
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft
File: ivWYKUtrI6E57fVPJCi8YZZRqhc.mft (raw, json)
Hash identifier: RKHCtxSXjAxA5aQRXh9usltGrK4FgNlS5RROOAo1IMc=
Subject key identifier: 74:EF:53:1D:57:2E:0B:0E:C8:7E:9A:F3:69:A4:1A:76:62:F6:8D:D8
Authority key identifier: 8A:F5:98:29:4B:6B:23:A1:39:ED:F5:4F:24:28:BC:61:96:51:AA:17
Certificate issuer: /CN=A917DB77/serialNumber=8AF598294B6B23A139EDF54F2428BC619651AA17
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivWYKUtrI6E57fVPJCi8YZZRqhc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft
Manifest number: F0
Signing time: Sun 11 Oct 2026 06:57:38 +0000
Manifest this update: Sun 11 Oct 2026 06:57:37 +0000
Manifest next update: Sun 18 Oct 2026 06:57:37 +0000
Files and hashes: 1: ivWYKUtrI6E57fVPJCi8YZZRqhc.crl (hash: CD6/SKvLDJD/hABWQD9ZY1y9z+5XCGu9elVAHa0kM/s=)
2: 69F70CA058AC11F09233031BC4F9AE02.roa (hash: 5x5L97/2BZdvvgKkOU0ZIN1wQnp6OeudRNfppKCkvFw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.crl
rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivWYKUtrI6E57fVPJCi8YZZRqhc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 06:57:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DB77, serialNumber=8AF598294B6B23A139EDF54F2428BC619651AA17
Validity
Not Before: Oct 11 06:57:37 2026 GMT
Not After : Oct 18 06:57:37 2026 GMT
Subject: CN=6acb3362-d8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:ea:33:19:6b:80:cd:60:61:65:26:fd:b5:
65:ed:dd:bc:55:f2:b5:39:b9:86:97:0d:b9:a9:41:
82:4e:68:e4:36:ad:2b:e0:00:fe:9d:88:b3:01:c9:
bb:cb:71:32:e2:1b:ac:3d:9b:77:3e:b1:be:65:27:
94:b2:79:e6:87:03:74:cc:bc:09:e9:79:66:7d:70:
92:95:dd:99:ef:d4:90:8e:cf:12:3e:d4:06:fa:05:
23:b9:b0:8b:38:0c:5e:d4:f4:12:6d:7f:18:82:a3:
c8:a6:90:fc:5b:ec:fa:eb:a8:68:a0:2d:bc:79:25:
d2:14:55:f8:29:6d:ad:95:9d:f9:e2:42:ae:4f:1b:
79:71:51:4d:97:99:2b:23:96:e3:be:f3:e8:30:74:
84:ad:23:ad:7b:eb:32:1b:60:77:39:4a:73:cb:23:
c5:c0:4c:e1:b2:8b:92:52:7f:aa:35:cd:0e:ce:4b:
c4:b9:42:fc:8c:0e:51:66:c8:dc:84:32:e9:31:a5:
4c:61:e3:99:70:58:a5:b0:3d:a1:d7:58:2d:64:c4:
2a:d2:9c:b6:bd:cd:f7:51:52:d8:c3:e6:6d:f8:01:
64:04:68:33:c4:d2:eb:a7:16:07:44:a0:27:b5:d5:
90:79:f0:a9:e6:53:8c:58:40:cf:46:75:ad:64:c3:
6e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EF:53:1D:57:2E:0B:0E:C8:7E:9A:F3:69:A4:1A:76:62:F6:8D:D8
X509v3 Authority Key Identifier:
keyid:8A:F5:98:29:4B:6B:23:A1:39:ED:F5:4F:24:28:BC:61:96:51:AA:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivWYKUtrI6E57fVPJCi8YZZRqhc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:ed:d4:14:f0:f1:43:e7:0f:3c:fa:96:38:a6:42:6d:c6:48:
75:dd:b0:65:19:89:ae:5c:e2:f8:fc:bb:82:0e:e0:5b:5c:68:
b7:b6:c6:af:c4:02:74:17:67:d6:64:6d:7a:e6:72:30:62:d3:
43:e4:6d:12:43:47:78:1c:d5:21:72:43:61:9d:c0:ba:20:70:
6c:c5:60:16:44:6c:1d:9e:8c:54:fa:7d:3b:e1:f4:98:4b:08:
9c:59:9a:38:fa:46:6a:bf:6f:a5:60:92:47:f1:b2:7c:4d:ce:
1c:24:fc:05:1c:96:d3:66:08:55:a5:8c:8a:29:3e:d9:6d:18:
e0:a7:4a:33:15:2c:2b:ad:74:98:4f:ca:bd:e8:db:67:e9:34:
74:3f:56:55:e2:f4:3b:10:cc:be:58:a7:6d:e9:eb:17:d6:59:
17:76:67:be:48:a6:86:54:99:51:95:38:72:92:21:3d:b3:4c:
03:9f:e7:07:d2:4d:13:01:0f:88:b7:31:89:eb:b1:72:c9:8b:
c4:ec:a4:16:b1:30:8d:43:00:1f:c0:3c:c9:48:2a:42:df:0e:
b8:52:88:01:c3:75:a3:5d:7e:b9:6a:d0:48:58:bf:e4:9d:83:
f7:97:6b:3f:56:88:2a:ad:a6:87:6e:50:a2:e1:dd:67:1c:00:
4a:3a:b3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:01:05 2026 by rpki-client