
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
File: IUKTP75ufF-3Z6hqXiHdYBeOo50.mft (raw, json)
Hash identifier: F1DWXU5W9up/LbSEjM6FzDNhGMV7E5b82Qgl0l0jbWo=
Subject key identifier: F1:B9:1C:DD:5F:5B:A0:4C:FC:BC:0F:A7:8F:ED:E9:04:94:56:B7:E5
Authority key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D
Certificate issuer: /CN=A9168D00/serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
Certificate serial: E9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
Manifest number: E6
Signing time: Sun 20 Sep 2026 22:04:21 +0000
Manifest this update: Sun 20 Sep 2026 22:04:21 +0000
Manifest next update: Sun 27 Sep 2026 22:04:21 +0000
Files and hashes: 1: IUKTP75ufF-3Z6hqXiHdYBeOo50.crl (hash: qBpEN7zJ8FM0jZrb72WXNHiDtxCRLknEEXkedaNQS6w=)
2: E92F49E661EA11F087750C23C4F9AE02.roa (hash: TR3KMntthAwVhbNksuMzt3WXfXIJDm+0sJy4E3HFO4A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl
rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
Validity
Not Before: Sep 20 22:04:21 2026 GMT
Not After : Sep 27 22:04:21 2026 GMT
Subject: CN=6ab05865-1866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:0b:d0:da:00:76:a5:33:f0:82:36:f6:21:
2a:d7:4b:45:f2:74:0a:af:db:94:a5:1c:d3:a7:82:
bd:d5:fd:c7:ce:ee:db:d7:38:c9:83:36:1c:1c:be:
11:6d:86:43:4d:da:61:c4:93:e1:6f:e4:36:ca:5e:
52:f7:e3:bf:40:57:12:05:2d:67:30:43:61:a1:a7:
bf:b2:da:b8:76:6f:88:71:c2:ac:85:1d:2b:2f:ff:
cc:68:a3:4b:58:3f:84:c5:bc:34:13:64:b9:4f:74:
7b:ce:6c:1a:21:90:9f:b8:a5:03:9c:3a:97:fb:63:
11:8f:67:56:fe:20:17:23:ac:bb:41:7a:c5:f0:55:
b4:af:67:f4:9c:c7:7a:81:cf:b5:da:c5:6e:33:bd:
20:e3:94:8e:54:72:4b:6e:19:05:6a:50:a3:f2:d8:
e3:76:12:d0:f2:cc:93:a3:20:ce:80:60:83:c5:84:
5d:d8:47:ef:95:f4:ed:b0:25:80:5c:bb:57:a4:9f:
84:f9:70:02:00:b9:6b:da:ae:67:f0:a8:cb:b6:b2:
a4:99:1c:54:28:21:95:0c:28:2d:24:99:08:b9:97:
00:da:45:84:ab:90:fd:11:d6:f9:fb:1f:1c:f2:9d:
fb:a6:35:b2:60:08:5b:fd:45:b1:51:12:c6:1d:32:
4a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B9:1C:DD:5F:5B:A0:4C:FC:BC:0F:A7:8F:ED:E9:04:94:56:B7:E5
X509v3 Authority Key Identifier:
keyid:21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:18:85:22:a6:7b:3a:a7:65:91:1a:99:d8:d7:25:da:bd:99:
7a:fa:70:8e:85:5e:ce:41:60:23:9f:56:0f:01:73:45:c4:4a:
d8:37:66:b9:24:88:51:a6:23:3b:5c:ce:99:b0:07:05:ef:b4:
89:c7:84:c6:21:40:a5:c7:16:8a:dc:9b:51:6a:89:a7:f2:f4:
f6:2c:9d:5f:5f:61:27:b2:a5:d2:a2:33:0b:cc:eb:48:ab:bf:
82:39:e8:da:ad:e6:c1:35:5d:f9:5a:8f:d9:85:82:8a:49:0c:
fd:b4:a5:ce:89:f9:04:12:4d:7e:5b:97:0c:1d:a1:dd:13:75:
48:83:48:2f:51:3d:cb:e6:7a:9e:32:b7:b9:91:e7:cf:44:dd:
89:45:0d:d2:e7:8a:ab:47:73:8f:cf:5e:b1:68:1e:fe:7a:1d:
86:87:b8:9c:79:04:46:66:02:69:af:f6:35:77:06:7b:96:78:
48:c1:e7:00:40:5b:dc:a0:88:11:00:c8:c8:c6:a8:42:86:27:
35:10:6a:1e:7e:3a:32:f8:e9:8d:cf:12:7f:05:7e:78:b9:db:
ae:ec:66:43:0d:49:4d:21:98:d8:36:a5:4a:eb:c7:88:d0:78:
05:50:3c:55:92:1e:b1:86:22:62:6c:58:e3:48:f1:db:a0:a3:
7b:4c:23:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:43:00 2026 by rpki-client