
$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
File: cyJU29YY8YhtTfkgE5O_34ueAg4.mft (raw, json)
Hash identifier: ukrL7i0mB3woHDNQFS/zu8GogyNAJ2OuLi3MAHYrN/0=
Subject key identifier: 78:29:E0:57:77:7B:D5:5D:82:70:C6:6F:AC:2B:FF:D2:C5:1C:4F:1B
Authority key identifier: 73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E
Certificate issuer: /CN=A91142EA/serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E
Certificate serial: 0784
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
Manifest number: 20F8
Signing time: Wed 22 Jul 2026 16:06:28 +0000
Manifest this update: Wed 22 Jul 2026 16:06:28 +0000
Manifest next update: Wed 29 Jul 2026 16:06:28 +0000
Files and hashes: 1: cyJU29YY8YhtTfkgE5O_34ueAg4.crl (hash: IgrKVFHByhzLuuVvYaYzeyRCHvYftEcOnyfYE8U4Pwg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl
rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1924 (0x784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91142EA, serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E
Validity
Not Before: Jul 22 16:06:28 2026 GMT
Not After : Jul 29 16:06:28 2026 GMT
Subject: CN=6a60ea84-2530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3b:51:83:f4:1e:74:20:d5:40:d1:cb:fc:f5:
21:12:06:b5:60:c6:4d:b1:a3:ac:dc:6f:24:da:b5:
93:64:29:cb:63:33:4b:13:b3:fd:bf:dd:08:af:47:
98:5c:9c:4b:d9:45:b4:82:a2:85:ca:7e:b6:c6:18:
40:89:b4:f5:d7:6e:49:e9:e9:d7:11:2d:2f:8e:b8:
ac:57:4d:d5:22:38:8e:a9:cf:6d:43:be:02:f6:82:
f3:eb:4c:39:52:26:8f:19:34:3b:9c:32:e0:97:b4:
2d:fd:c6:27:4f:9c:ed:9b:30:2b:93:41:7e:83:ce:
79:e8:67:80:5c:19:cc:37:a6:c3:d3:c3:00:f1:db:
24:ab:79:48:6f:a1:7d:5c:e6:80:b2:21:79:7f:00:
60:9a:29:5e:0a:2b:53:f6:23:2b:1f:53:46:ef:c7:
67:71:7a:d0:9d:ef:d5:ca:c3:eb:b3:c2:f9:3f:d4:
9c:4b:37:b0:63:a9:65:ed:10:89:85:48:8c:d9:9a:
1a:b2:29:24:e2:69:c3:35:d6:0f:6d:7a:de:8c:09:
79:ea:93:62:53:cc:53:9c:a0:c2:67:25:d5:8f:70:
75:f0:de:35:f4:fd:d8:32:23:2a:1d:3e:a5:06:83:
66:30:10:9a:8a:e8:5e:20:64:aa:b5:38:fd:4d:7a:
5e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:29:E0:57:77:7B:D5:5D:82:70:C6:6F:AC:2B:FF:D2:C5:1C:4F:1B
X509v3 Authority Key Identifier:
keyid:73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e7:c0:0c:36:13:65:1f:06:ee:6b:aa:c1:2a:dc:66:d0:56:
97:a3:eb:e1:78:ab:1e:1a:5d:98:2f:27:75:af:bb:79:d1:8e:
0d:f2:01:d6:cb:58:27:2e:b6:b8:59:70:b6:a8:6e:b4:65:c8:
e6:7e:8e:aa:be:80:7b:81:20:b6:2c:c4:d9:d8:d2:9c:e8:21:
65:75:83:f5:66:a1:4d:5d:04:4d:ac:ce:fd:aa:11:ae:3d:ae:
44:b6:9b:59:5f:42:1b:14:9e:dd:db:9f:93:c8:96:ae:bc:b9:
b3:94:02:6f:09:be:cb:0b:41:a5:df:00:dd:36:2c:dc:74:ea:
0b:33:3c:7d:84:cc:2c:f1:53:f6:53:7b:a4:a1:ac:b4:64:e7:
64:08:14:78:aa:1a:71:ec:6d:29:65:c3:6e:d4:8c:0d:04:06:
78:35:3c:45:bc:36:82:7a:1d:9c:a9:a5:13:69:9f:5c:d6:a2:
cf:9e:18:fc:e4:57:97:1d:06:70:41:d0:6d:44:19:48:7f:74:
52:fb:be:0c:c2:2a:03:ea:92:10:c3:1e:31:e0:27:3d:11:7b:
60:7d:2e:5e:7e:1a:b5:cf:49:4a:17:e4:80:48:e1:a0:70:38:
80:c7:02:a8:1c:bf:e7:9e:30:da:f2:f3:fe:d1:7d:a3:56:52:
06:17:5d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:31:15 2026 by rpki-client