
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
File: IUKTP75ufF-3Z6hqXiHdYBeOo50.mft (raw, json)
Hash identifier: IQ20BbveCCm/9vBF9HKjIGEp1IW5g2X3E5PeVbUsFiI=
Subject key identifier: E6:33:A1:17:93:43:57:3D:55:7E:02:06:20:72:94:0F:5B:34:6C:80
Authority key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D
Certificate issuer: /CN=A9168D00/serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
Manifest number: CA
Signing time: Tue 28 Jul 2026 22:50:40 +0000
Manifest this update: Tue 28 Jul 2026 22:50:39 +0000
Manifest next update: Tue 04 Aug 2026 22:50:39 +0000
Files and hashes: 1: IUKTP75ufF-3Z6hqXiHdYBeOo50.crl (hash: tWHZyb9ItXBhjbX2NA83QMnKWtNWgi9KmFHP1X1HZp0=)
2: E92F49E661EA11F087750C23C4F9AE02.roa (hash: TR3KMntthAwVhbNksuMzt3WXfXIJDm+0sJy4E3HFO4A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl
rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:50:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
Validity
Not Before: Jul 28 22:50:39 2026 GMT
Not After : Aug 4 22:50:39 2026 GMT
Subject: CN=6a693240-1edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ed:67:96:6b:4f:11:8e:f4:00:36:62:a0:65:
3d:f3:c2:b5:7d:41:2d:30:ac:f3:dc:87:8c:95:9b:
86:0b:6d:bf:16:8d:20:17:a6:c5:79:89:d2:06:bd:
f2:71:a5:68:a9:fa:14:df:51:54:33:cc:61:f3:66:
fd:1f:36:bb:e3:19:d4:28:68:54:12:cf:ae:45:b8:
13:cd:94:6b:1d:9a:a3:b3:1c:8e:5a:96:c2:5b:4e:
17:f2:39:1f:d8:a4:95:04:f2:1b:6e:3b:95:22:a8:
ff:a7:8b:c0:c1:d5:4f:34:43:50:14:49:87:a7:19:
cb:1d:7f:5e:02:b5:66:bd:a7:01:d6:7a:84:75:0d:
92:b5:f6:ab:6b:4e:b1:43:7d:72:01:81:bb:01:70:
61:2c:92:37:05:c0:a5:af:00:2c:db:53:82:0d:c8:
13:6b:b3:c5:b0:d2:fb:a5:41:14:c8:35:71:b5:7a:
94:13:10:9c:15:1a:d3:0c:52:8c:f2:87:49:68:49:
ba:f4:e8:5b:19:1a:71:c7:ed:1e:52:77:43:4e:ed:
18:ab:21:6d:55:0c:53:c1:a8:39:f3:0f:cc:9f:0a:
d0:65:c8:65:bf:0d:77:1e:51:4b:68:d8:4c:bd:79:
0a:d2:05:e1:cf:c1:b0:e3:a2:7b:02:93:7e:98:a0:
47:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:33:A1:17:93:43:57:3D:55:7E:02:06:20:72:94:0F:5B:34:6C:80
X509v3 Authority Key Identifier:
keyid:21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:0a:84:91:4d:91:0f:25:9c:66:ee:f2:46:51:bc:aa:0f:36:
f8:df:f4:be:0b:86:76:01:44:f4:95:32:f4:94:95:34:eb:29:
bb:27:5b:30:ec:2c:2b:6d:e1:99:e2:83:c4:60:1d:e1:57:ca:
12:e6:44:f2:38:57:cf:88:d7:ee:81:30:6a:50:b7:ad:88:d3:
5b:e0:c7:63:d7:d2:77:c6:37:12:28:e3:37:36:7f:64:2c:25:
6c:b2:3e:36:79:de:3c:19:ce:c3:b7:21:fa:fa:a9:3c:b8:9b:
ad:a4:47:6d:ac:4f:10:a8:ba:6c:f9:79:b5:7c:c6:13:da:4e:
d3:8b:85:00:31:c1:52:4a:e0:c3:88:18:2c:15:fd:d0:78:16:
e1:0b:54:67:04:36:09:52:de:11:ea:43:aa:3b:c8:9e:3d:0e:
43:d7:70:79:ea:c7:f2:4e:7b:d6:2f:0f:b7:a8:f0:db:87:1c:
22:d2:d3:00:72:68:06:8f:5f:f9:0e:8f:3e:0b:8d:44:62:be:
7a:bf:28:35:5c:07:a7:05:d1:4c:84:87:c8:24:38:5c:2b:86:
bf:78:41:32:cb:f5:5b:a2:2d:5d:d5:b3:29:fc:04:f2:e0:ef:
35:d3:b4:8e:55:3d:79:6a:fe:0f:8b:32:8a:6b:83:b0:18:48:
72:5b:62:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:39:18 2026 by rpki-client