
$ rpki-client -vvf rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
File: y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft (raw, json)
Hash identifier: FUPSFPx5OEGQhV9lrViCMnaToAQ+icN1JNpLcgl2VtM=
Subject key identifier: 5B:1A:AA:AA:3E:B2:C7:61:B1:F5:8F:A2:41:27:4C:B3:57:A4:9C:6B
Authority key identifier: CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47
Certificate issuer: /CN=A913406B/serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847
Certificate serial: 04D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
Manifest number: 04C8
Signing time: Thu 23 Jul 2026 00:38:58 +0000
Manifest this update: Thu 23 Jul 2026 00:38:57 +0000
Manifest next update: Thu 30 Jul 2026 00:38:57 +0000
Files and hashes: 1: y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl (hash: EdqFJo9cNJMQvM/h9zQScagQ1+2W7iMFZ1Hf4zSoW5I=)
2: ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa (hash: m8HrRpjyvQWeBhp94E8HFgt5mQuokJM0t43Pm2rxy7M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl
rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1233 (0x4d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913406B, serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847
Validity
Not Before: Jul 23 00:38:57 2026 GMT
Not After : Jul 30 00:38:57 2026 GMT
Subject: CN=6a6162a2-1bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bf:7b:a3:39:f6:e9:7c:43:75:2f:2c:4d:36:
1a:0d:e6:cd:99:85:e4:96:a4:cf:61:62:f3:3f:e4:
a2:f0:b2:ea:58:52:f9:55:aa:e7:80:87:cf:01:58:
8f:29:ef:1e:12:eb:62:9e:70:73:8e:a0:db:b4:23:
4c:0d:4c:c6:44:c0:bc:1d:cf:5c:46:29:2d:15:7e:
fd:ea:cb:3b:28:38:9d:8f:4e:a7:65:3d:0b:b7:b5:
94:b8:a0:e2:37:ac:41:39:bf:17:45:12:69:89:af:
c8:17:11:8d:74:51:eb:18:26:b4:2b:3a:ca:27:5f:
b3:c9:71:98:97:fc:79:5a:d4:c3:28:d2:bd:d8:0b:
76:e5:1a:f5:c9:8f:df:94:c2:b0:96:8e:e7:9f:3c:
e9:1b:72:57:e8:48:63:f4:cd:00:4f:07:9c:b3:92:
80:7b:15:3c:11:d7:ea:17:c0:5c:ef:6e:7f:b4:ed:
f5:6c:4d:9f:f6:d4:da:7d:22:31:e8:cd:fd:01:d5:
f6:72:a6:97:a4:4b:66:b7:c1:72:25:4c:89:1b:27:
60:57:c7:a3:d7:86:48:39:22:9e:ac:c6:d9:14:2a:
92:88:6c:47:8f:79:c3:15:93:1f:8c:4b:57:5a:02:
5c:ce:98:c6:b8:e6:42:80:81:25:ef:6f:90:8b:2d:
ab:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1A:AA:AA:3E:B2:C7:61:B1:F5:8F:A2:41:27:4C:B3:57:A4:9C:6B
X509v3 Authority Key Identifier:
keyid:CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:47:f3:e4:25:4e:53:c1:f2:1d:dc:32:cb:af:05:1f:b8:0d:
1b:f0:02:7b:ea:fe:62:29:9d:b7:b5:55:86:59:57:9b:b9:e1:
e2:a9:0f:7a:63:c1:8f:89:ef:d2:c0:7c:5b:05:1d:2e:a9:f4:
93:e6:74:29:33:69:42:16:3f:c1:2d:72:07:8c:97:34:f8:1e:
4a:bf:b7:00:73:cf:00:61:71:6a:4f:af:b8:94:07:86:45:c6:
89:3e:77:9a:a8:62:79:cb:52:e1:87:38:53:31:6f:c7:16:81:
35:87:9d:39:00:7d:ea:25:c6:b7:83:6a:a5:9d:86:b8:de:70:
0e:0f:fe:86:4e:a5:a9:22:84:e5:62:9f:c9:b8:1c:08:fb:e2:
7a:ca:ad:92:2f:e8:9d:51:c2:0e:d9:fb:14:a1:7e:82:19:f1:
42:53:86:5e:ec:9f:f2:45:1f:ec:cb:02:85:ff:fa:6b:88:3b:
d8:03:5d:17:0e:f2:b7:fc:f0:59:bc:d0:48:7a:51:d3:8a:70:
db:2b:fd:bc:bf:90:81:e1:ff:a0:54:39:4e:d4:6e:74:2d:a4:
e1:28:a5:de:2b:e6:ee:ae:7f:88:3c:ee:b8:0e:5f:b7:08:81:
c5:47:ba:aa:4d:94:a9:b7:96:d7:3f:be:bb:02:83:fb:61:f9:
f0:e2:73:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:01 2026 by rpki-client