
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft
File: 09PYYPhoyT7RDi7VqXqHlFTITBY.mft (raw, json)
Hash identifier: erx1gm8mds2ioi0YYJg+3h1nMIIDCz43O1MrxHY444g=
Subject key identifier: E7:73:CC:E3:AF:0D:25:B5:E8:A8:4C:EE:54:F4:B5:1E:6A:48:6D:B8
Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16
Certificate issuer: /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16
Certificate serial: 024C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft
Manifest number: 023C
Signing time: Thu 23 Jul 2026 03:48:52 +0000
Manifest this update: Thu 23 Jul 2026 03:48:51 +0000
Manifest next update: Thu 30 Jul 2026 03:48:51 +0000
Files and hashes: 1: 09PYYPhoyT7RDi7VqXqHlFTITBY.crl (hash: MfG9xQNeFrRvwJE14HgaNEwITVoLT7EFspErW5CFc/I=)
2: F9A783F2352C11EEAD7A4625C4F9AE02.roa (hash: gICWDBNRkhIBX51TTa/2nd2iTKD3rPgiI0hCao1cXuE=)
3: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (hash: P7HUOGJdCQCZrbLvbeaHfTB6gQvyFKH/g1HFqHakvJs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl
rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16
Validity
Not Before: Jul 23 03:48:51 2026 GMT
Not After : Jul 30 03:48:51 2026 GMT
Subject: CN=6a618f24-6dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:e4:78:00:12:30:10:55:e9:26:1d:ee:bd:
98:81:6f:35:39:c3:cb:40:a3:d1:25:a1:a7:af:9a:
8f:c9:32:b2:cb:e1:ac:7c:87:8d:76:43:1e:d6:26:
5f:7a:b7:96:1d:21:e6:f4:4d:74:45:90:54:97:41:
24:86:86:d7:c1:f3:5a:5e:bc:68:cc:12:ed:b9:3d:
8d:a4:27:fa:c4:53:61:7a:21:6a:d8:a7:e4:b8:5d:
a8:58:44:de:16:b9:a0:c2:2f:a5:7b:79:c2:a5:30:
05:2e:f0:c6:75:92:e3:c9:c7:78:38:dd:d0:e7:e7:
69:3b:2e:ea:c1:b9:ab:3f:95:75:60:ad:08:db:fd:
71:9c:fa:9d:58:a1:ba:ce:26:36:79:fb:bd:33:85:
01:f7:ec:f7:8e:94:26:0a:3e:1f:2a:88:a8:3f:11:
2e:fd:05:85:e8:90:a2:3a:33:3a:5f:9e:be:1c:fc:
85:ce:9b:4c:e6:58:b0:5b:8b:60:60:43:eb:3a:7e:
95:4b:c3:e7:88:91:70:f2:73:a8:42:77:1a:9d:e7:
51:9d:98:f9:c1:fd:ef:5f:ed:66:0a:df:16:ea:e0:
cb:1a:f6:6c:9b:d2:73:f2:50:87:ac:6b:ba:ee:2d:
86:66:09:0e:b8:ad:ca:16:d4:1c:c6:8e:9a:af:45:
5e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:73:CC:E3:AF:0D:25:B5:E8:A8:4C:EE:54:F4:B5:1E:6A:48:6D:B8
X509v3 Authority Key Identifier:
keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:d5:b1:da:f4:3f:7d:68:e5:7f:10:a1:76:ac:87:7c:2a:68:
40:da:b3:bc:21:a5:42:b4:0f:7e:fa:fd:13:e2:7e:08:45:99:
4d:8a:3f:11:06:f9:7e:eb:e4:69:ff:fc:34:a5:9a:f6:f2:e5:
f2:90:f7:4a:18:0d:90:4c:01:f7:c7:07:95:32:e0:6b:3c:f1:
7f:e8:26:12:2a:de:68:f7:32:fa:b0:4e:ca:63:17:f2:36:cb:
36:1f:6f:fb:c8:3e:3d:1b:f9:91:4e:ed:61:48:f9:e9:50:5d:
f8:92:0c:f3:4d:9a:c3:61:ad:ba:af:1e:f6:ac:ac:6c:4d:fc:
2c:81:a7:be:7f:d1:f6:73:cd:cb:a3:3b:2d:0c:64:46:56:99:
06:74:a4:ec:41:12:ac:de:dd:bc:0c:d4:79:ad:44:2f:82:4a:
3b:30:c4:f2:91:2e:e2:9e:e4:b6:db:26:a1:99:c2:92:e0:a1:
3e:71:4f:29:f8:b1:ae:a9:60:0f:39:fb:2c:1a:bd:a3:2e:5f:
da:6f:94:d0:68:e0:12:a7:fc:43:f7:22:31:9e:f8:72:76:98:
b8:31:bc:0d:12:71:8b:d1:7b:e9:5a:ed:2d:fc:87:5e:18:17:
7c:a3:f7:6f:47:cb:77:50:eb:d5:24:18:7f:2e:d4:85:f3:06:
67:b1:b5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:01:23 2026 by rpki-client