
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
File: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft (raw, json)
Hash identifier: jdunp0ucGrWqBeAxA6xrft9AfcUJR6px3KFhva5JYQs=
Subject key identifier: AA:E2:7E:30:B8:BD:5B:62:FF:8E:8E:10:5C:B5:5D:FE:69:51:9A:E9
Authority key identifier: 63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6
Certificate issuer: /CN=A914D0AF/serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
Manifest number: 058C
Signing time: Thu 23 Jul 2026 00:47:13 +0000
Manifest this update: Thu 23 Jul 2026 00:47:13 +0000
Manifest next update: Thu 30 Jul 2026 00:47:13 +0000
Files and hashes: 1: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl (hash: zeNBOGj7RySA9dFLdbnp2A/0y09Sa34wk1TEgbMH/ko=)
2: F83346DA410211F097F43F85C4F9AE02.roa (hash: HlHozKQbiUgJEzpu3Hjn82lhGmduZGu23FAaPzM4W3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl
rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:47:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D0AF, serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6
Validity
Not Before: Jul 23 00:47:13 2026 GMT
Not After : Jul 30 00:47:13 2026 GMT
Subject: CN=6a616491-909f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:51:b0:1a:15:e2:bf:32:a8:5c:08:55:09:
45:a7:63:c3:6d:f3:ad:10:4f:70:83:78:63:92:96:
8f:c8:b8:ce:84:b2:c0:bc:03:92:61:7e:11:3b:56:
50:18:0a:72:e3:31:65:0d:ff:34:6f:45:de:bd:90:
ad:fa:f1:77:9b:07:a4:4a:ea:29:70:f2:d7:d5:3e:
c8:70:6a:a4:d8:f1:45:7e:a6:bf:b4:41:c3:5d:74:
11:3a:55:cc:ac:f6:ab:b9:f3:22:f5:84:5a:51:de:
ff:78:45:d0:02:51:73:08:b7:95:6a:5c:48:b7:b1:
9f:00:27:8d:af:a7:85:50:e3:64:2b:7c:1a:3e:bf:
c2:fd:c4:e3:e7:07:1d:3d:b5:16:df:9b:77:07:bc:
c1:d0:26:83:08:e6:a0:c3:1e:61:8c:b3:aa:84:ea:
b4:cb:6c:f9:be:12:6d:82:88:38:15:ca:59:f4:a9:
70:85:4c:7e:3b:67:a2:55:08:16:2d:f1:eb:51:12:
9d:87:09:9f:6f:61:80:21:d8:2a:d8:32:9d:8d:32:
79:f5:9b:a4:36:72:ea:90:01:18:2e:af:24:6e:3c:
d1:c6:e2:be:b6:b8:cd:88:01:b9:88:a7:d4:d8:96:
9f:35:9d:e5:33:ef:69:39:a2:c8:c0:84:1f:31:31:
e0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E2:7E:30:B8:BD:5B:62:FF:8E:8E:10:5C:B5:5D:FE:69:51:9A:E9
X509v3 Authority Key Identifier:
keyid:63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:82:5d:98:01:46:e9:68:1e:86:38:08:ef:5a:a6:f9:0f:20:
6e:a6:27:dc:14:8f:e8:51:0c:cb:96:6c:b3:b8:f1:29:69:08:
f0:a9:0b:98:3d:64:7d:63:d3:6c:57:04:fd:c4:af:99:6d:dc:
97:fb:80:17:03:af:09:76:25:84:22:84:47:98:f9:e7:10:c8:
15:91:3f:a2:4e:b6:2c:d1:bd:1d:f1:5e:ce:0b:36:ba:a4:f0:
f9:5f:08:69:b7:91:11:69:fa:3f:f2:fa:11:6b:6f:eb:af:67:
5a:f4:d5:16:b3:4c:a7:7b:42:3c:0b:ea:f4:bf:6d:3a:5c:af:
f4:1e:47:50:fb:90:2f:67:ac:3f:42:c5:2d:aa:cb:e4:5a:54:
71:1a:4c:ee:9a:73:b9:06:e4:be:eb:80:6f:45:fa:78:94:1b:
96:b5:7c:5e:70:06:d8:48:9f:bf:5b:df:ec:ae:95:82:a7:20:
fd:1f:d1:d9:4a:b2:7f:c6:94:20:b4:60:9a:7a:f7:a2:2b:b8:
4f:c0:64:78:98:43:d2:5b:06:71:39:17:b8:b3:76:8d:ff:7e:
17:1b:ba:9b:86:7e:49:ee:bc:ab:87:f5:ba:45:39:cc:95:1b:
cd:e4:49:32:41:b5:71:49:5b:fd:af:d8:a0:7e:b4:34:a9:90:
3b:c2:f6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:23:27 2026 by rpki-client