
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft
File: IokuPYxEn1qaxkz8tjS1n2xTE2s.mft (raw, json)
Hash identifier: 2F/THIv67a9QQbKG7gmM+qSEezBKMzz/hZS5rKN/cSI=
Subject key identifier: 19:98:49:D6:41:20:B8:7A:B1:18:9F:CF:14:A5:60:D6:D0:8B:CC:3E
Authority key identifier: 22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B
Certificate issuer: /CN=A917BB59/serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B
Certificate serial: 0884
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft
Manifest number: 0869
Signing time: Tue 28 Jul 2026 21:15:08 +0000
Manifest this update: Tue 28 Jul 2026 21:15:08 +0000
Manifest next update: Tue 04 Aug 2026 21:15:08 +0000
Files and hashes: 1: IokuPYxEn1qaxkz8tjS1n2xTE2s.crl (hash: 7w+P1B9y2s7VfYNwsLV5iTg+mtlSozvPxs+vJwIIkLM=)
2: 7BF36C680DCB11EBA17D032EC4F9AE02.roa (hash: 0vX93cCOuqbwpgu8S0Bk/GjET88268IQ9XQloq1HMHg=)
3: 8FEA9564C2AE11EB94777A0CC4F9AE02.roa (hash: 9HLPq0CQbV7BB1rdV8LiO+yFSw/cEBXh7bi0v397em8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl
rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2180 (0x884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB59, serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B
Validity
Not Before: Jul 28 21:15:08 2026 GMT
Not After : Aug 4 21:15:08 2026 GMT
Subject: CN=6a691bdc-db15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:66:af:7b:d1:b4:4a:60:a5:8a:56:9b:b4:83:
97:02:55:aa:ff:e4:3f:bc:53:98:4c:24:3c:02:52:
11:05:3a:36:0d:de:d3:48:0a:04:84:e6:fb:06:91:
14:f3:f2:4a:7d:b2:94:46:07:e0:c1:d5:26:38:01:
da:f8:99:49:54:46:e3:e2:83:75:02:a8:e7:67:dc:
d5:60:e9:66:f6:bb:1f:9b:eb:c6:24:af:2f:a0:02:
c4:e0:df:3e:87:88:98:74:9d:41:7c:50:b8:34:25:
c7:4a:ef:8c:bd:81:bd:c5:a4:55:14:a7:b7:2c:ca:
af:49:66:9d:b4:9c:b2:bd:bd:99:84:bc:79:c3:f7:
fa:13:a4:ce:dd:e5:b2:4f:84:4b:8f:7c:cb:7e:fd:
10:e1:f3:7a:b4:4c:d2:1d:82:df:32:52:ec:25:80:
69:70:62:3f:d2:f1:3b:b0:cc:66:e1:84:f8:f2:9b:
00:86:22:10:69:4c:0f:62:4a:bb:cf:17:57:3e:49:
99:38:27:f6:e9:30:2a:6e:97:83:2f:ed:26:ff:31:
9e:91:2f:55:e4:45:dc:74:c6:07:87:fc:df:18:da:
16:26:e4:14:04:82:ae:c8:39:e8:00:36:3e:5b:5d:
5d:1e:8e:f6:3e:28:90:23:7e:c3:62:8e:42:86:92:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:98:49:D6:41:20:B8:7A:B1:18:9F:CF:14:A5:60:D6:D0:8B:CC:3E
X509v3 Authority Key Identifier:
keyid:22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:c3:eb:25:f4:a6:1b:b9:33:53:c5:10:0b:5b:3b:04:9a:44:
cb:55:26:21:da:f2:8f:93:38:53:f5:cd:95:1f:e9:d0:31:88:
da:cd:ee:cc:22:04:6c:a3:58:5d:66:81:75:73:d8:fb:f0:38:
6c:dd:a7:57:7f:ca:6d:42:e6:d5:e7:24:2f:7e:d9:28:65:3a:
a7:7b:60:bf:d5:11:bf:a4:f8:38:3b:be:64:80:53:f9:13:01:
24:cf:34:15:98:aa:56:c6:14:95:d3:08:37:32:4a:36:e3:04:
44:13:c0:29:eb:d0:69:27:a7:d2:4a:c8:f0:ab:fc:1a:6d:af:
fc:a3:8f:27:18:0b:a4:2e:33:26:c2:cd:6e:8b:e8:22:45:fd:
4f:59:94:89:ed:d1:9a:7d:3f:30:57:ab:95:41:e1:3c:e7:5b:
43:8a:e4:70:00:aa:ae:78:13:95:e7:dc:85:33:dd:de:fd:39:
76:c4:45:e3:eb:39:e8:58:66:28:0e:89:66:b1:64:88:03:7d:
e1:95:03:b6:ef:bb:57:13:32:f0:b9:4d:85:0b:97:6c:fb:69:
21:99:83:ed:37:37:42:9d:b8:75:6b:e1:cd:c5:e7:50:0b:bd:
28:f8:f0:ad:c3:f8:c3:39:7e:a6:0c:0c:eb:ba:26:6d:0a:93:
79:c1:29:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:32:12 2026 by rpki-client