
$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
File: RYBbVYDVFRl9GmFa1myLnUhU9eo.mft (raw, json)
Hash identifier: IQmJ/7AE1ByV0Ec6GAX59hDnwnYpemfPeFP8Sr5kWfQ=
Subject key identifier: 11:7C:20:DB:F5:64:02:C9:3B:C2:98:58:0D:A2:47:8E:E6:97:13:87
Authority key identifier: 45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA
Certificate issuer: /CN=A91589E7/serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA
Certificate serial: 18C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
Manifest number: 18B8
Signing time: Wed 22 Jul 2026 16:34:19 +0000
Manifest this update: Wed 22 Jul 2026 16:34:19 +0000
Manifest next update: Wed 29 Jul 2026 16:34:19 +0000
Files and hashes: 1: RYBbVYDVFRl9GmFa1myLnUhU9eo.crl (hash: 2DTY+DE2U5WfszUe3xYgyYEZ4JttfLMwGs0NrwGt4qs=)
2: 94A1F97A369711EA866E381CC4F9AE02.roa (hash: S0eb6BXPdezebakxVAbsrMO/KgjOPcxO/tmX+jv5Uos=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.crl
rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:34:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6340 (0x18c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91589E7, serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA
Validity
Not Before: Jul 22 16:34:19 2026 GMT
Not After : Jul 29 16:34:19 2026 GMT
Subject: CN=6a60f10b-b94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:c6:64:a9:f9:92:2c:ed:9d:12:ad:75:39:
1c:29:9e:ce:29:2e:1c:fe:5f:bc:59:8a:6e:d3:f8:
89:31:2e:af:13:db:99:ae:16:dd:f1:af:f4:fb:9f:
7a:ab:da:2e:96:41:03:51:30:9a:bd:ed:b3:80:ac:
c3:4b:cd:87:2a:f6:f4:f4:f4:8d:71:c4:c1:63:9f:
a6:c4:ce:21:05:36:0e:7b:da:e9:07:10:16:bd:64:
61:73:26:72:79:30:3e:b8:db:bf:73:f4:14:35:f6:
d2:4c:a2:53:6b:66:94:85:e2:cf:c5:cb:c1:d4:b1:
6f:e0:55:c1:5a:41:fa:84:4f:bb:78:5c:4f:e0:7f:
43:11:4c:9a:5e:66:4e:be:a7:5d:f0:fb:19:d7:53:
8f:ec:80:c2:41:23:6c:14:5e:9d:aa:34:9a:25:11:
bf:7f:ac:02:e8:56:42:40:d4:dd:df:97:fe:4a:61:
b4:3d:10:bb:45:32:7d:7b:b5:1d:8c:de:ae:1c:60:
c2:41:7e:f0:a7:5c:1c:7f:a7:bb:a6:19:0c:52:1d:
8e:8b:25:d3:63:69:9f:e1:9a:39:80:6a:9f:0a:c6:
6f:92:61:7f:ee:c7:d3:9d:e1:a3:4b:f8:b4:82:a4:
d4:04:13:51:00:e6:bf:4b:46:73:0c:69:2d:ae:8a:
77:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7C:20:DB:F5:64:02:C9:3B:C2:98:58:0D:A2:47:8E:E6:97:13:87
X509v3 Authority Key Identifier:
keyid:45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f1:69:05:0d:04:01:7f:43:53:f9:03:46:37:81:84:2e:7b:
50:2b:33:41:f4:84:3b:80:18:ae:e2:80:38:c0:0c:02:7a:18:
c6:2b:72:ef:76:fe:f2:1a:74:1f:99:bc:55:07:3d:da:6f:91:
90:81:32:cf:2d:a9:d1:99:db:8c:de:94:fa:27:86:8e:b1:1a:
f5:7b:8e:69:19:26:e1:99:4e:56:3c:8c:87:2d:c9:ff:ce:43:
d9:3f:d8:58:90:be:65:74:39:dc:6d:ba:66:d8:7a:7b:d0:ba:
78:e0:f3:ee:bc:06:db:da:2b:b4:12:58:4a:bf:4d:33:80:7f:
de:90:c3:07:5c:a4:23:8c:4b:b3:b0:1e:a6:99:c7:fc:6f:3b:
77:d2:00:01:94:1d:20:2e:03:b2:b0:2a:d6:98:a7:15:63:55:
23:ae:b8:e8:c9:d6:e2:5d:cc:fb:e6:17:20:9f:c8:e4:75:0c:
2e:7c:f2:69:19:cd:0e:81:9a:3c:4b:e7:bc:fb:bf:f7:3d:14:
7b:2d:a3:73:e4:2a:e7:38:d8:d8:1c:80:51:58:ae:26:3a:28:
83:65:2b:9e:6b:6a:ca:60:1c:0f:f0:04:fe:d7:1a:d4:70:13:
b2:51:18:71:03:37:10:9e:55:8f:73:92:1c:3c:45:04:23:ce:
24:d3:32:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTg5RTcxMTAvBgNVBAUTKDQ1ODA1QjU1ODBENTE1MTk3RDFBNjE1QUQ2NkM4QjlE
NDg1NEY1RUEwHhcNMjYwNzIyMTYzNDE5WhcNMjYwNzI5MTYzNDE5WjAYMRYwFAYD
VQQDEw02YTYwZjEwYi1iOTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy7TGZKn5kiztnRKtdTkcKZ7OKS4c/l+8WYpu0/iJMS6vE9uZrhbd8a/0+596
q9oulkEDUTCave2zgKzDS82HKvb09PSNccTBY5+mxM4hBTYOe9rpBxAWvWRhcyZy
eTA+uNu/c/QUNfbSTKJTa2aUheLPxcvB1LFv4FXBWkH6hE+7eFxP4H9DEUyaXmZO
vqdd8PsZ11OP7IDCQSNsFF6dqjSaJRG/f6wC6FZCQNTd35f+SmG0PRC7RTJ9e7Ud
jN6uHGDCQX7wp1wcf6e7phkMUh2OiyXTY2mf4Zo5gGqfCsZvkmF/7sfTneGjS/i0
gqTUBBNRAOa/S0ZzDGktrop3IwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBF8INv1
ZALJO8KYWA2iR47mlxOHMB8GA1UdIwQYMBaAFEWAW1WA1RUZfRphWtZsi51IVPXq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODlFNy9GOEZGMTUyMkJE
RkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9SWUJiVllEVkZSbDlHbUZhMW15TG5VaFU5
ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JZQmJWWURWRlJsOUdtRmExbXlMblVoVTllby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODlFNy9GOEZGMTUyMkJERkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9SWUJiVllEVkZS
bDlHbUZhMW15TG5VaFU5ZW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPfFpBQ0EAX9DU/kDRjeBhC57UCszQfSEO4AYruKAOMAMAnoYxity73b+8hp0
H5m8VQc92m+RkIEyzy2p0ZnbjN6U+ieGjrEa9XuOaRkm4ZlOVjyMhy3J/85D2T/Y
WJC+ZXQ53G26Zth6e9C6eODz7rwG29ortBJYSr9NM4B/3pDDB1ykI4xLs7AeppnH
/G87d9IAAZQdIC4DsrAq1pinFWNVI6646MnW4l3M++YXIJ/I5HUMLnzyaRnNDoGa
PEvnvPu/9z0Uey2jc+Qq5zjY2ByAUViuJjoog2UrnmtqymAcD/AE/tca1HATslEY
cQM3EJ5Vj3OSHDxFBCPOJNMyew==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:47:17 2026 by rpki-client