
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft
File: iTEhgF-UFH033MbXS2N4Rvcjl8U.mft (raw, json)
Hash identifier: BwOPL98J31CjTp78SkLstFPSPR/IOI7YvcdKrodzq9U=
Subject key identifier: 08:B9:F5:BF:95:A2:29:CB:16:C1:AA:5A:E3:C4:0E:BE:14:90:80:A5
Authority key identifier: 89:31:21:80:5F:94:14:7D:37:DC:C6:D7:4B:63:78:46:F7:23:97:C5
Certificate issuer: /CN=A917E00F/serialNumber=893121805F94147D37DCC6D74B637846F72397C5
Certificate serial: 05E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft
Manifest number: 0772
Signing time: Mon 02 Mar 2026 00:27:01 +0000
Manifest this update: Mon 02 Mar 2026 00:26:59 +0000
Manifest next update: Mon 09 Mar 2026 00:26:59 +0000
Files and hashes: 1: iTEhgF-UFH033MbXS2N4Rvcjl8U.crl (hash: UOvSpuchEBmadf6mVOlt+D278WuJnKPee/MHZJVgH7w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.crl
rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1506 (0x5e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E00F, serialNumber=893121805F94147D37DCC6D74B637846F72397C5
Validity
Not Before: Mar 2 00:26:59 2026 GMT
Not After : Mar 9 00:26:59 2026 GMT
Subject: CN=69a4d955-315d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5a:50:44:89:9c:24:b3:c0:86:f6:00:86:72:
40:a1:23:07:4a:f4:7c:dd:ed:95:4e:ba:b4:34:94:
41:de:da:04:c7:03:6f:3a:cc:4a:b7:f2:97:b7:1e:
16:aa:24:5a:f8:bd:db:40:a1:4d:f6:c8:cf:63:59:
32:a1:eb:4c:64:a9:65:0d:08:03:aa:ef:ba:cc:c6:
81:82:dc:05:92:51:e9:df:7d:7e:28:b5:d8:db:c9:
96:c1:b4:f2:5d:35:da:4a:f4:84:90:54:fc:49:a5:
c9:52:0c:34:dd:54:86:e8:11:09:9e:74:01:99:ca:
3f:b0:c9:fe:19:7f:26:de:f9:5f:be:21:3b:11:87:
5e:63:61:a7:e9:fe:21:ef:19:d5:89:45:2b:9f:2a:
a4:a6:2f:7a:5f:60:ca:54:90:ea:c7:8f:63:b7:39:
1e:c3:00:a9:86:14:f6:6b:1d:4d:b4:2a:c4:44:05:
28:0b:b6:24:09:df:55:e9:16:ee:2c:60:4e:75:be:
10:8f:2f:88:d6:05:08:3b:07:02:88:c1:59:d1:b6:
19:53:60:4d:b0:2d:cb:37:df:7e:a6:cb:97:e6:1d:
1a:bf:27:e8:21:cc:83:ac:12:6f:42:b8:78:36:f4:
d1:17:a8:e9:f7:ed:8f:4d:8a:2b:42:84:3d:54:9a:
d8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B9:F5:BF:95:A2:29:CB:16:C1:AA:5A:E3:C4:0E:BE:14:90:80:A5
X509v3 Authority Key Identifier:
keyid:89:31:21:80:5F:94:14:7D:37:DC:C6:D7:4B:63:78:46:F7:23:97:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:a4:f8:1d:79:c9:99:ee:4d:d1:b9:52:4f:31:77:53:bf:26:
30:8d:c3:a3:d9:51:d2:53:4a:f9:b0:41:9e:89:6c:9f:8e:6a:
f0:e5:e4:a9:26:69:ff:27:08:29:b5:a4:c9:aa:0d:6b:22:2a:
f6:3d:4b:66:05:cf:29:25:9d:60:24:8d:fe:86:26:ce:d6:e5:
3e:38:7e:21:52:54:4b:8e:ea:75:7c:a1:f3:33:1d:84:62:4e:
e7:d4:99:fc:48:e5:d2:e8:df:1e:d6:71:10:0e:b1:16:8c:6e:
b9:9f:f4:da:80:da:90:b5:9e:85:72:04:26:a2:b5:e1:14:d3:
81:15:b5:a8:e8:42:eb:2f:1e:ab:13:d3:93:b0:74:1d:b5:38:
4d:ba:7f:5a:fd:2a:28:6e:3a:63:db:35:62:d3:e9:8e:32:d7:
89:15:17:36:20:e7:5f:64:5c:ea:4e:64:25:9d:e5:bf:fd:f5:
08:54:38:74:35:2f:89:ef:70:e6:af:c7:af:e6:a9:4b:c8:29:
bf:1d:f5:95:52:f1:1c:1c:8a:ef:74:73:5f:40:39:f4:3c:56:
7a:ec:78:97:fd:88:2b:59:27:56:7d:80:0b:3f:55:2f:a5:b6:
09:45:a7:6a:32:6c:2f:e4:c4:74:ff:77:fa:ce:e7:1c:41:0e:
52:35:b7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:44:56 2026 by rpki-client