
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft
File: ivWYKUtrI6E57fVPJCi8YZZRqhc.mft (raw, json)
Hash identifier: wgKbftWM4wTbo67KgH/SDwzSOox9Hiy1uPnBEXibU+U=
Subject key identifier: 56:BD:E6:AA:8A:06:4F:D0:84:9F:AD:39:24:45:29:53:E7:93:7D:06
Authority key identifier: 8A:F5:98:29:4B:6B:23:A1:39:ED:F5:4F:24:28:BC:61:96:51:AA:17
Certificate issuer: /CN=A917DB77/serialNumber=8AF598294B6B23A139EDF54F2428BC619651AA17
Certificate serial: A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivWYKUtrI6E57fVPJCi8YZZRqhc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft
Manifest number: A6
Signing time: Thu 21 May 2026 07:19:08 +0000
Manifest this update: Thu 21 May 2026 07:19:08 +0000
Manifest next update: Thu 28 May 2026 07:19:08 +0000
Files and hashes: 1: ivWYKUtrI6E57fVPJCi8YZZRqhc.crl (hash: 3o0yU6hBqxG7ORrIGKjZAqcd3abIXLQ3ppaCdLM0kgw=)
2: 69F70CA058AC11F09233031BC4F9AE02.roa (hash: 4WREvFd+nUzC5vPmTUxIuZeyw9tiHe7MtLqc+tBnPIs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.crl
rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivWYKUtrI6E57fVPJCi8YZZRqhc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DB77, serialNumber=8AF598294B6B23A139EDF54F2428BC619651AA17
Validity
Not Before: May 21 07:19:08 2026 GMT
Not After : May 28 07:19:08 2026 GMT
Subject: CN=6a0eb1ec-7683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:43:6f:7e:de:3e:93:8b:49:f0:c8:fa:6c:3a:
8c:66:5e:ac:56:11:dd:0f:60:35:c6:58:0a:f0:81:
92:08:88:82:34:86:17:4b:94:94:56:b8:ee:9e:15:
cc:8e:85:ec:35:5e:f1:5d:bb:f0:19:6f:d5:fd:25:
b3:68:df:43:bf:c3:11:72:c2:4d:6b:65:f6:36:4e:
76:34:96:70:03:24:7f:c4:a8:b5:1b:a2:60:3f:4a:
68:6b:10:6f:0e:3d:81:cf:c1:b5:54:40:37:39:19:
40:ec:b9:25:69:c0:45:e9:18:cf:13:34:0b:27:0b:
c5:af:bd:7a:27:16:f7:a2:09:af:6a:c2:8e:a2:ef:
3b:b7:43:be:c4:86:44:26:6d:c5:6d:24:10:1f:40:
e8:ba:d5:68:28:96:f7:16:c6:37:9b:30:51:66:44:
bf:b2:39:d4:c0:08:52:8d:f1:db:07:d2:f8:c3:1a:
4b:69:d4:98:c5:ff:6c:1b:5d:e4:38:ef:60:77:9e:
01:12:74:65:2d:c4:71:ba:a7:11:ee:14:35:1c:8b:
20:c6:86:f5:d1:87:41:58:eb:8b:ac:60:f2:8f:7b:
90:8a:72:a1:fa:4e:ed:39:c9:9e:85:d2:9d:93:0e:
06:a0:a0:ff:63:9b:47:34:9d:64:0c:5f:57:47:c0:
13:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BD:E6:AA:8A:06:4F:D0:84:9F:AD:39:24:45:29:53:E7:93:7D:06
X509v3 Authority Key Identifier:
keyid:8A:F5:98:29:4B:6B:23:A1:39:ED:F5:4F:24:28:BC:61:96:51:AA:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivWYKUtrI6E57fVPJCi8YZZRqhc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6b:c3:b3:fb:4d:d6:64:68:7a:00:08:96:89:24:ae:d2:c3:
08:83:27:73:41:69:7c:23:6c:59:c7:4a:f4:0a:4d:ec:ec:2f:
5d:5a:5a:3a:ba:21:ca:43:23:63:a4:22:22:cb:82:00:42:fd:
ec:5b:e5:ca:59:07:af:cd:d6:51:ef:3d:33:b3:73:52:bd:02:
ee:1c:f9:0a:de:0f:9c:0d:6c:b1:bb:53:ef:f1:a8:f3:cc:d1:
85:19:89:64:15:3f:63:4a:d1:ba:7d:e3:2b:12:e8:e7:f2:ca:
00:b6:82:b4:a4:9a:c9:8a:08:2a:b1:db:c0:fa:9d:9a:a8:c6:
20:48:60:a8:ee:13:de:5f:3e:02:3b:fd:62:df:f4:2c:6e:dc:
16:ca:2c:8c:f2:9c:dc:8c:98:aa:ec:3c:27:75:d1:d6:44:85:
c7:24:d9:10:70:df:8b:14:46:f7:e6:20:31:bd:6a:04:98:9e:
c2:55:57:4d:2c:90:38:1c:3f:43:f5:72:94:6b:d5:9d:ab:e7:
aa:0b:12:cf:06:a3:db:2c:77:81:c0:38:f1:24:ac:e0:4f:22:
c8:29:b2:8d:76:b8:1e:98:e6:b2:3c:fb:33:fd:e0:52:0c:7d:
2f:e1:f5:1f:0f:f6:5c:42:6f:74:78:b6:e3:2f:85:a2:a0:bb:
ba:dd:a4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:28:07 2026 by rpki-client