
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json)
Hash identifier: AXXvKzKIVHgd43oCfws0QmaDvkMmbAklZNn76xWCGKk=
Subject key identifier: 1F:CF:24:F4:FC:01:40:D7:74:39:4D:42:12:41:CD:EE:E9:0E:97:05
Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Certificate serial: 0536
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
Manifest number: 0526
Signing time: Thu 23 Jul 2026 00:25:54 +0000
Manifest this update: Thu 23 Jul 2026 00:25:54 +0000
Manifest next update: Thu 30 Jul 2026 00:25:54 +0000
Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: iwZOTXi58IpUYW2Pcz6OZPZfx3ti1LdkbcsenpFNZnc=)
2: 9CA1FC26FA7A11F0A1FE82F24D6F56BC.roa (hash: D7TWn4uVI/L44bR9jZY7LmPRQC44gxFuipaLGEVANoA=)
3: FDFFD0D8FFFC11F0BE7B89863A6F56BC.roa (hash: ctyWpGsIE5EQesNkt+cSgGgPoPwdQaksbBOUuFK3Fho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:25:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1334 (0x536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Validity
Not Before: Jul 23 00:25:54 2026 GMT
Not After : Jul 30 00:25:54 2026 GMT
Subject: CN=6a615f92-ee25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a9:2c:33:f8:b3:63:67:f0:69:96:97:77:ae:
8b:dc:58:ed:c1:85:7f:fa:c7:cf:4b:e8:62:ca:e7:
f3:41:04:77:35:98:2c:d8:7f:57:1f:f7:74:62:38:
e0:d7:9a:0e:ed:e2:81:5a:98:08:6a:17:85:1d:bd:
92:67:df:cf:9c:47:fb:49:22:5e:0e:db:0e:9a:be:
41:cb:ea:dc:45:90:f6:20:2d:e8:e0:3f:f0:09:ab:
26:99:1e:12:ae:cf:ed:4b:03:a0:5c:b1:82:3b:de:
a9:80:b4:18:fb:b3:d4:cc:92:87:8c:89:5a:f9:09:
d4:22:26:a9:26:1d:a6:54:62:0e:35:c5:79:5c:a8:
bf:7d:24:08:2d:d5:51:d7:78:f4:3e:d9:e7:99:7f:
d7:1a:a6:53:98:e2:ca:28:51:c9:a0:71:43:3f:41:
7d:96:0b:54:43:71:e9:06:1c:58:9b:84:ae:98:0a:
3e:e3:02:44:33:74:b5:53:b9:a5:48:27:66:2f:20:
c6:98:bb:99:d5:22:a2:9a:a0:8b:1d:6c:41:3c:3f:
1e:85:b6:d9:47:75:e2:aa:71:d7:3a:51:5b:ca:b5:
71:2c:06:7f:70:e5:50:86:a7:98:49:39:7d:6f:2e:
6e:d9:3a:7e:d7:00:b9:2d:dd:74:35:39:94:50:91:
bd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CF:24:F4:FC:01:40:D7:74:39:4D:42:12:41:CD:EE:E9:0E:97:05
X509v3 Authority Key Identifier:
keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9a:d8:41:ef:e2:a6:eb:6a:3f:9f:5b:19:36:0e:11:a4:b3:
34:c9:fe:35:17:26:9c:3f:fe:a6:ae:4f:6d:66:8b:9d:c1:9d:
c0:92:be:c5:3d:71:4f:75:52:0f:ba:01:44:c6:0d:96:5f:bc:
ef:c0:e7:6a:7b:1d:24:45:12:9b:e8:6b:3a:77:ca:7c:06:6b:
9e:d3:ec:0b:ea:0a:5b:9c:f4:81:86:53:04:70:5c:b2:86:fc:
ab:ff:d4:a4:56:55:35:95:f7:9e:80:3a:8a:cb:b3:72:6d:c9:
22:8e:c1:0f:10:6e:be:4a:c4:3a:eb:5e:28:8c:c3:e6:43:b0:
c5:80:91:3b:5a:37:fb:92:1f:ad:ba:43:33:fc:e6:43:25:1b:
01:69:f9:5f:a1:a0:83:1e:a9:ac:4b:64:75:a5:1e:aa:6e:5c:
9f:c9:7e:90:07:82:2e:74:25:29:42:32:0b:0d:e0:ad:ec:27:
15:a1:c1:c4:6f:de:45:3b:d1:9c:d7:a7:c5:0b:56:af:5d:73:
0e:7c:26:78:9a:cb:20:bc:57:ba:d0:74:43:5f:ab:7c:75:13:
3d:6e:d5:36:c5:79:1d:a2:89:1c:16:a7:d0:34:89:7e:58:92:
c0:dc:ef:3a:e1:7a:bd:a5:8f:cf:a5:a3:58:33:dd:e3:ea:11:
29:66:07:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEZFODcxMTAvBgNVBAUTKEVCQkI3NTYyQzZBNDlGQjdFREU1NzQxMkJDMUZGQUQ0
OEUxQUZCNDkwHhcNMjYwNzIzMDAyNTU0WhcNMjYwNzMwMDAyNTU0WjAYMRYwFAYD
VQQDEw02YTYxNWY5Mi1lZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxaksM/izY2fwaZaXd66L3FjtwYV/+sfPS+hiyufzQQR3NZgs2H9XH/d0Yjjg
15oO7eKBWpgIaheFHb2SZ9/PnEf7SSJeDtsOmr5By+rcRZD2IC3o4D/wCasmmR4S
rs/tSwOgXLGCO96pgLQY+7PUzJKHjIla+QnUIiapJh2mVGIONcV5XKi/fSQILdVR
13j0PtnnmX/XGqZTmOLKKFHJoHFDP0F9lgtUQ3HpBhxYm4SumAo+4wJEM3S1U7ml
SCdmLyDGmLuZ1SKimqCLHWxBPD8ehbbZR3XiqnHXOlFbyrVxLAZ/cOVQhqeYSTl9
by5u2Tp+1wC5Ld10NTmUUJG9xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/PJPT8
AUDXdDlNQhJBze7pDpcFMB8GA1UdIwQYMBaAFOu7dWLGpJ+37eV0Erwf+tSOGvtJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU4Ny80RTE0MDFFNjVD
QjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243ZnQ1WFFTdkJfNjFJNGEt
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzY3dDFZc2FrbjdmdDVYUVN2Ql82MUk0YS0way5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RkU4Ny80RTE0MDFFNjVDQjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243
ZnQ1WFFTdkJfNjFJNGEtMGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm5rYQe/iputqP59bGTYOEaSzNMn+NRcmnD/+pq5PbWaLncGdwJK+xT1xT3VS
D7oBRMYNll+878DnansdJEUSm+hrOnfKfAZrntPsC+oKW5z0gYZTBHBcsob8q//U
pFZVNZX3noA6isuzcm3JIo7BDxBuvkrEOuteKIzD5kOwxYCRO1o3+5IfrbpDM/zm
QyUbAWn5X6Gggx6prEtkdaUeqm5cn8l+kAeCLnQlKUIyCw3grewnFaHBxG/eRTvR
nNenxQtWr11zDnwmeJrLILxXutB0Q1+rfHUTPW7VNsV5HaKJHBan0DSJfliSwNzv
OuF6vaWPz6WjWDPd4+oRKWYHBQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:11:12 2026 by rpki-client