
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft
File: Iq_UzdnE9MODdis-k-7PGub_nRY.mft (raw, json)
Hash identifier: 9yIvkRQsQBILqjYqAep6X/56sJFplsz1/jm06UiEEfA=
Subject key identifier: 9B:1A:A0:DE:2C:05:16:30:25:D1:4E:06:1D:96:BE:A8:CD:0E:87:EC
Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16
Certificate issuer: /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16
Certificate serial: 017A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft
Manifest number: 0173
Signing time: Thu 21 May 2026 04:48:26 +0000
Manifest this update: Thu 21 May 2026 04:48:25 +0000
Manifest next update: Thu 28 May 2026 04:48:25 +0000
Files and hashes: 1: Iq_UzdnE9MODdis-k-7PGub_nRY.crl (hash: hi5QJ1tg0U7UKiRIaTu93L9WyAsb6/larfW3K4Gw33E=)
2: 1E85ABA6231E11EFA893585AC4F9AE02.roa (hash: MnaX3T0zyBvJ0bwY6OhmDdwRp34O+rk5wwsxDth8dQA=)
3: 493F98CE230111EFB4355F5FC4F9AE02.roa (hash: Hjw+siIQ5fbdFdcnCepGzCI/276MBHifwin1GKcNedI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl
rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DFDA, serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16
Validity
Not Before: May 21 04:48:25 2026 GMT
Not After : May 28 04:48:25 2026 GMT
Subject: CN=6a0e8e9a-bfda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6a:79:48:86:2a:ef:c5:ea:c5:97:c7:de:14:
1e:db:db:ce:a8:73:c6:78:60:1e:02:c5:64:6d:f6:
3a:c3:d4:4f:fc:b4:25:ce:ae:ca:b0:b1:b7:1b:50:
95:3f:e7:f0:28:7c:34:76:1e:c4:bf:1a:e2:b4:c4:
7c:ae:2f:22:b5:ec:48:f3:74:45:c4:ee:9f:8c:78:
73:4a:e9:c6:65:b0:a6:24:63:59:9c:86:42:ff:02:
4a:32:a7:84:9b:24:d3:59:bb:0b:2a:c2:2c:68:ba:
04:f2:fd:55:98:be:b5:97:a5:9a:4b:24:29:8e:67:
fb:b1:90:a3:81:2b:88:fa:3e:09:a7:80:f8:bf:ac:
12:7a:12:62:5d:4a:cb:d2:37:9d:25:5c:16:15:34:
f0:91:d5:0a:37:72:ff:3c:eb:c8:87:37:9f:7c:82:
a5:a5:58:b7:e9:94:13:43:cb:00:a7:12:99:fd:1f:
c1:75:6d:a2:d1:a7:91:64:46:b0:08:ea:54:6f:b7:
99:20:9a:25:e0:28:10:83:65:07:cf:68:47:d8:8d:
ed:55:7a:1f:e6:b5:59:06:bf:1d:be:0e:36:71:c3:
ca:55:4c:ff:bc:7d:0c:32:ab:a9:2c:0c:e4:32:b9:
cb:b3:56:08:51:6c:52:41:d1:a5:52:ce:5c:5d:ca:
8c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1A:A0:DE:2C:05:16:30:25:D1:4E:06:1D:96:BE:A8:CD:0E:87:EC
X509v3 Authority Key Identifier:
keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ab:9d:8d:f0:26:e6:eb:71:b9:96:53:65:6a:f4:ee:92:7f:
a7:e0:49:c2:16:02:2a:c9:8f:70:da:d6:10:73:e2:3a:88:1f:
40:91:e6:42:63:52:50:38:f9:c8:a7:d3:5f:8d:21:48:1f:55:
12:d3:dd:c6:5c:42:68:ad:63:ff:91:46:1c:68:06:b9:dd:8b:
44:fa:d1:7f:6a:c8:de:6a:99:47:36:f2:ec:b7:58:fb:fb:22:
a1:1e:a2:a2:48:da:73:b5:e9:83:01:fa:ac:7e:c7:59:58:ea:
46:10:7b:fd:98:f0:cb:6a:26:2b:4e:6b:da:9e:c5:7b:b3:a7:
8a:e7:ed:97:50:9d:42:36:9a:70:de:cf:85:1c:24:c6:7f:53:
20:d9:76:14:35:cb:40:7b:eb:d0:e2:5f:1a:3e:2e:d3:74:4b:
64:32:b5:48:68:6e:87:65:6d:67:f8:0d:b5:d8:3c:bc:12:a2:
0e:09:f7:ca:1a:5a:24:0e:b2:eb:f3:f9:b9:e3:50:3c:38:e9:
1c:20:22:bd:a3:32:ec:1f:50:06:f1:d4:98:ea:87:7b:7f:76:
a1:ce:3c:7e:38:49:48:00:05:90:af:69:f8:ee:02:cb:a7:04:
2e:09:37:dd:fe:60:e7:d9:b0:38:c1:fb:3d:ec:19:95:bd:99:
27:83:b6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:58 2026 by rpki-client