
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json)
Hash identifier: KRG4VJlpYzqUlb5Y/VqkbeHJw6SiEju8QJvNBzeHZWI=
Subject key identifier: D7:DE:CE:5B:E1:7E:E8:0C:8D:07:3C:7F:EC:37:B4:0B:0B:04:0D:18
Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Certificate serial: 02E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
Manifest number: 02A9
Signing time: Thu 23 Jul 2026 02:42:24 +0000
Manifest this update: Thu 23 Jul 2026 02:42:23 +0000
Manifest next update: Thu 30 Jul 2026 02:42:23 +0000
Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: dL41sIkVCrgVCLlUI2rGmOjM3vSB6g6nuM08fRUyWo8=)
2: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: UJJEQF3bRcxEzs9FxUgqB61bTKSaDvDmCO8VGSiwpHY=)
3: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: nquKdBYb17f91RwkbMJz0YJOyUNBfY9B+zJHnQj7Zk8=)
4: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: LkF5oYRIVtud1TlZnXT75FqzafJ3cOedylwYvC/BvFg=)
5: 18498E84AA4911F0909AC335C4F9AE02.roa (hash: tL8r7ZwrA8G9Ow3+rgRwQ7tcji7gVdiRGZltZQ0+9g4=)
6: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: rX8iAImSKJ7BiKpMtoKCx7hmjEJ7mmhaIkBGctc7F3w=)
7: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: 8+Zy2+XVCGA+aHk/+gqV29ugPCKWdcGR+5k5svBK88M=)
8: C3481400917811ED904ACF83C4F9AE02.roa (hash: 4xjAkin/j6TIMIFKuvZwnU4pQkfqHu8yYEJNx0r+s1o=)
9: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: UTHobHs4mZ75Li/c4ZWnYTJJw1N7jQT2yw1kRGz49v4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 738 (0x2e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Validity
Not Before: Jul 23 02:42:23 2026 GMT
Not After : Jul 30 02:42:23 2026 GMT
Subject: CN=6a617f90-2052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:b3:2b:ae:f3:ac:1f:8d:b1:4a:f0:35:ca:
19:76:a9:08:84:ca:b4:f5:69:3d:cc:c8:75:2f:cc:
de:e4:65:13:aa:6e:59:23:d2:36:99:b0:03:ec:f3:
8c:5c:7b:34:d7:ae:cc:dd:f5:27:c2:05:ab:81:c7:
5d:41:a4:c3:80:8f:19:78:43:00:57:77:3b:66:db:
22:78:51:5f:8c:09:bc:bf:9f:76:4e:a9:4b:bb:aa:
4d:11:62:50:60:f2:6f:e6:13:77:cb:99:f4:1e:59:
f3:d7:ec:d3:5a:8b:0a:80:58:63:7a:e9:41:26:72:
c8:85:01:41:12:4a:99:ae:53:25:0d:bf:33:d3:73:
7f:a5:28:88:b5:b0:31:10:ee:e0:9f:a4:b6:35:27:
14:7c:08:4a:b3:05:8e:f0:7b:64:b3:b7:70:ee:4e:
da:08:e3:14:1b:5e:8d:43:fc:5e:bc:80:36:d1:1d:
75:0a:1f:59:24:cc:65:e4:6e:a1:11:44:9e:8f:e0:
23:67:d8:80:db:da:68:1d:85:bc:59:33:20:18:26:
79:9b:5f:48:52:b7:43:ed:d1:ed:8d:40:c4:8d:2a:
29:49:f5:60:ee:b2:41:b9:cd:a0:20:03:78:68:3b:
e9:bd:26:18:4c:ef:af:08:d4:4b:64:7c:d3:54:0a:
73:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DE:CE:5B:E1:7E:E8:0C:8D:07:3C:7F:EC:37:B4:0B:0B:04:0D:18
X509v3 Authority Key Identifier:
keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e4:42:64:b5:23:fe:96:3b:2e:1c:29:e5:bc:31:44:45:e1:
e0:48:e7:74:a6:8c:d7:d8:5b:e2:25:c5:85:c9:ad:90:b1:5d:
9c:ce:b5:5f:47:c4:53:57:6e:20:d9:eb:15:db:62:ac:2a:e8:
55:07:cd:06:8b:ed:78:b1:a0:e7:71:89:a5:0b:00:89:e4:0d:
c7:74:a0:19:38:59:5f:e9:41:3e:70:37:e4:fd:5f:f3:a9:00:
0c:2c:03:dc:2e:62:40:43:a9:a6:0e:62:27:b7:15:42:2c:e8:
fb:38:6b:e9:e8:f5:fe:64:46:69:95:6d:6c:84:cb:9c:9f:03:
72:77:59:6c:0b:98:75:30:10:a0:ae:9f:45:16:f0:a7:72:e9:
aa:89:6d:f9:b4:4c:f0:e5:e4:9f:30:86:c9:4e:ef:9d:e6:81:
61:1d:f8:f4:3a:59:c7:c0:1b:f2:b9:74:7d:06:29:09:74:01:
df:6f:06:12:7f:9c:1b:41:29:1e:93:97:ba:cb:24:51:3f:14:
9c:29:02:bf:5a:00:8f:9d:7f:2a:de:51:be:ab:fd:71:9b:24:
d8:68:86:5c:81:70:d3:62:ef:38:5a:5d:e8:1a:20:5c:a7:1d:
70:fc:0a:24:2a:68:52:8e:37:49:2f:e2:15:71:5f:67:0f:50:
37:4b:cd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:38 2026 by rpki-client