
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
File: It6TcViumN6iIR-bvJp10O0NRDY.mft (raw, json)
Hash identifier: LGekAZaZapb6TNYEBfHV0A+d4mF9loTElm+zKgrEtK8=
Subject key identifier: 2F:17:71:C1:38:06:A4:CB:AC:8F:B5:95:E0:4E:5A:97:59:CB:4B:26
Authority key identifier: 22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36
Certificate issuer: /CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436
Certificate serial: 0148
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
Manifest number: 0148
Signing time: Thu 21 May 2026 05:19:26 +0000
Manifest this update: Thu 21 May 2026 05:19:26 +0000
Manifest next update: Thu 28 May 2026 05:19:26 +0000
Files and hashes: 1: It6TcViumN6iIR-bvJp10O0NRDY.crl (hash: /oPZoh8ZrHPsUx9O3l6pbWsa6lASTBlR5W9XDRisQP0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl
rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 05:19:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189B41, serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436
Validity
Not Before: May 21 05:19:26 2026 GMT
Not After : May 28 05:19:26 2026 GMT
Subject: CN=6a0e95de-22e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:3e:5b:a3:b0:43:c3:61:b9:ef:5c:9e:9a:
88:94:04:a7:2c:36:e1:1c:57:2a:60:7d:be:e6:19:
e7:6d:e1:3f:f0:df:54:d3:fe:b5:7e:6c:af:9e:3f:
02:30:06:5e:92:2a:4f:8a:29:fe:a6:42:c5:62:05:
41:7a:b9:9c:7b:4e:5b:12:7a:86:da:d6:4f:b0:2f:
2e:04:f4:eb:74:82:03:a7:c9:a0:a7:d3:91:0d:80:
fb:48:6f:bf:dc:f8:9f:89:46:d1:e6:d5:2b:d7:0d:
e1:a3:7a:90:e2:59:38:22:03:95:e3:28:d6:1c:40:
ea:5d:32:d5:75:3d:08:9f:52:28:d3:b7:c6:5c:8c:
e9:d9:2d:35:e7:cb:cb:6d:87:23:19:48:8e:f8:bc:
25:48:c3:72:67:4f:55:6c:cd:6c:87:b5:f6:5c:ac:
0d:73:58:f5:48:54:cc:6f:98:83:db:8c:e9:55:9e:
80:bf:78:dc:67:aa:b4:6e:71:46:a5:89:1f:4c:4f:
6d:a9:5b:dd:39:4c:ad:93:8d:0d:3d:e0:04:46:09:
87:13:02:15:a7:48:99:3e:4a:05:44:19:29:7b:c9:
0f:63:f4:e9:6a:c2:66:d7:8c:0b:23:ae:74:91:ea:
6b:40:0f:07:ff:c6:45:66:67:66:96:51:92:22:f0:
30:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:17:71:C1:38:06:A4:CB:AC:8F:B5:95:E0:4E:5A:97:59:CB:4B:26
X509v3 Authority Key Identifier:
keyid:22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:51:a5:e1:a8:4d:84:89:7f:69:e8:ea:98:d5:6a:be:15:c3:
a0:2e:ce:cf:84:36:0f:3a:96:02:66:07:4a:ba:e4:8e:b5:1e:
74:70:d9:4f:1b:2c:8f:a1:12:77:6c:2a:bd:17:63:3c:6d:d3:
76:e5:90:ab:7d:73:30:35:bd:3c:27:89:d9:86:c1:25:5d:cb:
46:33:f0:91:d5:f1:61:48:d1:af:a7:28:33:59:d8:f6:ba:30:
91:91:73:aa:21:c3:fa:43:d2:76:14:07:2d:51:80:50:7c:0f:
19:5d:70:66:3d:7e:54:14:41:29:c4:e0:7b:b8:d6:aa:4c:e6:
23:4f:e5:cb:d4:d9:e0:8d:92:9a:d7:e5:23:32:77:67:46:98:
54:97:68:62:1d:0a:5d:13:c6:9d:e6:14:c3:03:0e:9d:94:e5:
97:97:9c:1e:35:92:d7:ba:54:e9:f2:00:ea:08:54:d8:96:47:
ea:61:89:41:83:c5:3e:0d:f9:29:70:1d:62:cf:ed:f7:16:3d:
bd:a1:c6:cb:00:14:92:7f:98:49:87:af:54:1d:f1:fa:68:a2:
5e:19:59:89:f5:bf:64:6c:9d:b2:f8:85:c1:e9:3a:b5:45:de:
9c:ae:7f:0a:38:d0:f5:33:f9:3b:fb:a5:6a:bb:03:e4:39:8b:
f5:ea:79:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODlCNDExMTAvBgNVBAUTKDIyREU5MzcxNThBRTk4REVBMjIxMUY5QkJDOUE3NUQw
RUQwRDQ0MzYwHhcNMjYwNTIxMDUxOTI2WhcNMjYwNTI4MDUxOTI2WjAYMRYwFAYD
VQQDEw02YTBlOTVkZS0yMmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw0I+W6OwQ8Nhue9cnpqIlASnLDbhHFcqYH2+5hnnbeE/8N9U0/61fmyvnj8C
MAZekipPiin+pkLFYgVBermce05bEnqG2tZPsC8uBPTrdIIDp8mgp9ORDYD7SG+/
3PifiUbR5tUr1w3ho3qQ4lk4IgOV4yjWHEDqXTLVdT0In1Io07fGXIzp2S0158vL
bYcjGUiO+LwlSMNyZ09VbM1sh7X2XKwNc1j1SFTMb5iD24zpVZ6Av3jcZ6q0bnFG
pYkfTE9tqVvdOUytk40NPeAERgmHEwIVp0iZPkoFRBkpe8kPY/TpasJm14wLI650
keprQA8H/8ZFZmdmllGSIvAwXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC8XccE4
BqTLrI+1leBOWpdZy0smMB8GA1UdIwQYMBaAFCLek3FYrpjeoiEfm7yaddDtDUQ2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUI0MS83MjZFM0FEMDYw
NTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1ONmlJUi1idkpwMTBPME5S
RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0l0NlRjVml1bU42aUlSLWJ2SnAxME8wTlJEWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OUI0MS83MjZFM0FEMDYwNTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1O
NmlJUi1idkpwMTBPME5SRFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa1Gl4ahNhIl/aejqmNVqvhXDoC7Oz4Q2DzqWAmYHSrrkjrUedHDZTxssj6ES
d2wqvRdjPG3TduWQq31zMDW9PCeJ2YbBJV3LRjPwkdXxYUjRr6coM1nY9rowkZFz
qiHD+kPSdhQHLVGAUHwPGV1wZj1+VBRBKcTge7jWqkzmI0/ly9TZ4I2SmtflIzJ3
Z0aYVJdoYh0KXRPGneYUwwMOnZTll5ecHjWS17pU6fIA6ghU2JZH6mGJQYPFPg35
KXAdYs/t9xY9vaHGywAUkn+YSYevVB3x+miiXhlZifW/ZGydsviFwek6tUXenK5/
CjjQ9TP5O/ularsD5DmL9ep5ww==
-----END CERTIFICATE-----
Generated at Thu May 21 11:05:16 2026 by rpki-client