
$ rpki-client -vvf rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft
File: ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft (raw, json)
Hash identifier: OUN/cB+rdEayCtzIyE4kDIK0Iy3VpDkgpZp324Il6H4=
Subject key identifier: E5:A5:5F:26:A6:32:56:1B:B1:1F:77:42:BB:D8:E2:72:86:B6:9A:1F
Authority key identifier: 21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC
Certificate issuer: /CN=A912382E/serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC
Certificate serial: 194D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft
Manifest number: 1943
Signing time: Thu 16 Apr 2026 16:22:43 +0000
Manifest this update: Thu 16 Apr 2026 16:22:43 +0000
Manifest next update: Thu 23 Apr 2026 16:22:43 +0000
Files and hashes: 1: ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl (hash: NhqvpCqT/gwTjCgbnBttUAWLuV3EAOMu8DX+FTPVntg=)
2: BD843CCE984011E79A256C82C4F9AE02.roa (hash: YEfPuupkj6+rYgnnK9KPFgtKEqtP8lyWUzvWsUKBop0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl
rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6477 (0x194d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912382E, serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC
Validity
Not Before: Apr 16 16:22:43 2026 GMT
Not After : Apr 23 16:22:43 2026 GMT
Subject: CN=69e10cd3-1e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:b8:ff:8d:62:d1:9c:37:44:f3:af:8e:be:
d6:bb:8d:d4:46:2f:b0:46:5f:9f:4b:6c:ac:84:e8:
1c:52:02:1a:df:90:c5:fa:eb:9f:0f:f4:42:aa:0e:
31:79:37:63:fd:56:a2:01:da:2f:ea:5d:b4:10:3a:
01:1a:a4:1b:a7:7e:51:83:8c:ae:cd:c3:76:09:bd:
c7:57:75:06:de:2f:b5:43:e7:3d:41:f3:d8:a5:0b:
a6:12:28:0a:11:6b:0f:c1:ac:ff:53:f2:6b:61:f8:
a4:e1:8c:12:3e:1f:0d:8c:93:a1:1b:07:29:d0:e9:
b2:a3:fe:67:65:f4:d9:8c:99:b5:06:e6:63:77:29:
4f:5c:d1:d1:fa:51:31:02:ad:ff:db:4a:18:11:e4:
16:78:6c:a0:ca:03:3b:8a:17:cf:99:4b:1d:51:f2:
4a:a7:24:4c:d2:55:51:de:c4:76:1b:56:6c:6a:cf:
1a:70:1b:78:f2:72:21:7d:40:b8:22:2a:ad:69:08:
9c:44:88:7d:9e:23:a3:6c:05:e7:cd:2d:4b:bd:36:
d8:a7:1f:85:9c:e2:fe:7f:b8:f6:2d:5e:d1:00:10:
cb:cc:1e:33:f9:c2:42:b5:f6:00:2e:6d:b8:cb:96:
ec:16:34:73:95:07:3b:3c:2f:ce:54:01:aa:3a:9d:
d9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A5:5F:26:A6:32:56:1B:B1:1F:77:42:BB:D8:E2:72:86:B6:9A:1F
X509v3 Authority Key Identifier:
keyid:21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:83:dc:5c:b2:51:f7:2c:12:bd:1c:7c:54:10:b5:b4:96:9a:
9e:f7:9b:83:31:4e:a2:aa:16:8c:5b:06:9a:eb:c3:93:0e:f4:
b7:a1:08:7d:ad:e6:9c:cb:0b:16:da:7b:74:a9:4c:a6:df:a2:
f2:42:51:5e:62:f1:81:18:6e:ad:34:bf:29:4f:1c:ef:7f:c2:
21:9e:3b:24:c5:b0:bc:49:68:ac:6e:41:aa:48:61:0d:49:bb:
c6:dc:ae:3a:c8:7f:7c:e7:03:03:1d:3d:1e:26:23:50:cc:48:
78:7f:34:3d:e3:e6:45:7e:12:68:12:0b:0d:91:af:45:25:7c:
75:93:d4:78:d3:3f:6d:da:97:b9:db:c0:88:dd:c7:bf:14:6d:
e1:cb:a0:b8:5d:8a:7b:5f:db:8c:9e:5e:9a:ab:94:ab:f0:aa:
e8:88:66:ed:65:6a:37:39:93:5b:30:f2:87:b0:ae:2a:e0:3a:
23:45:60:31:5a:56:eb:5d:a9:83:25:a6:1c:25:c5:48:92:3d:
69:b2:41:ed:f4:07:a2:b3:dd:2d:93:33:e0:3e:9c:f6:f4:e0:
ff:f5:b5:b4:85:e6:9c:2a:a6:54:9e:30:62:05:58:34:13:66:
b8:41:d6:e8:51:e2:85:59:21:66:c8:86:3f:db:7c:ac:cf:d3:
1b:d3:5d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:52:47 2026 by rpki-client