After : Jun 30 03:31:39 2026 GMT
Subject: CN=6a39fe1b-0daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:08:72:d3:af:1b:a5:92:b1:d6:30:69:c0:a7:
15:2d:04:f7:19:46:20:59:ed:dc:90:31:e4:97:3f:
3c:aa:0c:21:39:9e:b7:a3:0c:69:73:f9:31:be:77:
49:3d:66:d0:44:bd:db:9f:50:4d:04:30:20:e1:a9:
63:d0:fe:0c:6c:0f:70:5a:a7:73:c7:94:fb:10:54:
83:3f:ea:8b:0e:1c:e1:e5:cc:39:5a:1e:77:05:03:
2a:86:7c:46:2a:f3:bb:d4:84:ec:06:51:81:81:93:
36:f9:0b:5c:3e:11:e2:30:55:bd:e0:9c:8c:eb:79:
42:3b:b9:32:83:5b:bf:f6:65:a0:ec:2e:aa:7f:19:
b1:15:f3:c1:2b:01:34:5d:6f:f5:07:04:f6:fe:34:
6b:83:14:65:2b:9d:48:e8:8c:14:80:82:44:22:f0:
93:5c:c3:a3:a1:83:43:7c:60:93:65:34:53:89:5a:
24:3a:3c:e6:ee:61:bb:79:3b:6f:3f:c8:f4:40:6b:
66:57:7d:af:85:61:96:b9:fc:48:aa:5e:79:82:5a:
65:ef:14:42:fe:59:e3:2f:63:4f:63:59:2c:f0:e9:
0b:56:33:54:36:50:d1:2f:b6:40:7f:c6:e6:07:bb:
f4:43:ac:4f:f8:8f:96:32:43:b7:c1:79:3c:30:f7:
41:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:26:23:4A:9B:71:AD:5B:68:FD:4E:0B:1C:E7:04:A8:25:65:BD:0C
X509v3 Authority Key Identifier:
keyid:22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:e5:ca:6f:dc:0b:1f:2b:30:89:9c:87:c9:ca:e0:d7:e5:6e:
fa:d2:67:4d:16:f3:66:fb:88:fc:df:f9:c3:20:48:9f:33:f1:
4b:9d:c9:b8:38:3c:6c:f2:40:85:3b:40:ca:30:fa:26:4e:57:
de:11:fc:c6:73:4b:71:9e:b6:d1:95:69:41:c3:9d:3c:d2:67:
0f:5d:ed:b3:05:c7:16:c3:9e:77:e5:47:87:b6:5a:7c:82:9e:
62:cb:20:94:ed:92:8b:10:13:32:30:d3:04:e9:f1:5d:34:b9:
e3:09:69:8c:90:6d:c0:ed:ab:cd:6c:e5:15:42:83:e5:0d:59:
79:91:4d:3f:8f:42:c2:a2:5f:c4:0b:2f:46:5a:33:b7:8f:6c:
5f:04:db:93:32:a7:57:47:ec:7c:eb:82:4d:6e:33:c4:06:c7:
ed:34:e4:13:31:ff:9d:32:f6:34:db:6d:7a:6c:18:19:90:aa:
2b:4a:2b:72:1a:12:7a:38:e7:e3:3a:6c:89:d3:cb:9f:44:9f:
de:50:9f:f5:cd:8c:df:3f:6d:15:12:a1:bb:c9:5f:36:3f:23:
3e:33:6e:0b:f5:e6:cc:91:31:39:f5:21:85:4c:9f:64:d3:fc:
b0:1d:9d:09:bc:17:9c:fa:49:92:48:a0:75:9e:48:b2:5b:11:
00:65:25:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:13:16 2026 by rpki-client