
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
File: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft (raw, json)
Hash identifier: 4GOM/qml7YuswIOd4O3EC+sb8qDDR6VL/rdD7rm8BU4=
Subject key identifier: D1:28:81:4E:39:9F:A1:BE:75:E3:8E:FD:E6:17:19:6C:FE:E9:34:D1
Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
Certificate issuer: /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Certificate serial: 087D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
Manifest number: 0860
Signing time: Wed 22 Jul 2026 21:28:23 +0000
Manifest this update: Wed 22 Jul 2026 21:28:23 +0000
Manifest next update: Wed 29 Jul 2026 21:28:23 +0000
Files and hashes: 1: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl (hash: lUTIvbbZPXEhPChCEC0Ggmh8PsTWHJLMiltXtiTJLXw=)
2: 7A299148000311F191DFD8AE3C6F56BC.roa (hash: CFc84riH2MB87zU/DpJZ0VZbTskfpT/fcnC+lNYeR50=)
3: 7AAA8154000311F191DFD8AE3C6F56BC.roa (hash: x6G+iXovRti/BntEfhaZ6wM5ntzRbJdW9j8h7+t6XG0=)
4: 8D0DD6C2690811EFAC6DE109C4F9AE02.roa (hash: XxTxvEaSE5hUqY+FgqA+JjfK7ug+VG+l0z5zQK56p5k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:28:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2173 (0x87d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130395, serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Validity
Not Before: Jul 22 21:28:23 2026 GMT
Not After : Jul 29 21:28:23 2026 GMT
Subject: CN=6a6135f7-e8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:88:a1:98:c1:8a:73:2f:a2:75:80:50:8e:
3a:fe:5e:f9:a1:51:f5:00:34:da:c3:fb:3d:23:ff:
ca:6a:3c:f9:28:02:72:7c:e1:ad:34:e0:3d:69:ec:
bb:12:59:bf:b8:bf:73:5c:99:87:2d:a2:39:55:9a:
e1:46:01:22:83:d3:c0:67:1e:ce:7c:1c:8a:d9:f9:
ab:1d:d5:4a:00:0f:a6:25:dc:dc:dd:7d:ef:e0:47:
3f:c8:5c:b4:3f:2a:db:26:91:d0:dc:05:ac:1a:95:
fd:3f:fe:65:ed:62:b4:83:de:09:99:a3:b5:35:be:
8e:e8:78:1c:bb:e4:b3:f5:39:2c:3a:8b:ec:6a:9c:
77:82:90:af:b1:13:89:c4:85:a6:09:1e:01:3e:f2:
a6:45:fb:c1:b7:3f:eb:30:2d:dd:d4:7d:31:68:0c:
15:39:4a:1d:6c:5d:3f:aa:45:48:7f:b5:00:a7:00:
71:b0:cd:4f:9a:8d:8d:8d:a8:18:74:9a:77:79:5d:
9a:60:3a:4b:69:c2:16:b3:71:19:44:3c:81:19:71:
7a:9e:50:79:f6:7a:aa:15:7b:6e:49:70:70:73:82:
07:11:8d:03:2f:b9:cc:dd:a1:3f:9b:85:34:34:69:
ee:da:8e:cf:b2:ad:b0:f6:5f:5d:f8:7f:ef:e3:a2:
71:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:28:81:4E:39:9F:A1:BE:75:E3:8E:FD:E6:17:19:6C:FE:E9:34:D1
X509v3 Authority Key Identifier:
keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:82:61:a8:21:45:d3:77:38:e4:bf:8c:4c:a6:2c:b4:de:00:
0d:7b:2f:30:4f:97:39:85:46:8a:b9:88:e8:1e:29:a1:13:b7:
5f:43:b5:e9:17:9e:c8:79:cf:3e:a6:f0:be:ed:32:a3:22:59:
f3:cf:5c:79:1e:b4:1d:2d:bc:f9:0a:7c:d7:db:03:95:40:2b:
2b:43:ff:e9:2a:12:91:55:c5:67:ab:1d:32:9d:7f:9f:72:f1:
8e:47:b2:06:01:9c:ef:01:ca:94:7a:f0:ae:26:9d:7a:37:0d:
03:e7:b4:e6:69:47:e8:ab:c4:ee:77:ad:23:6f:f2:19:a3:e8:
eb:f5:eb:f4:a9:d2:bf:e7:84:93:93:3b:f3:03:c1:28:f9:a4:
f0:64:cb:21:f4:df:e6:27:50:dc:5e:b0:f8:75:5d:85:fd:33:
1d:bc:2c:13:77:84:d9:08:35:58:f0:45:7e:69:cb:48:62:c3:
fd:30:e5:5f:1f:c9:27:0e:64:0f:0e:8c:db:a0:42:60:11:5f:
56:bc:77:c6:a8:63:eb:54:f5:74:9c:2f:a7:2e:00:27:86:a4:
5d:9e:6c:96:b8:22:e8:08:0d:12:06:be:92:c5:42:fb:9c:22:
ed:03:70:3c:84:00:8d:46:cd:b6:7e:3b:bc:2d:61:89:99:d2:
6c:7f:a7:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzAzOTUxMTAvBgNVBAUTKDYyQ0Q2RTY1MEQyMDlFNTBFRUZENjZDMzUyODhCNjA2
RjM2MkU4MEYwHhcNMjYwNzIyMjEyODIzWhcNMjYwNzI5MjEyODIzWjAYMRYwFAYD
VQQDEw02YTYxMzVmNy1lOGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm7eIoZjBinMvonWAUI46/l75oVH1ADTaw/s9I//Kajz5KAJyfOGtNOA9aey7
Elm/uL9zXJmHLaI5VZrhRgEig9PAZx7OfByK2fmrHdVKAA+mJdzc3X3v4Ec/yFy0
PyrbJpHQ3AWsGpX9P/5l7WK0g94JmaO1Nb6O6Hgcu+Sz9TksOovsapx3gpCvsROJ
xIWmCR4BPvKmRfvBtz/rMC3d1H0xaAwVOUodbF0/qkVIf7UApwBxsM1Pmo2NjagY
dJp3eV2aYDpLacIWs3EZRDyBGXF6nlB59nqqFXtuSXBwc4IHEY0DL7nM3aE/m4U0
NGnu2o7Psq2w9l9d+H/v46Jx6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNEogU45
n6G+deOO/eYXGWz+6TTRMB8GA1UdIwQYMBaAFGLNbmUNIJ5Q7v1mw1KItgbzYugP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDM5NS9FQjY3MjI2NDE0
Q0ExMUVCODE2NDNCMEZDNEY5QUUwMi9ZczF1WlEwZ25sRHVfV2JEVW9pMkJ2Tmk2
QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lzMXVaUTBnbmxEdV9XYkRVb2kyQnZOaTZBOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDM5NS9FQjY3MjI2NDE0Q0ExMUVCODE2NDNCMEZDNEY5QUUwMi9ZczF1WlEwZ25s
RHVfV2JEVW9pMkJ2Tmk2QTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1IJhqCFF03c45L+MTKYstN4ADXsvME+XOYVGirmI6B4poRO3X0O16ReeyHnP
Pqbwvu0yoyJZ889ceR60HS28+Qp819sDlUArK0P/6SoSkVXFZ6sdMp1/n3Lxjkey
BgGc7wHKlHrwriadejcNA+e05mlH6KvE7netI2/yGaPo6/Xr9KnSv+eEk5M78wPB
KPmk8GTLIfTf5idQ3F6w+HVdhf0zHbwsE3eE2Qg1WPBFfmnLSGLD/TDlXx/JJw5k
Dw6M26BCYBFfVrx3xqhj61T1dJwvpy4AJ4akXZ5slrgi6AgNEga+ksVC+5wi7QNw
PIQAjUbNtn47vC1hiZnSbH+nqw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:47:06 2026 by rpki-client