
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft
File: sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json)
Hash identifier: sGuXXq0Q9qs4nqmDSHnEJbb1kIov5CJ9a2y9FKGApa0=
Subject key identifier: 03:F3:DE:FB:79:D5:87:41:AC:92:81:FA:2C:E4:FF:72:B3:9E:DD:23
Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7
Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7
Certificate serial: 0DA6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft
Manifest number: 0D85
Signing time: Wed 22 Jul 2026 18:12:29 +0000
Manifest this update: Wed 22 Jul 2026 18:12:28 +0000
Manifest next update: Wed 29 Jul 2026 18:12:28 +0000
Files and hashes: 1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: FCRDYoeD4TzZqf12sM1HGztfsNZWBfF82BsSs3ik06s=)
2: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: Z+WXuAeNXEm2DshVUamhEUi82/2PD1ZlUuuRrwwUJi4=)
3: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: CausEKBJvcLCY2g+bHYlOvrLzaOZNNslUPs7u8h+azo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl
rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:12:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3494 (0xda6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150CF2, serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7
Validity
Not Before: Jul 22 18:12:28 2026 GMT
Not After : Jul 29 18:12:28 2026 GMT
Subject: CN=6a61080d-e28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0d:b4:6f:4e:97:4d:5e:d4:1d:0f:1f:c9:05:
db:d6:23:2d:d0:aa:53:21:98:86:81:71:57:f5:f0:
a7:75:92:60:46:d9:40:6c:36:5a:0f:23:b8:8e:69:
4e:81:bb:84:24:39:56:ad:dd:ae:9f:e6:57:55:f9:
13:6f:31:ac:63:7b:9e:7e:9a:d6:08:bf:e8:da:b5:
96:e9:2e:db:8f:20:0d:bb:fd:f5:1a:6e:07:fd:56:
b8:07:81:65:e0:aa:db:66:06:ef:8c:ef:91:13:ab:
49:09:73:84:19:8b:15:32:08:dc:d6:ed:7b:3b:3c:
28:68:3e:70:1f:bc:27:c9:b9:62:06:2c:23:43:f1:
a5:42:04:a4:13:43:37:b9:1b:db:23:45:8a:43:58:
cf:41:51:2b:6e:5e:a6:f6:3b:80:52:a7:09:13:e7:
a0:63:b2:ab:73:82:52:c1:fc:ad:8a:5d:87:00:f0:
c2:3b:a0:f7:5b:81:e0:3a:cc:2c:13:f0:87:53:28:
4e:df:82:bd:af:3c:61:d9:07:c9:e6:34:b2:53:dd:
4e:36:d7:76:1c:de:04:33:f3:fe:ca:b3:6d:a4:e8:
33:93:76:fb:40:52:5f:31:b0:b4:c0:1b:08:3f:11:
54:c9:68:83:cc:bc:54:10:b2:85:b4:81:3c:8b:47:
cb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F3:DE:FB:79:D5:87:41:AC:92:81:FA:2C:E4:FF:72:B3:9E:DD:23
X509v3 Authority Key Identifier:
keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:01:84:6c:66:9e:58:6e:29:f1:4c:58:f8:35:e1:44:e9:e2:
b5:9b:fc:38:3a:44:17:12:48:c3:60:3e:7b:1f:ac:41:62:60:
e8:26:0b:d2:46:36:de:71:ac:1a:d3:c6:42:50:69:12:e0:69:
a6:c4:0c:13:2d:69:2a:23:7e:0c:06:56:a0:96:7c:20:3a:cd:
1b:1e:bf:97:55:ad:41:14:dc:b5:e4:ed:46:0b:d6:c1:6b:80:
7e:2c:76:97:a7:05:a1:66:5e:5a:e7:65:9a:1c:7e:df:69:35:
e5:56:90:23:79:02:0e:0a:a4:1f:7e:a4:4c:d3:13:d3:59:53:
df:ac:f0:be:25:17:cd:78:5e:fa:95:f5:e5:e4:1f:f6:09:7e:
d2:a7:64:a1:17:fb:e2:6f:c5:21:4a:67:d2:86:ad:1a:be:20:
f0:91:b7:6c:e7:a4:a3:71:2b:a7:f5:15:fc:77:a6:58:d7:48:
8d:be:9e:9c:ce:9f:89:aa:c3:6f:e3:86:4c:0b:00:ed:59:f3:
a9:f5:8b:0b:ac:1f:32:30:09:75:60:75:0a:c5:b2:a3:1f:8f:
bb:8e:76:d8:e1:62:40:47:47:50:66:09:74:0f:27:f3:ff:7b:
c7:b4:67:74:33:ea:45:c6:fa:ac:a8:d9:50:ad:80:6e:bb:da:
66:1f:4c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:57:34 2026 by rpki-client