
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft
File: Ic_hSZujbpQWt_68gTw8LqkWvEY.mft (raw, json)
Hash identifier: cu4Cqa75xtACWcrUAdluiVGXfrSaoW28Bf33qyyT/ew=
Subject key identifier: 26:E1:FE:D3:15:FF:F6:9E:D7:0F:80:97:A1:85:7D:C5:98:D7:4D:88
Authority key identifier: 21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46
Certificate issuer: /CN=A917B413/serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46
Certificate serial: 0BCC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft
Manifest number: 0BC0
Signing time: Thu 08 Oct 2026 19:08:49 +0000
Manifest this update: Thu 08 Oct 2026 19:08:48 +0000
Manifest next update: Thu 15 Oct 2026 19:08:48 +0000
Files and hashes: 1: Ic_hSZujbpQWt_68gTw8LqkWvEY.crl (hash: yJsH0l7xnSVNtUY12AuiPwF978uK/nwWKWETM2Ru4s4=)
2: 498B6EFE942411EA816FC855C4F9AE02.roa (hash: ShVKBDsZHucxua11jITqEB/zC8bAit+Mc5m8VG1vvj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl
rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 19:08:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3020 (0xbcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B413, serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46
Validity
Not Before: Oct 8 19:08:48 2026 GMT
Not After : Oct 15 19:08:48 2026 GMT
Subject: CN=6ac7ea41-aec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:45:f6:c1:e4:03:01:c1:7f:87:08:2a:9d:
8e:33:a7:e0:af:b0:fa:3e:16:e2:e7:e6:29:32:73:
7a:6e:67:4f:87:2c:05:db:01:02:77:90:bd:a5:af:
ac:07:92:a3:aa:b9:ca:62:c1:f9:31:ba:4c:5d:43:
e5:70:33:f5:01:5d:16:1d:30:de:53:7d:be:31:69:
7b:87:76:79:bb:6e:f6:ad:b6:a6:74:4f:c3:7f:ff:
44:92:3e:e0:10:2b:3c:48:6d:ef:77:13:a4:99:3d:
37:aa:4a:19:22:a9:1a:74:4f:1a:12:74:b8:0f:ce:
99:92:6f:19:90:04:ba:5d:9d:2e:3e:dc:17:87:4f:
e9:fc:47:d5:63:a6:4d:be:8d:f5:99:2d:54:2f:c9:
2e:49:84:bc:24:26:50:39:8c:92:86:51:d4:91:dc:
45:13:4d:f9:05:17:4a:24:8d:bc:3f:62:77:b7:c9:
6f:d8:fc:fc:9c:53:02:06:ac:8f:98:28:63:7b:0c:
f0:0a:92:98:af:86:97:49:2e:a9:87:b4:5f:c9:bf:
42:ee:43:5e:2f:69:e5:28:b6:81:0f:5e:44:75:25:
52:04:0f:86:56:67:a6:94:e2:e2:43:95:fe:b6:12:
10:82:c2:81:00:ce:f0:11:95:02:c6:39:9c:b9:31:
10:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E1:FE:D3:15:FF:F6:9E:D7:0F:80:97:A1:85:7D:C5:98:D7:4D:88
X509v3 Authority Key Identifier:
keyid:21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:77:2b:8e:ff:01:c2:87:fa:a3:dc:00:23:85:6d:fb:7d:66:
ec:e1:24:df:d9:0a:1d:7c:33:3f:aa:be:41:94:ee:1c:63:46:
0c:dc:13:0d:24:c3:3f:4c:0d:c3:f6:42:5a:c1:40:96:02:40:
3c:fd:98:e3:41:59:58:34:6d:70:31:44:10:cd:03:5f:80:18:
51:4c:b7:c2:79:50:4e:69:1f:66:6c:11:06:ee:e6:e9:5a:7c:
94:99:24:8f:fb:de:b8:7a:31:77:2b:c9:69:ab:2e:f3:d4:36:
b4:f1:08:3c:65:33:f5:cd:ae:cc:3c:40:9b:f6:51:d0:7b:2c:
e3:61:58:8e:1e:bd:53:9a:a7:e5:eb:8c:1c:ec:11:16:1d:8e:
96:25:3f:06:9e:f6:a9:6f:eb:a9:cd:cb:ac:39:e2:ec:01:a9:
ad:5f:78:b3:78:5f:eb:a7:ed:b4:ca:ac:58:2f:dc:1f:19:ec:
10:7b:6e:54:99:35:60:c8:21:b8:e1:06:6e:ea:95:a4:6f:e4:
7a:d7:03:c6:c5:45:46:19:2a:a6:bd:f5:0d:a3:33:8c:23:14:
0e:94:fc:02:e8:00:98:e7:2d:90:03:95:6c:da:8b:48:d4:39:
a9:4c:c3:76:42:2c:ee:f9:98:5f:71:78:63:e1:e8:3a:84:80:
d5:05:65:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:36:01 2026 by rpki-client