
$ rpki-client -vvf rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
File: CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft (raw, json)
Hash identifier: X/e6oIauM6rbfWFjD3pcsJYpAc4ClMHS7s/KmmiAPoo=
Subject key identifier: 38:81:BF:CB:35:72:DD:4E:6D:AE:BF:FE:59:0F:93:DB:D1:28:20:82
Authority key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77
Certificate issuer: /CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
Certificate serial: 088D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
Manifest number: 0883
Signing time: Wed 22 Jul 2026 21:11:20 +0000
Manifest this update: Wed 22 Jul 2026 21:11:20 +0000
Manifest next update: Wed 29 Jul 2026 21:11:20 +0000
Files and hashes: 1: CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl (hash: Y+HX5yVNJVr4WEZDD8CAoSoflV0Pg1RuoKyYpFig9Uk=)
2: 1AC2369A010911ECB732340DC4F9AE02.roa (hash: 1d5DWa9kmJ4w10WbuE7/Yrtfavj9f+ay8eq6OsazIQw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl
rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2189 (0x88d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913806E, serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
Validity
Not Before: Jul 22 21:11:20 2026 GMT
Not After : Jul 29 21:11:20 2026 GMT
Subject: CN=6a6131f8-279d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:23:86:5c:ac:b3:ee:27:8a:6d:85:74:b4:b6:
bb:91:60:03:9b:39:4c:c3:08:e7:56:38:20:e7:5a:
4a:3e:4c:ab:7e:bd:c0:3e:e2:d2:d5:e7:72:c0:2a:
24:6a:7e:69:1b:25:91:ba:92:55:29:90:2d:3a:5d:
9e:74:2f:89:bf:93:41:11:80:f7:ce:05:0d:ed:f4:
ac:57:df:7c:6c:1b:d6:e1:46:f9:3a:84:21:86:dc:
89:a1:92:0f:a5:68:e4:26:85:87:45:d0:a2:66:ce:
e7:d4:0d:e3:b5:76:4d:95:68:2d:c8:7e:88:32:76:
bb:75:77:45:e8:00:f6:db:fd:da:cd:08:7d:5e:54:
c2:60:79:ed:57:e9:2d:30:28:48:b1:9e:83:59:6f:
53:fc:81:1d:17:5c:57:fe:72:96:6c:52:65:b7:f9:
41:b4:d7:2a:60:b9:02:e1:c8:1d:6a:ef:bd:ed:f1:
95:c2:60:78:9a:db:f5:65:d1:d2:1a:0e:9f:0b:1d:
a7:f8:e2:0f:fa:a0:ef:58:e6:27:61:5a:f1:c2:bf:
31:83:38:5b:96:18:70:e3:93:34:49:71:66:8b:b9:
84:e7:4d:a6:b6:59:ad:a2:ee:27:22:be:08:43:a2:
8f:81:71:35:b6:c4:49:25:a9:ab:5a:11:9b:16:a8:
eb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:81:BF:CB:35:72:DD:4E:6D:AE:BF:FE:59:0F:93:DB:D1:28:20:82
X509v3 Authority Key Identifier:
keyid:09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:7e:a2:2f:8b:f5:c0:02:2a:40:30:0b:ff:49:26:03:0b:59:
be:66:46:8e:32:57:ba:03:f8:91:37:14:8c:fc:cc:e9:f4:76:
32:49:d2:44:87:9a:e8:6d:ca:c7:9a:b8:94:da:95:e8:d7:91:
1b:d3:9f:15:4e:18:81:7e:b9:3a:be:70:f0:47:36:7a:74:dc:
2a:3a:a9:ae:3d:c8:e5:08:ab:f0:75:d8:dd:2c:cb:90:4e:de:
d7:db:b6:bb:80:1a:77:60:ff:a1:d8:a6:e1:a1:67:df:74:80:
ba:c1:76:93:96:56:7c:0f:fb:01:13:12:11:94:03:12:58:56:
65:5c:65:7f:e7:50:04:17:24:5c:40:2b:c8:5a:95:a4:ce:06:
4c:01:c1:78:ca:2b:88:b4:4c:45:be:80:b1:8b:db:69:35:04:
97:c6:e2:62:df:23:06:c8:b1:66:5f:cd:b4:ee:f0:99:03:c9:
d0:34:65:e4:d6:37:97:2c:85:d4:43:1d:53:f2:3a:28:fb:9a:
a9:be:45:2e:44:1d:b1:6a:06:be:bf:13:47:f6:d2:b8:4e:c0:
67:db:e4:53:89:ad:ee:d8:81:b9:24:29:44:95:f1:8f:16:6b:
e1:ce:19:d7:e2:91:ab:42:d6:5c:74:22:a0:b0:94:0a:fa:1b:
4e:f5:08:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:19:14 2026 by rpki-client