
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
File: ny5XiO95WFurdhmHfTlierLl1Rk.mft (raw, json)
Hash identifier: 59bLP7vLhkVzIHmbFuv1krTFcLB39QlmZ7hphuYio2A=
Subject key identifier: A8:1B:F4:00:78:47:41:EF:CE:F9:25:C0:35:FE:D1:29:EE:8D:AE:F0
Authority key identifier: 9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19
Certificate issuer: /CN=A913A7A6/serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
Certificate serial: 0ACD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
Manifest number: 0AC3
Signing time: Tue 12 May 2026 19:29:58 +0000
Manifest this update: Tue 12 May 2026 19:29:58 +0000
Manifest next update: Tue 19 May 2026 19:29:58 +0000
Files and hashes: 1: ny5XiO95WFurdhmHfTlierLl1Rk.crl (hash: N/GdLrhS86uQ8wNmdDBsqf1AOq1NH1NYhM+7Osy2nCU=)
2: 4DAFC184ADC011ED897A4050C4F9AE02.roa (hash: v2saofmL0m7GfqQUIwDfIhLfQiWIxApSuK3jNuC63SE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl
rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2765 (0xacd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A7A6, serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
Validity
Not Before: May 12 19:29:58 2026 GMT
Not After : May 19 19:29:58 2026 GMT
Subject: CN=6a037fb6-eaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:21:03:97:7a:cd:7e:36:a6:f1:f2:b8:2b:
8f:2d:6f:36:70:b7:a1:de:a9:e9:3d:ae:82:6b:6a:
20:73:84:67:80:8d:f0:f3:61:b7:b4:24:a1:64:f6:
fd:46:52:21:76:3f:b4:19:5b:fe:ac:c1:87:43:be:
ff:34:25:31:96:47:b8:59:fb:c3:07:f2:b6:a9:dc:
56:82:09:4e:a5:d1:ee:4b:d9:41:57:69:2e:de:df:
72:54:75:78:e8:7f:ed:68:dc:52:9f:11:03:88:47:
55:18:55:64:5c:a6:8e:bd:c5:9b:7b:9a:8f:15:fa:
9a:91:ee:4f:aa:f6:75:4d:56:62:53:d1:1a:a3:30:
3f:00:af:89:9b:06:dc:6f:41:96:9b:35:f0:22:10:
42:46:4d:c5:64:dd:f3:00:3d:fd:c8:21:68:84:ad:
71:66:11:d6:48:a9:20:5a:f0:7f:9e:76:86:f9:0e:
ad:12:76:fa:98:de:1c:32:82:61:63:66:1e:e6:35:
02:d2:1e:74:cc:df:5a:d8:d2:61:bc:c8:38:b3:6d:
a6:9f:e7:49:60:68:42:a7:18:64:c7:06:b9:01:1e:
7e:26:47:37:6e:99:5a:9e:a7:21:8d:ac:76:56:03:
40:ef:dc:01:29:dd:07:cc:bb:6a:69:c0:67:e4:79:
75:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1B:F4:00:78:47:41:EF:CE:F9:25:C0:35:FE:D1:29:EE:8D:AE:F0
X509v3 Authority Key Identifier:
keyid:9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9f:4c:37:7b:49:5c:78:4d:15:a1:ba:4a:b8:a8:f0:fc:c2:
9e:66:44:72:8e:d5:7a:3b:ae:71:d5:bd:80:24:29:16:86:3d:
b7:be:54:6d:7e:24:b6:ea:2f:74:24:0d:3f:5b:b9:a4:d8:c6:
84:78:45:2d:1e:55:79:91:dd:33:41:89:15:27:56:d3:6e:de:
9c:ce:14:6a:29:6c:d4:54:10:12:d8:a3:b5:04:27:a1:d7:3e:
4b:da:9c:60:5b:35:14:36:60:0f:1e:6b:93:19:9d:fc:3f:66:
d2:f1:51:80:96:de:0e:bc:32:05:ca:6f:fa:9b:23:88:78:84:
63:a7:a1:68:e0:eb:93:b9:54:fe:cb:31:79:f2:b1:db:bc:dc:
3c:51:85:71:90:ed:be:46:f0:6f:17:34:23:44:fb:28:0b:b0:
74:82:8c:82:34:ba:ee:0d:2f:9f:cd:ef:c4:95:45:ce:e3:3d:
a7:dc:dc:43:65:66:c3:e5:d2:55:b2:b5:54:f6:7d:7f:61:55:
5b:e3:88:9c:39:a2:ed:67:b2:32:e0:3e:c7:df:23:96:ab:85:
ab:82:b9:a2:65:2e:65:2e:68:32:cb:56:f1:c7:56:d7:d5:a5:
75:6d:b6:ca:21:7c:61:54:22:22:07:e5:4e:d1:b8:11:4b:ac:
ae:e4:86:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:01:55 2026 by rpki-client