
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
File: ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft (raw, json)
Hash identifier: fn3KxaNm3OSFm9olzs+/EFT/mv8paXXP8s6h+aEbcbU=
Subject key identifier: CF:96:5C:54:02:F1:FB:96:0F:5B:BA:E6:0A:2B:91:6C:B4:56:95:54
Authority key identifier: 21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18
Certificate issuer: /CN=A913F2E2/serialNumber=21261B89749893C3B31841B96FE3FB6323032F18
Certificate serial: 0187
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
Manifest number: 017E
Signing time: Thu 23 Jul 2026 06:08:13 +0000
Manifest this update: Thu 23 Jul 2026 06:08:13 +0000
Manifest next update: Thu 30 Jul 2026 06:08:13 +0000
Files and hashes: 1: ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl (hash: 4Co0WWih0nHpAI0wIBcC5LVqvecqQcitj8Jd9RXOECk=)
2: A8051CC4508011EF81053074C4F9AE02.roa (hash: gEOQ4Shko9Ffhb3sUw/V54wk1wOVzUKZiGrhJDBT6Fs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl
rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F2E2, serialNumber=21261B89749893C3B31841B96FE3FB6323032F18
Validity
Not Before: Jul 23 06:08:13 2026 GMT
Not After : Jul 30 06:08:13 2026 GMT
Subject: CN=6a61afcd-a33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:17:ba:07:e8:94:02:58:07:bc:cb:d7:1c:
0c:e8:1e:5b:f4:ff:d7:dd:f4:1c:3d:66:a9:c9:8a:
09:ad:e8:c3:f4:33:4c:ac:ee:0c:5d:62:c4:cc:63:
40:db:71:02:cc:07:7d:38:24:a4:47:f4:e2:c2:37:
39:ee:e9:c0:b3:b5:08:a2:91:6b:09:5d:d9:00:8b:
e4:ec:97:3c:d8:5d:99:6d:ea:97:f2:e2:7e:c7:25:
02:8d:5b:c2:a3:af:66:fa:af:2f:15:b3:d6:f4:a9:
05:8c:58:5f:26:44:7f:9d:49:2b:99:5a:a6:43:c7:
5f:6d:8f:22:27:4a:5e:8a:f0:b9:c6:10:e6:24:a6:
eb:b6:26:65:c6:19:bf:bc:69:0a:8d:08:07:05:04:
f6:c3:59:c3:89:58:88:3c:99:91:2e:23:33:93:4f:
98:40:b2:41:6d:4d:e5:97:71:23:ae:2a:37:45:3d:
32:28:e4:db:c0:49:d2:42:e3:4c:18:fb:d4:05:32:
44:fc:79:28:8f:55:d0:79:db:75:6f:13:3d:64:5e:
70:e0:3f:86:3f:59:b1:f4:f1:76:16:59:ab:5f:a5:
bc:69:c7:f7:c8:09:93:73:ae:20:e6:59:46:1e:14:
19:1e:3f:67:cb:ca:46:97:16:18:a9:47:9c:95:40:
6a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:96:5C:54:02:F1:FB:96:0F:5B:BA:E6:0A:2B:91:6C:B4:56:95:54
X509v3 Authority Key Identifier:
keyid:21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:83:ce:02:1d:aa:48:ff:e0:63:c7:44:e9:9b:06:67:93:5b:
7a:38:41:f7:a5:de:4e:05:73:4d:59:06:33:45:05:ff:b8:cf:
43:a4:1d:db:58:e3:89:e9:d1:d9:98:79:6a:36:60:78:fc:79:
64:55:2f:53:32:ee:61:d1:cc:23:7d:34:a1:eb:04:38:a2:80:
d3:51:c3:9a:92:50:c0:87:78:5e:15:cc:4d:e8:d7:09:c1:28:
f2:63:cf:7d:1c:a0:3b:51:86:76:28:72:0e:84:72:66:10:ee:
13:6c:c4:ea:0a:cb:92:df:0a:cb:dd:34:99:be:3f:fe:e4:03:
45:79:ea:50:4f:68:36:b9:13:3f:d8:a5:50:3e:9a:f2:c2:9e:
cf:2c:c1:a9:55:f1:8a:87:61:5b:77:69:43:45:5f:cf:c8:2c:
bf:97:1d:ea:8a:67:5e:70:7a:41:47:9e:62:b6:37:6d:31:55:
0c:24:0e:d8:18:b4:d4:77:dd:ea:f3:18:e8:a2:ee:d8:55:4c:
4e:b1:e2:45:d0:c2:9b:84:9c:22:fe:d6:63:77:09:1a:1e:c7:
57:8f:b0:55:8a:c7:91:fc:d4:3a:03:76:6f:6a:fe:97:8a:fc:
1b:2c:2e:25:ea:9a:50:e0:4b:99:85:bd:fb:8e:59:ff:7c:9c:
ea:c5:06:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0YyRTIxMTAvBgNVBAUTKDIxMjYxQjg5NzQ5ODkzQzNCMzE4NDFCOTZGRTNGQjYz
MjMwMzJGMTgwHhcNMjYwNzIzMDYwODEzWhcNMjYwNzMwMDYwODEzWjAYMRYwFAYD
VQQDEw02YTYxYWZjZC1hMzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsyIXugfolAJYB7zL1xwM6B5b9P/X3fQcPWapyYoJrejD9DNMrO4MXWLEzGNA
23ECzAd9OCSkR/Tiwjc57unAs7UIopFrCV3ZAIvk7Jc82F2ZbeqX8uJ+xyUCjVvC
o69m+q8vFbPW9KkFjFhfJkR/nUkrmVqmQ8dfbY8iJ0peivC5xhDmJKbrtiZlxhm/
vGkKjQgHBQT2w1nDiViIPJmRLiMzk0+YQLJBbU3ll3Ejrio3RT0yKOTbwEnSQuNM
GPvUBTJE/Hkoj1XQedt1bxM9ZF5w4D+GP1mx9PF2FlmrX6W8acf3yAmTc64g5llG
HhQZHj9ny8pGlxYYqUeclUBqHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM+WXFQC
8fuWD1u65gorkWy0VpVUMB8GA1UdIwQYMBaAFCEmG4l0mJPDsxhBuW/j+2MjAy8Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJFMi9DNUI2QjkzNjQ0
MDQxMUVGQjlBNjJDMERDNEY5QUUwMi9JU1liaVhTWWs4T3pHRUc1Yi1QN1l5TURM
eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lTWWJpWFNZazhPekdFRzViLVA3WXlNREx4Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjJFMi9DNUI2QjkzNjQ0MDQxMUVGQjlBNjJDMERDNEY5QUUwMi9JU1liaVhTWWs4
T3pHRUc1Yi1QN1l5TURMeGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN4POAh2qSP/gY8dE6ZsGZ5NbejhB96XeTgVzTVkGM0UF/7jPQ6Qd21jjienR
2Zh5ajZgePx5ZFUvUzLuYdHMI300oesEOKKA01HDmpJQwId4XhXMTejXCcEo8mPP
fRygO1GGdihyDoRyZhDuE2zE6grLkt8Ky900mb4//uQDRXnqUE9oNrkTP9ilUD6a
8sKezyzBqVXxiodhW3dpQ0Vfz8gsv5cd6opnXnB6QUeeYrY3bTFVDCQO2Bi01Hfd
6vMY6KLu2FVMTrHiRdDCm4ScIv7WY3cJGh7HV4+wVYrHkfzUOgN2b2r+l4r8Gywu
JeqaUOBLmYW9+45Z/3yc6sUGgQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:53:05 2026 by rpki-client