
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
File: IUKTP75ufF-3Z6hqXiHdYBeOo50.mft (raw, json)
Hash identifier: 2Fqo4I1ZmfRqrGS85ARCj4ysJ3dOzfwbLo7VGAa4R6I=
Subject key identifier: FC:41:B0:56:B5:98:41:E3:9D:FF:8B:AD:56:81:59:AE:A0:62:5C:70
Authority key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D
Certificate issuer: /CN=A9168D00/serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
Certificate serial: 7B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
Manifest number: 7A
Signing time: Sat 28 Feb 2026 23:00:51 +0000
Manifest this update: Sat 28 Feb 2026 23:00:50 +0000
Manifest next update: Sat 07 Mar 2026 23:00:50 +0000
Files and hashes: 1: IUKTP75ufF-3Z6hqXiHdYBeOo50.crl (hash: dY5zsTiovfGFHLfMuZDToSF/YnMUXXCaKA3dnWygUPk=)
2: E92F49E661EA11F087750C23C4F9AE02.roa (hash: tRrklyhCDRycwJaKFRwEZyyD1E5up+J5TjkxJCAvISc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl
rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
Validity
Not Before: Feb 28 23:00:50 2026 GMT
Not After : Mar 7 23:00:50 2026 GMT
Subject: CN=69a373a3-76bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:dc:2c:23:d2:86:62:ff:d2:2f:e6:7e:9c:
69:5a:31:1d:ea:8b:f7:49:87:45:68:5a:72:02:c2:
81:d8:17:cb:e0:bb:00:33:c9:c4:c5:d0:1d:2f:84:
35:6c:77:7b:f6:20:26:87:e5:20:dc:5c:b3:6a:54:
d4:47:b9:89:83:05:02:c5:13:03:80:35:03:98:4a:
d6:5e:5c:16:e4:5c:20:f0:e6:da:11:27:03:e7:e3:
12:94:80:98:61:e2:e8:ca:f3:41:15:b2:53:c6:34:
bd:c6:70:70:41:fb:65:04:49:b3:f3:83:52:e9:f0:
51:b5:f0:77:16:82:bb:9d:2d:ad:df:cb:94:9e:3a:
a1:f9:08:d8:62:15:bd:72:05:d7:e5:d7:c1:ca:15:
02:9b:8e:02:bd:17:a1:89:f8:33:95:da:03:2c:67:
32:3d:b5:ca:31:23:ee:0e:20:76:a3:db:0e:21:91:
ee:cd:d0:2c:d6:61:be:4a:11:9a:35:64:da:50:88:
12:b9:0e:ba:0f:72:b6:8d:e4:f6:3a:0b:a7:e1:d7:
4b:cb:83:32:39:cb:91:21:df:b7:e6:13:e2:f6:99:
96:7c:35:12:a8:d2:0a:73:15:62:3d:46:0c:8a:10:
e2:88:b7:62:06:93:c7:2a:9d:7b:cd:b0:b2:b0:24:
a7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:41:B0:56:B5:98:41:E3:9D:FF:8B:AD:56:81:59:AE:A0:62:5C:70
X509v3 Authority Key Identifier:
keyid:21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:e4:1d:c5:0f:ba:37:17:5d:1e:a8:09:03:37:7b:c9:d1:cf:
fe:f8:37:81:08:f0:90:9d:4d:d1:11:ba:6d:4d:e4:7e:75:77:
d1:36:b7:09:57:e0:89:04:49:8f:2a:70:33:c1:4a:2b:7d:9e:
9f:45:8c:e5:b5:1d:14:70:0c:d0:2b:b3:d8:df:50:e2:68:42:
53:c6:d9:f8:af:43:14:b8:c7:08:4b:83:b4:49:b9:4c:05:7e:
49:6c:83:72:e0:91:b0:6b:eb:e5:3c:b7:fa:f6:a1:7d:c4:02:
07:79:36:75:a6:9e:53:23:f6:70:09:04:17:b8:12:9a:e9:ec:
dd:d4:17:83:7c:73:20:50:42:e9:d1:f3:24:46:6c:3c:d6:b0:
09:fc:7a:82:b9:bd:2d:46:d7:e2:55:33:84:ca:7f:51:a4:78:
89:8a:1a:1c:2a:1f:e8:7d:94:de:8f:0e:7b:c9:95:ce:d2:83:
41:6b:16:f5:09:15:d9:14:f7:bb:6a:22:93:3b:24:77:5b:13:
0c:34:a9:9c:6f:44:c3:7c:6e:32:60:86:48:38:85:a8:f9:63:
f4:d7:fa:e2:d2:67:5b:d5:12:80:ff:dd:53:d6:79:29:7a:30:
f9:f6:5f:cf:0d:a0:aa:10:11:5b:48:d7:27:3f:15:55:32:bb:
38:1e:2a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:17:56 2026 by rpki-client