
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft
File: iTEhgF-UFH033MbXS2N4Rvcjl8U.mft (raw, json)
Hash identifier: J0/pMw3T7sR5sCDPGyVmzy1dec6ydJAWmETf4PiYwsw=
Subject key identifier: 27:29:3B:E7:2E:CC:EB:62:C0:94:99:3A:41:45:E0:FE:93:0E:E3:2F
Authority key identifier: 89:31:21:80:5F:94:14:7D:37:DC:C6:D7:4B:63:78:46:F7:23:97:C5
Certificate issuer: /CN=A917E00F/serialNumber=893121805F94147D37DCC6D74B637846F72397C5
Certificate serial: 061C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft
Manifest number: 07E6
Signing time: Mon 22 Jun 2026 22:52:07 +0000
Manifest this update: Mon 22 Jun 2026 22:52:07 +0000
Manifest next update: Mon 29 Jun 2026 22:52:07 +0000
Files and hashes: 1: iTEhgF-UFH033MbXS2N4Rvcjl8U.crl (hash: Rq/u3SNCXFBi3aBvPL7rLp0MbhTBpu55rdJMN7+OjA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.crl
rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 22:52:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1564 (0x61c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E00F, serialNumber=893121805F94147D37DCC6D74B637846F72397C5
Validity
Not Before: Jun 22 22:52:07 2026 GMT
Not After : Jun 29 22:52:07 2026 GMT
Subject: CN=6a39bc97-3074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:91:14:58:d8:be:51:18:49:bf:e5:b7:1a:
b1:10:dc:27:bd:9b:17:11:20:a3:e5:b8:96:d2:66:
94:8c:de:4f:60:33:14:8e:f7:3f:79:f3:6b:7c:9c:
99:89:b7:e6:85:64:c5:3a:f8:1d:5f:5d:c8:f5:e4:
60:66:5f:aa:16:2f:7b:72:c1:4c:88:74:e0:27:0f:
65:78:1a:cf:85:7f:84:e5:1a:d1:7b:a6:fc:9b:dc:
22:24:ca:1b:81:04:04:02:75:f9:66:86:e1:79:f2:
4f:2c:13:d4:38:17:6e:05:05:2f:4a:45:db:a4:64:
6a:cf:cc:f8:85:93:fc:49:96:6e:03:8e:d2:18:8e:
64:58:70:12:d1:1c:d8:3d:eb:27:28:ad:ab:95:97:
12:53:74:aa:d5:6c:2f:26:b1:62:a7:d8:f3:01:30:
97:37:83:df:7b:fe:39:29:bf:82:20:3a:ae:9e:a4:
39:9b:8f:09:fe:a6:d8:1a:86:29:46:32:a4:6e:04:
19:af:21:61:a0:b2:b7:ff:5d:1f:c4:35:94:d4:3c:
f8:cb:00:1b:74:46:3e:60:73:64:20:ae:a7:7a:76:
02:c4:e6:59:4a:40:db:5b:78:e2:42:01:e1:0c:02:
52:ad:7f:a8:5c:34:c7:80:0e:4c:2f:be:24:32:6b:
cf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:29:3B:E7:2E:CC:EB:62:C0:94:99:3A:41:45:E0:FE:93:0E:E3:2F
X509v3 Authority Key Identifier:
keyid:89:31:21:80:5F:94:14:7D:37:DC:C6:D7:4B:63:78:46:F7:23:97:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:29:5a:27:c2:41:cf:1d:76:55:19:ba:ad:60:ff:9d:c6:f1:
ad:ee:68:08:b0:20:a4:91:e2:dd:1f:fc:a9:72:fd:48:5b:d7:
21:6d:3d:8c:20:10:ac:fd:27:18:c4:77:dc:02:8b:4b:50:ca:
23:c4:19:e4:f7:a2:51:d5:1e:fb:0d:d6:eb:76:3e:e4:49:36:
3b:da:56:a8:68:ad:ef:47:48:25:12:fa:f2:76:0e:fd:ed:3f:
cb:55:13:5a:a2:b1:3b:1c:cf:8f:26:a9:ac:db:d0:ff:d2:6b:
11:cf:e8:7a:d2:d1:f7:3b:ca:de:e7:0a:5c:08:a3:17:1d:27:
72:e7:28:5a:53:73:37:28:fd:30:09:35:ba:9e:47:82:f5:55:
d5:31:63:78:fe:40:ef:aa:62:9a:92:00:1c:d6:4f:3f:78:ce:
eb:3f:63:ce:5a:64:26:32:97:7d:18:b3:2f:8f:82:fd:b1:59:
fc:77:4e:92:5c:91:4d:cf:6c:6f:f6:9f:a8:fc:a5:0f:7a:1e:
43:68:b0:c5:5a:3c:95:2e:85:29:66:8c:0f:36:b3:6c:2a:49:
e3:f2:bb:f4:43:ea:bb:dc:78:73:94:e0:d1:2c:44:71:3a:5f:
7c:44:73:ba:31:c1:40:9d:f0:ee:09:29:eb:c3:e7:15:97:2a:
d2:46:85:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:28:49 2026 by rpki-client