
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
File: 4YL5k2lSxCadZw2ldS3syGgjTxs.mft (raw, json)
Hash identifier: 5yc5Y/TfQ2WuWbk1gXiUACjbzv6XZ+Z7B0aeeyymFv8=
Subject key identifier: 51:BB:04:1A:44:66:1D:C1:97:98:C3:08:38:F5:C5:01:09:C2:E6:BF
Authority key identifier: E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B
Certificate issuer: /CN=A9126F2B/serialNumber=E182F9936952C4269D670DA5752DECC868234F1B
Certificate serial: 22B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
Manifest number: 2287
Signing time: Wed 22 Jul 2026 15:55:52 +0000
Manifest this update: Wed 22 Jul 2026 15:55:51 +0000
Manifest next update: Wed 29 Jul 2026 15:55:51 +0000
Files and hashes: 1: 4YL5k2lSxCadZw2ldS3syGgjTxs.crl (hash: G0deMWB15FaG1tin0NCUTtGOAgA1K0SPdbnvWB4sL/w=)
2: A8E9DE704B8511E7BF406610C4F9AE02.roa (hash: IV9u+bL98dY9vhWPzSb2VF1m+KNoLGbMT7wCZc4XtUw=)
3: B72206B4554B11E791BA5861C4F9AE02.roa (hash: i8ynNvisFun6KLb9XReq+KAa11jwRPXK2t/Z0bHo3gM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl
rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:55:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8880 (0x22b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126F2B, serialNumber=E182F9936952C4269D670DA5752DECC868234F1B
Validity
Not Before: Jul 22 15:55:51 2026 GMT
Not After : Jul 29 15:55:51 2026 GMT
Subject: CN=6a60e807-ecd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3c:dd:69:a9:d8:47:a2:df:0e:9d:28:72:15:
94:b6:c1:cb:f7:20:db:cf:ac:24:6d:ae:c0:4b:3a:
a7:69:11:4e:22:f4:d7:fb:b3:0b:a2:8f:69:08:58:
46:62:df:94:85:d7:9e:eb:63:ec:58:39:77:f6:85:
88:c7:4b:c8:c3:d6:5d:17:f6:e2:7a:bd:e8:9d:76:
00:ad:2e:fe:03:32:ed:4e:6d:0b:f7:af:94:f0:1a:
ae:a2:fc:d8:12:6f:4f:29:cc:c2:d2:b0:a2:09:06:
21:86:96:cb:82:b0:81:40:06:b4:ec:20:9e:08:cb:
41:0b:11:6d:1f:18:ad:c9:e2:e2:12:48:83:e4:83:
92:29:ac:92:b7:57:85:a2:a8:85:eb:0f:f7:1d:84:
87:56:22:49:5f:2a:e0:64:c1:74:70:e7:6a:be:66:
d5:eb:fd:e1:fc:39:12:68:42:1a:59:e8:cf:b8:89:
48:46:91:b4:9f:14:41:23:65:6e:33:9f:ad:7a:62:
c4:a3:e5:79:b3:1a:81:12:c3:d0:c7:93:6d:7d:29:
82:99:db:f1:f5:0c:79:71:ae:75:f5:0b:be:5f:50:
43:41:d7:cf:57:d0:9c:3c:c6:65:2a:b8:12:4b:38:
e8:f9:30:1e:8e:09:0d:a8:29:82:01:8e:88:56:e1:
49:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BB:04:1A:44:66:1D:C1:97:98:C3:08:38:F5:C5:01:09:C2:E6:BF
X509v3 Authority Key Identifier:
keyid:E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:a7:fe:1a:ee:9a:79:b6:43:39:c6:88:7a:81:a0:db:5a:f9:
0c:f7:f0:85:09:c7:cb:ed:90:85:75:0d:30:a5:ee:fb:c4:f4:
6c:01:5e:21:7e:79:72:f0:98:29:c8:ba:4c:63:3b:db:a6:b0:
68:a9:d6:aa:b9:43:4e:17:81:d8:69:ad:0e:2e:33:84:fa:37:
3c:bf:7d:55:17:e9:13:c8:7b:a7:06:30:3b:b2:24:93:42:7e:
1b:fa:93:ee:da:28:42:39:a7:e3:97:2c:77:c2:59:64:6b:55:
66:b2:83:73:36:6f:4b:51:2f:35:32:b7:bf:82:d8:c9:32:71:
9a:25:22:43:af:31:46:5b:b7:8f:19:7d:7a:4b:05:09:36:5a:
29:7a:f1:ba:cd:df:04:ed:65:f2:de:dd:ea:66:1e:59:7e:00:
0a:3f:e7:45:66:ee:f3:85:f7:6e:aa:80:b2:26:62:03:6b:ac:
1e:38:a4:8b:e0:54:3f:6f:3d:a6:6f:07:28:39:88:25:ec:81:
e1:bd:4e:34:33:9c:a2:44:e0:b0:37:48:1d:ee:d1:9e:66:08:
a0:fe:16:d8:4d:fd:7d:d6:c9:c8:99:b5:8d:1f:71:3d:c9:b5:
7d:63:03:e4:42:ce:e5:15:12:36:84:7c:b0:80:4e:85:c7:d9:
51:66:38:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:07 2026 by rpki-client