
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
File: ItPpdE2tSXUDbMQirBHEBHIOZuo.mft (raw, json)
Hash identifier: JlSlgeMGIYvo8zUWDF4wvHncY2muL3HL8zB1PP4EK0Y=
Subject key identifier: F3:07:84:3D:88:99:D2:70:C4:F8:A7:0F:69:B8:A3:84:EB:CD:27:E6
Authority key identifier: 22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA
Certificate issuer: /CN=A917A4F7/serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA
Certificate serial: 01B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
Manifest number: 01AF
Signing time: Sun 01 Mar 2026 04:45:06 +0000
Manifest this update: Sun 01 Mar 2026 04:45:06 +0000
Manifest next update: Sun 08 Mar 2026 04:45:06 +0000
Files and hashes: 1: ItPpdE2tSXUDbMQirBHEBHIOZuo.crl (hash: qpQXxX+ej+mRCyeG3XhFoF6STap3Glz+eOCQ8XYJfC4=)
2: 9BE3C7087E8311EEBC7E6681C4F9AE02.roa (hash: gkpGu4s3lw8zurLXdvn6Zq+w59lx0+P+q37arJjTECg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl
rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A4F7, serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA
Validity
Not Before: Mar 1 04:45:06 2026 GMT
Not After : Mar 8 04:45:06 2026 GMT
Subject: CN=69a3c452-e824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f4:d5:35:57:f1:cb:39:a1:b8:27:38:65:10:
77:be:07:58:11:bf:4e:8b:76:08:95:ae:ad:b2:16:
37:e4:85:3f:17:58:fb:b8:f5:5d:8d:c8:d9:5f:c3:
0e:ea:37:ae:b0:47:ff:c4:ac:c8:dc:d9:46:a9:a3:
44:75:54:8b:52:1c:92:53:03:f4:81:0b:b8:37:2b:
45:ec:d9:86:57:2e:64:08:4f:fc:e5:f3:88:c4:ac:
90:b0:87:cd:3c:cf:3c:5d:ab:84:2a:e2:92:bc:61:
f3:5a:b7:78:57:b8:2a:e8:c2:17:87:99:58:6d:1b:
d1:79:3a:5b:0e:e6:da:5d:de:46:2d:85:39:f5:7e:
1b:39:56:bb:2d:6c:18:34:c3:12:1b:b2:d3:85:85:
5b:57:bb:03:f7:e0:82:0a:11:48:2c:2d:aa:8c:e5:
e1:5c:8e:1a:5c:31:f1:06:81:2f:b8:76:7c:ce:d3:
f8:2f:96:f6:7a:19:3a:64:68:e9:bc:7a:0d:2a:4c:
18:33:94:88:d0:4f:ff:bb:66:fa:a8:91:4e:6c:52:
ad:f6:7c:d9:ea:8a:e9:18:a7:7d:14:63:98:fe:b7:
94:f7:2e:08:6a:6a:8f:c3:79:f2:76:32:ae:db:03:
26:8d:d9:e1:63:fe:57:e8:7c:f5:4e:56:f2:7d:b9:
6f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:07:84:3D:88:99:D2:70:C4:F8:A7:0F:69:B8:A3:84:EB:CD:27:E6
X509v3 Authority Key Identifier:
keyid:22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:a3:bc:b5:de:94:98:f2:db:be:13:97:1b:1d:18:f0:84:ae:
5b:0e:ad:70:89:bc:52:c1:be:e6:af:7b:2b:89:18:58:d1:5c:
35:dd:c1:8b:3e:dd:88:82:12:8c:58:92:d8:62:b1:54:5a:b5:
1f:2c:4d:16:ff:64:64:55:4d:12:79:a9:3d:81:dc:28:25:0c:
bd:1f:57:62:12:52:87:f4:b2:e4:d0:69:28:b8:43:6e:b2:50:
67:d5:38:71:10:3b:fe:66:55:c8:c1:94:ae:b4:75:e8:c6:3b:
c7:06:46:ba:59:14:c1:35:fb:b9:ec:58:4b:53:1b:e3:5b:68:
15:d2:99:ba:bc:9a:e6:14:c8:63:1b:02:29:d9:09:5c:9f:c3:
e8:32:bd:4c:58:79:2b:b0:00:28:65:76:86:8a:69:27:fb:36:
b2:be:83:6d:80:63:42:43:2c:3f:e5:b8:7d:4e:14:59:6c:eb:
7d:7e:b5:5c:ff:a2:bc:2c:01:0d:55:6c:27:00:fd:98:1c:fe:
0c:f0:24:5c:2f:88:c4:a7:c0:26:ef:ea:87:e1:ab:9f:86:fe:
1a:20:ec:e9:e4:21:ed:a1:a3:84:1a:33:2d:ea:7c:b0:43:12:
0b:02:5e:c4:4c:f5:48:0e:cd:2c:fc:0c:70:b0:6c:fb:03:57:
9d:90:61:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:12:09 2026 by rpki-client