
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft
File: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft (raw, json)
Hash identifier: 6ja03E83Q025KmhWokf1I/evFvzN79D00p4FROh8v+c=
Subject key identifier: 2F:A1:9D:EC:7F:49:9D:62:16:FD:11:B6:DC:72:81:15:BF:C5:E9:6D
Authority key identifier: EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26
Certificate issuer: /CN=A917ACF1/serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26
Certificate serial: 0492
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft
Manifest number: 0489
Signing time: Sun 20 Sep 2026 23:51:28 +0000
Manifest this update: Sun 20 Sep 2026 23:51:28 +0000
Manifest next update: Sun 27 Sep 2026 23:51:28 +0000
Files and hashes: 1: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl (hash: KacQ5TVCkXs7N3ZAw9R02YqXoB72zOXnCsMBdF73Kr0=)
2: 5895821AB62611ECB410C81DC4F9AE02.roa (hash: t3Xie5IDxeCZBCdmI9sHWzRfklnVyurzehxhGsRDsok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl
rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:51:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1170 (0x492)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ACF1, serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26
Validity
Not Before: Sep 20 23:51:28 2026 GMT
Not After : Sep 27 23:51:28 2026 GMT
Subject: CN=6ab07180-95f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b8:e2:e8:78:31:f3:87:8b:9c:8e:e9:66:09:
d6:f4:58:47:e2:b5:f0:75:67:c0:b4:83:ba:5a:41:
92:25:ff:76:1f:b3:19:0b:52:16:bb:a9:45:92:7f:
5c:2c:5f:85:26:be:42:06:42:17:33:65:8d:63:50:
8d:d1:23:17:a4:43:1e:27:5e:00:6d:d2:31:bb:a4:
99:58:1b:fb:7f:82:d5:78:f2:34:a0:68:ea:35:0f:
43:49:c5:28:fc:75:bd:53:ce:51:d2:78:74:27:d5:
67:77:9d:43:24:74:f0:d7:eb:c2:2f:e0:1b:e9:f3:
48:48:f7:ab:da:5b:b5:82:ce:58:51:8c:3f:c3:02:
48:d5:04:a9:37:c3:6f:74:7a:79:6c:93:04:25:26:
fe:fb:13:28:18:8d:99:5a:d5:60:78:20:69:20:57:
a1:59:59:59:91:a9:1c:57:9d:b4:ee:7c:be:bf:ba:
75:13:0b:cd:72:ea:ff:aa:19:0f:57:02:d3:ad:1c:
d6:04:2a:d4:76:76:2a:da:d3:19:e0:8f:43:97:b1:
a3:b5:52:61:3a:05:3c:2f:13:67:e6:ab:87:e3:57:
35:dd:52:b7:8c:18:b6:26:fe:a3:21:99:55:a0:73:
8d:9c:a3:b8:0b:8a:b0:f0:41:36:c4:27:27:7d:90:
9f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A1:9D:EC:7F:49:9D:62:16:FD:11:B6:DC:72:81:15:BF:C5:E9:6D
X509v3 Authority Key Identifier:
keyid:EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:d8:b7:db:92:92:be:e6:8f:1a:fc:bf:6b:78:94:92:c8:6e:
f6:70:45:13:8a:77:d4:b5:79:91:8f:5a:ca:d6:5a:a2:6c:60:
e8:ee:09:73:e6:d0:ef:6a:27:c0:29:68:eb:0b:75:99:f3:40:
f6:31:42:86:1f:1d:a7:18:08:02:48:f5:5a:c2:b3:6e:e8:bc:
79:8a:03:ce:86:a4:5a:d7:42:9d:4f:9c:1f:c3:0b:db:9e:bf:
0b:39:84:29:bf:eb:fc:67:ca:38:14:7d:55:7c:39:10:63:b1:
8e:3a:57:1a:3d:ed:9d:76:c7:84:47:2f:f6:53:fc:b4:ce:30:
68:bc:cb:4b:5e:f5:19:6a:62:d8:0c:81:bc:37:84:de:24:01:
94:dc:d5:17:f3:6d:8f:3d:4b:70:9b:2d:aa:dc:a4:40:f4:07:
5a:3e:e8:67:8a:7d:1a:f2:c7:ef:3e:32:7c:d7:d7:82:06:55:
f2:c4:0f:35:ec:e8:05:d9:a7:7d:dd:11:ec:8a:86:c9:5d:20:
e8:91:e0:09:66:f0:aa:f8:04:66:5d:31:63:92:2f:6b:c7:9a:
7f:e6:1e:22:23:db:06:44:f4:a1:d2:52:fb:34:54:ea:28:14:
9f:ee:99:51:5a:9a:c6:01:c5:59:5f:91:12:30:cc:7f:b9:da:
98:5c:53:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:01:26 2026 by rpki-client