
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
File: rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json)
Hash identifier: bPrGDijobQViIYMdivIlAwOfV6XaxwCN8N3wLfPfbqw=
Subject key identifier: 42:59:1E:D0:A1:EB:A4:20:88:C2:92:0A:E2:A4:02:CE:FF:F5:C7:7C
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Certificate issuer: /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial: 0251
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
Manifest number: 023F
Signing time: Thu 23 Jul 2026 03:43:04 +0000
Manifest this update: Thu 23 Jul 2026 03:43:03 +0000
Manifest next update: Thu 30 Jul 2026 03:43:03 +0000
Files and hashes: 1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: LyCFST4v7H0jLX4IQ75BT9kVCiRLe0tUndTy+nyM8QI=)
2: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: tRTg+EzOsPEBd/CyA9yv6uVUIfA6399PeHgHdLPDFdI=)
3: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NpABsuTNt3Of0zFwuT3M1C2R99zLqBty3uuQSGUzpfg=)
4: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: kgK3NjgQxpDJ05PetKW0f4eD4WtSWH7QBEKwm+5D1qk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:43:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Validity
Not Before: Jul 23 03:43:03 2026 GMT
Not After : Jul 30 03:43:03 2026 GMT
Subject: CN=6a618dc8-9674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0a:cc:0f:cd:a5:82:e4:b5:1e:89:c1:a6:0d:
33:28:bb:92:00:9c:19:d2:6a:77:89:3f:be:1f:f0:
c3:e8:cd:bb:79:db:6d:07:ff:99:02:20:c1:8e:4e:
32:29:0b:d6:70:3e:1e:9e:7b:bd:0c:e7:a9:c7:b5:
67:5e:90:a0:35:e8:78:49:77:d4:6e:15:f2:94:77:
13:21:ab:be:e1:99:f3:2b:d8:35:ea:ab:56:1d:22:
82:16:81:73:2a:67:54:ec:e0:a2:cc:2b:ae:b1:08:
84:f2:96:d3:8b:7a:c8:47:d3:6e:85:c7:dd:6d:7e:
70:5c:bb:92:19:d0:df:e3:64:49:09:25:97:eb:ef:
da:d4:a0:0f:fd:50:24:5e:2d:e9:ee:81:1c:6c:cb:
de:11:7f:ef:02:df:e5:05:44:e5:d1:ce:b5:3e:0e:
40:36:aa:12:90:81:d7:c4:be:5c:f9:67:de:7c:45:
b5:3c:b8:d0:a2:61:f3:99:6e:b7:f0:6d:40:dc:d4:
e3:a8:51:ae:9d:a6:8c:f2:c0:23:17:e1:ff:12:13:
eb:f2:11:57:35:69:65:ab:de:d1:ff:03:15:c5:20:
95:bf:ad:53:65:5b:2e:fe:70:fd:ba:29:a6:b5:12:
ab:2e:2c:23:9f:13:e0:94:5e:af:0a:26:94:e3:2c:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:59:1E:D0:A1:EB:A4:20:88:C2:92:0A:E2:A4:02:CE:FF:F5:C7:7C
X509v3 Authority Key Identifier:
keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4c:bf:f7:7a:56:45:27:57:1a:80:ff:88:d7:a2:07:b7:b2:
cb:71:14:66:bc:fc:20:2c:36:d8:6e:dc:11:71:36:1b:39:bd:
a2:1c:7b:80:82:65:cc:0d:7d:f9:10:d6:63:a0:d3:9d:40:0b:
23:51:61:76:8d:b1:2c:2e:3c:ac:d5:97:4f:a6:38:b7:06:2e:
02:fc:f1:bd:68:5a:0e:f0:9a:2c:39:9c:dd:bd:44:07:5d:6b:
c5:40:70:ac:31:9c:d2:33:68:42:c3:b6:15:15:7b:3e:68:03:
d6:c1:ac:d7:23:22:36:81:b0:2f:02:5d:03:c6:85:21:d5:51:
56:90:d0:29:5c:0a:a5:b3:96:f8:25:8f:ce:7c:8c:8d:0e:4a:
c7:26:6d:3a:b8:0b:64:2d:73:38:77:cf:b7:b9:4a:f9:43:1f:
4f:5e:4a:a6:5d:2d:86:93:3e:5f:5f:a7:8e:1c:6a:d4:d8:cb:
54:81:f2:2a:f6:31:b5:5b:18:62:47:c1:c7:19:e9:ad:0e:47:
4c:36:a3:9f:66:da:a5:66:09:a3:8f:bf:90:ab:35:c4:d7:0d:
ef:11:01:09:8b:2c:63:38:00:1e:cb:cb:c4:70:7e:74:cb:94:
0b:c8:3e:83:3e:77:67:e5:2f:b4:25:7d:df:d2:45:70:fb:9a:
33:89:f1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:30:33 2026 by rpki-client