
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft
File: ivWYKUtrI6E57fVPJCi8YZZRqhc.mft (raw, json)
Hash identifier: es1r6v57K4jeeF+4+DUj0p+TK5Nlhf1NEyXYTCGOA80=
Subject key identifier: 28:73:D3:92:6D:64:D5:60:12:5E:07:50:60:E8:DB:F4:47:4E:0B:64
Authority key identifier: 8A:F5:98:29:4B:6B:23:A1:39:ED:F5:4F:24:28:BC:61:96:51:AA:17
Certificate issuer: /CN=A917DB77/serialNumber=8AF598294B6B23A139EDF54F2428BC619651AA17
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivWYKUtrI6E57fVPJCi8YZZRqhc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft
Manifest number: EC
Signing time: Sat 03 Oct 2026 07:06:22 +0000
Manifest this update: Sat 03 Oct 2026 07:06:21 +0000
Manifest next update: Sat 10 Oct 2026 07:06:21 +0000
Files and hashes: 1: ivWYKUtrI6E57fVPJCi8YZZRqhc.crl (hash: OHnZl03xrmkHehcYbw0Aq2IP7fpHyw3/zmDaVlLYQE8=)
2: 69F70CA058AC11F09233031BC4F9AE02.roa (hash: 5x5L97/2BZdvvgKkOU0ZIN1wQnp6OeudRNfppKCkvFw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.crl
rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivWYKUtrI6E57fVPJCi8YZZRqhc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DB77, serialNumber=8AF598294B6B23A139EDF54F2428BC619651AA17
Validity
Not Before: Oct 3 07:06:21 2026 GMT
Not After : Oct 10 07:06:21 2026 GMT
Subject: CN=6ac0a96e-d408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ac:fd:75:00:87:ff:29:66:ae:a9:36:c6:10:
24:0a:8a:52:e9:c9:52:7e:51:81:d4:fd:ce:d6:6f:
4a:c0:8a:34:e7:0d:01:e1:b7:1b:b8:42:86:e0:4d:
2e:84:35:b8:57:db:9b:3e:3a:e8:27:b2:54:3d:78:
f4:b9:84:df:78:85:dd:c5:ff:77:be:fe:d3:cc:67:
17:25:d5:54:02:ac:e3:ee:fd:2d:07:2a:95:6d:b3:
c8:5b:59:f3:f2:30:e8:19:52:3f:54:fe:f8:25:25:
6d:34:99:f2:d7:7b:b2:b4:87:5e:40:73:31:6c:57:
f4:14:0d:1e:f4:31:c7:76:94:6b:1d:5f:09:ee:89:
b0:c8:e0:8e:2c:cc:10:d9:d5:14:d6:4f:d6:a8:3e:
8c:33:af:c6:ee:d4:41:5c:ad:d7:82:ff:f4:6b:7f:
1c:4b:fc:12:58:7f:b5:fe:74:bf:d7:31:90:58:60:
b8:2e:60:c0:49:dd:2a:9d:3a:c8:d2:47:e5:4b:22:
14:30:8f:30:65:1a:25:b5:d9:e2:c7:9d:da:1b:6a:
39:4d:56:34:31:b3:65:86:c4:8d:d3:f9:65:79:50:
92:fe:db:26:d5:fc:f4:8f:36:81:f5:f3:90:b0:0d:
44:76:41:a3:e9:f7:aa:09:fd:f3:c6:47:a0:d6:50:
d6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:73:D3:92:6D:64:D5:60:12:5E:07:50:60:E8:DB:F4:47:4E:0B:64
X509v3 Authority Key Identifier:
keyid:8A:F5:98:29:4B:6B:23:A1:39:ED:F5:4F:24:28:BC:61:96:51:AA:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivWYKUtrI6E57fVPJCi8YZZRqhc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:f1:c7:4e:9b:28:4f:a1:5f:ce:50:77:61:56:fe:62:68:39:
db:14:7c:7a:d6:e1:41:6f:96:2e:19:80:27:9f:ad:e8:20:51:
cc:e5:0e:b9:ba:89:5c:52:80:6e:f6:e0:13:ca:82:66:61:fd:
e3:40:38:fe:79:41:19:d0:f9:25:0f:89:0b:1c:4c:fd:8c:9c:
5b:4d:0a:08:52:5f:15:a2:d2:59:9e:50:82:b2:ec:85:c9:b3:
8c:55:5d:fa:46:d5:de:58:d4:25:45:b9:07:21:c4:33:3f:5a:
ea:f1:30:01:01:0f:3f:1b:ba:9d:d5:9f:3a:29:5d:a7:37:e9:
c2:df:91:ff:0d:5c:79:60:68:17:7a:c3:d0:bb:4a:f4:c9:37:
e8:e6:ef:27:d8:d2:50:c9:51:59:ae:59:3e:1e:f2:17:5d:45:
8b:8f:af:9b:0a:93:32:f9:12:b7:37:7c:f6:c7:03:4b:0f:58:
75:91:78:dd:93:01:d5:df:1c:3e:f1:e3:69:d8:b5:86:f3:00:
ef:b6:26:bb:1c:8c:4f:dd:f6:b6:7c:ab:2a:f2:20:4f:26:6b:
71:7b:ec:c9:24:6b:6a:e1:c7:73:5a:4a:09:ce:78:6c:08:30:
84:9e:69:7d:e1:49:60:9d:be:eb:5a:72:0a:23:98:93:60:11:
94:f9:59:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:05:33 2026 by rpki-client