
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft
File: ItAhSIrhMX_JXHSjiCUlSreSYTc.mft (raw, json)
Hash identifier: WEakiBJBbuxYSWVP9BiQM87YZZj/3gJDu/9C32KuWSk=
Subject key identifier: 63:76:6E:5A:FF:8C:98:C7:25:42:BC:C9:C2:61:A6:0E:AB:B2:F1:F7
Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37
Certificate issuer: /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137
Certificate serial: 020B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft
Manifest number: 01F2
Signing time: Sat 13 Jun 2026 03:31:39 +0000
Manifest this update: Sat 13 Jun 2026 03:31:38 +0000
Manifest next update: Sat 20 Jun 2026 03:31:38 +0000
Files and hashes: 1: ItAhSIrhMX_JXHSjiCUlSreSYTc.crl (hash: OMFCE7JMfva8piQpFWGQos7CHuQivUroed081v3y5CU=)
2: E830A74E71ED11EF9D592D1AC4F9AE02.roa (hash: Ex6856vtPlckr5FuK0PcSYmdaB3fVcZv426LeJ8/9Ks=)
3: 97C7ABEE8EAA11EEA8406C67C4F9AE02.roa (hash: gBKnDCCLWxnGlGgKbKhx7Kuw4fUvutFlS6nnCXgPjME=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl
rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194C67, serialNumber=22D021488AE1317FC95C74A38825254AB7926137
Validity
Not Before: Jun 13 03:31:38 2026 GMT
Not After : Jun 20 03:31:38 2026 GMT
Subject: CN=6a2ccf1b-3f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:b2:4a:9b:f8:c2:d5:1f:e1:ea:ae:7f:a8:
f1:84:f6:00:6f:73:ca:6c:70:28:1b:e9:22:8d:aa:
73:3f:d3:9d:c0:43:67:0d:16:ee:9a:c7:e9:9e:05:
79:51:bf:b5:7b:04:f8:a2:25:dc:6c:f6:b7:f8:bd:
d7:82:75:15:ae:42:9d:2d:6a:4b:33:2f:f5:81:5e:
65:57:74:96:bc:0e:f7:fa:7a:5f:2c:9f:f0:11:f8:
d1:8b:3e:79:4a:84:f8:c4:63:fe:ea:0d:8f:6b:b4:
cb:ac:20:36:45:99:fd:45:d7:23:03:d4:c7:3b:b6:
90:c8:56:e3:a0:a1:6f:69:62:b4:0f:68:43:59:91:
3b:b5:ba:2e:4e:0e:7d:5e:13:70:73:0b:63:63:a0:
96:80:25:32:14:12:56:82:f6:f0:85:15:7f:98:82:
9b:53:50:8a:47:55:d3:8d:e5:dc:7c:90:1f:f1:3b:
d3:43:c1:ad:ee:f6:bc:20:72:da:69:71:1a:c9:fa:
10:19:25:6a:40:1e:4f:ba:2d:d3:b7:82:2a:86:55:
31:f1:88:1d:e9:4f:f1:37:39:ac:8a:99:5a:aa:7f:
6a:78:2e:cb:a0:34:10:47:b4:c4:97:f7:7f:c4:b4:
72:62:f7:44:fe:2a:17:e4:90:cf:1d:91:3b:9f:b7:
14:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:76:6E:5A:FF:8C:98:C7:25:42:BC:C9:C2:61:A6:0E:AB:B2:F1:F7
X509v3 Authority Key Identifier:
keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:98:13:9a:c8:83:ba:a7:1f:7b:d1:fd:7f:51:80:db:63:77:
32:50:05:02:f0:b0:9a:e5:a6:ca:43:98:b0:f5:f4:18:f2:47:
19:3b:13:d6:b6:e2:62:af:c7:2a:39:c8:78:4e:22:53:f5:0f:
3c:72:d9:3d:d9:1a:17:0a:28:42:a9:72:c6:9f:30:16:e6:30:
99:55:3d:4f:9c:4a:a7:08:79:c0:65:40:b0:a4:75:9a:60:ff:
16:be:14:63:b4:e3:bd:a7:cc:e2:ca:5d:b5:a3:02:4f:ac:18:
5c:91:86:8a:a7:3d:33:83:da:c2:e5:85:9d:4a:ba:a3:2a:3a:
b7:65:2b:e9:31:ad:e1:d3:84:94:27:70:12:5b:7c:30:59:72:
17:a8:6a:bd:91:7b:ef:de:dc:00:3a:3e:2d:4b:bc:41:47:87:
aa:7a:a1:bc:b0:6c:d1:05:13:4d:48:cc:82:f0:76:7a:86:e8:
50:d0:14:cc:08:b2:84:f3:8a:b9:03:7d:a2:22:49:5c:f3:2b:
ea:0e:79:8a:20:34:e3:e7:41:cc:24:dc:55:52:f1:25:a5:ab:
c9:b6:b1:f7:a9:ff:7c:d7:ca:0e:d5:e3:1a:12:bf:13:f1:be:
46:aa:03:af:d8:5e:54:f3:2c:da:1b:50:39:0d:85:e5:2e:6e:
ef:d4:aa:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRDNjcxMTAvBgNVBAUTKDIyRDAyMTQ4OEFFMTMxN0ZDOTVDNzRBMzg4MjUyNTRB
Qjc5MjYxMzcwHhcNMjYwNjEzMDMzMTM4WhcNMjYwNjIwMDMzMTM4WjAYMRYwFAYD
VQQDEw02YTJjY2YxYi0zZjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq2eySpv4wtUf4equf6jxhPYAb3PKbHAoG+kijapzP9OdwENnDRbumsfpngV5
Ub+1ewT4oiXcbPa3+L3XgnUVrkKdLWpLMy/1gV5lV3SWvA73+npfLJ/wEfjRiz55
SoT4xGP+6g2Pa7TLrCA2RZn9RdcjA9THO7aQyFbjoKFvaWK0D2hDWZE7tbouTg59
XhNwcwtjY6CWgCUyFBJWgvbwhRV/mIKbU1CKR1XTjeXcfJAf8TvTQ8Gt7va8IHLa
aXEayfoQGSVqQB5Pui3Tt4IqhlUx8Ygd6U/xNzmsiplaqn9qeC7LoDQQR7TEl/d/
xLRyYvdE/ioX5JDPHZE7n7cULQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGN2blr/
jJjHJUK8ycJhpg6rsvH3MB8GA1UdIwQYMBaAFCLQIUiK4TF/yVx0o4glJUq3kmE3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM2Ny9DMkE3NjE5MDhF
ODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1YX0pYSFNqaUNVbFNyZVNZ
VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0l0QWhTSXJoTVhfSlhIU2ppQ1VsU3JlU1lUYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEM2Ny9DMkE3NjE5MDhFODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1Y
X0pYSFNqaUNVbFNyZVNZVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYpgTmsiDuqcfe9H9f1GA22N3MlAFAvCwmuWmykOYsPX0GPJHGTsT1rbiYq/H
KjnIeE4iU/UPPHLZPdkaFwooQqlyxp8wFuYwmVU9T5xKpwh5wGVAsKR1mmD/Fr4U
Y7TjvafM4spdtaMCT6wYXJGGiqc9M4PawuWFnUq6oyo6t2Ur6TGt4dOElCdwElt8
MFlyF6hqvZF7797cADo+LUu8QUeHqnqhvLBs0QUTTUjMgvB2eoboUNAUzAiyhPOK
uQN9oiJJXPMr6g55iiA04+dBzCTcVVLxJaWrybax96n/fNfKDtXjGhK/E/G+RqoD
r9heVPMs2htQOQ2F5S5u79SqZA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:47:20 2026 by rpki-client