
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
File: IUKTP75ufF-3Z6hqXiHdYBeOo50.mft (raw, json)
Hash identifier: Ww7K2djaMKDiaZ/sgo72yR3PVha73AKKcRT9u9Wo4FQ=
Subject key identifier: 35:F5:0C:FD:64:3B:1B:23:62:51:72:55:AD:D7:30:6D:ED:E7:AB:01
Authority key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D
Certificate issuer: /CN=A9168D00/serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
Certificate serial: B6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
Manifest number: B3
Signing time: Fri 12 Jun 2026 22:22:36 +0000
Manifest this update: Fri 12 Jun 2026 22:22:35 +0000
Manifest next update: Fri 19 Jun 2026 22:22:35 +0000
Files and hashes: 1: IUKTP75ufF-3Z6hqXiHdYBeOo50.crl (hash: wStbo0sXHiBWf7bUWnbQ+8mmfVEUgBr8M8e5nSGXMqk=)
2: E92F49E661EA11F087750C23C4F9AE02.roa (hash: TR3KMntthAwVhbNksuMzt3WXfXIJDm+0sJy4E3HFO4A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl
rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:22:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
Validity
Not Before: Jun 12 22:22:35 2026 GMT
Not After : Jun 19 22:22:35 2026 GMT
Subject: CN=6a2c86ac-c46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:25:27:3f:d8:58:51:8f:fd:9e:ec:f8:61:
15:26:e7:3d:b5:fc:bb:17:7c:af:4c:7d:85:1e:2e:
c4:ec:6d:86:03:80:c9:e0:ef:e3:6e:18:0d:92:27:
f7:2d:8f:ee:cf:60:d8:53:0b:00:ec:6d:9a:00:6f:
b2:08:92:32:46:ac:a0:74:54:33:ab:48:42:2e:68:
da:dc:a4:79:12:4d:eb:04:53:90:25:bf:f6:88:34:
a1:b7:dd:04:b5:f3:24:ea:5d:de:bc:8b:c0:21:32:
05:d7:8c:94:f6:6c:7b:aa:a2:e8:e2:fc:d8:a0:de:
cb:fd:6e:e9:00:fd:21:aa:bd:d4:2e:c2:f2:e0:91:
e0:59:b8:17:4c:6a:71:7f:0f:36:52:c2:6a:fc:61:
84:92:98:61:31:77:bc:5b:1f:9b:2d:33:aa:7a:57:
ea:2e:39:c1:51:e7:61:a3:63:c2:8f:14:82:6f:11:
fa:84:4a:59:e8:15:c0:61:a6:56:14:ff:3e:65:5d:
57:d8:ae:b8:a9:e5:66:46:c4:39:39:04:50:de:54:
53:9d:d4:c7:6c:90:15:7a:f2:ff:2d:dd:a1:85:13:
4a:bb:d8:cd:d3:fe:28:cb:ef:39:b9:c0:7d:ae:c4:
c2:4f:69:80:f8:eb:a4:b4:18:32:36:75:db:39:93:
d6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F5:0C:FD:64:3B:1B:23:62:51:72:55:AD:D7:30:6D:ED:E7:AB:01
X509v3 Authority Key Identifier:
keyid:21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:65:45:8b:6e:af:ff:49:80:46:0c:ee:c5:0e:53:15:bf:24:
41:41:62:a2:25:f8:00:68:4d:81:74:bf:f2:1f:a6:b1:4b:dd:
e0:af:fe:98:02:16:ab:00:26:ea:b9:94:61:0d:7d:e8:cc:e2:
51:5e:c7:d1:2b:12:34:ff:e2:27:7f:c7:3e:5e:ae:8d:3f:db:
06:50:6b:7a:db:de:ac:dd:1f:c6:b3:66:05:80:81:93:24:b5:
06:09:e7:f9:4a:45:cb:9f:c8:81:2a:f9:6e:2b:2a:50:fc:fd:
2d:7f:17:e9:39:d8:80:13:60:c3:61:d4:0a:06:91:5b:8b:06:
17:ca:d8:c4:58:8c:39:d4:fc:70:73:45:9d:67:0a:d8:55:6c:
66:4f:be:41:6a:6d:89:18:6f:47:05:f5:b1:e3:ae:a4:7d:e0:
47:f4:cc:b3:25:05:76:63:f5:a7:f0:8b:f6:81:11:28:fd:2a:
7b:10:7f:de:b6:62:e6:60:c2:5a:cd:34:34:04:b0:9c:86:bf:
de:27:ff:d3:32:96:d9:e9:ba:9a:ed:a1:4b:c2:c9:87:28:e6:
fc:44:74:33:2d:e8:1d:7b:be:a1:cd:2f:42:aa:ec:33:3a:ce:
00:3c:30:69:99:91:9a:b8:cd:bc:81:af:68:b9:bb:12:3a:de:
38:4d:5f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:47:22 2026 by rpki-client