
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
File: Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json)
Hash identifier: ccGB+VnK3UH6IkLtHOYZ5316PV40fhDWd6N/64jKXdY=
Subject key identifier: E5:9C:A7:64:39:1F:AF:21:82:F4:D0:21:1D:05:64:56:9D:D2:04:E4
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial: 3619
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
Manifest number: 35B3
Signing time: Fri 24 Jul 2026 15:23:27 +0000
Manifest this update: Fri 24 Jul 2026 15:23:26 +0000
Manifest next update: Fri 31 Jul 2026 15:23:26 +0000
Files and hashes: 1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: 5jMtIw4ScpjkUB+q8D+LyOw4rIRJPV1k6eAEksu7ItY=)
2: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: CujlrPZRzwdLdoypUA6XG0sSyWx22QqMi3Wunv/TANU=)
3: EA6E0AAC50D411F18B34A857BE833773.roa (hash: OEoll2QdrXXA0K9ht1DiuZRtdqA89xzzL49jYr5VTFI=)
4: 7BAC7A5621D411F199DF6C46233D8C67.roa (hash: /mDg6LUZzeHlaNJOXKegHskznJoBNs4nZJuthgsnsWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 15:23:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13849 (0x3619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Validity
Not Before: Jul 24 15:23:26 2026 GMT
Not After : Jul 31 15:23:26 2026 GMT
Subject: CN=6a63836f-1e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0e:16:68:03:b3:e8:4b:27:d3:af:45:42:1e:
b0:73:f7:75:a8:b7:d0:fe:18:c3:5c:f4:7e:be:75:
22:e4:9e:bd:19:bc:61:aa:08:cd:f3:fa:86:c5:ab:
be:3f:78:86:34:0b:48:d3:d9:85:21:f3:97:2c:ed:
72:d6:d8:f2:3d:4f:08:87:63:d6:92:f0:10:db:43:
d7:e2:9b:5f:ff:7f:6a:ba:3c:9b:ba:b3:fe:ae:af:
92:d9:7e:c6:30:c7:c9:b5:16:8e:dd:00:81:08:52:
d9:41:14:6b:3e:0d:d4:42:37:8b:4a:49:86:fe:7b:
56:d7:45:f3:e4:f1:71:f2:29:1f:22:27:83:e3:54:
c1:c7:f1:ae:08:40:27:5e:6f:49:68:b8:16:f3:7d:
1e:73:c6:b2:7c:fa:86:c8:21:50:16:e2:d0:f3:bb:
7f:92:91:6b:7c:a0:49:f3:0b:53:98:5b:92:26:65:
95:29:07:4e:65:00:10:0b:e6:fc:d6:a6:e2:3f:a0:
b4:3b:2d:cf:00:14:a6:38:ee:93:db:2d:32:56:ae:
b6:87:ee:e2:bd:03:4d:9a:12:d3:66:47:67:d1:cd:
b1:0f:83:47:7f:44:5f:94:2c:e3:ad:ed:9e:ff:95:
3d:0d:1b:11:39:24:50:90:8b:f3:11:cc:e8:e4:ca:
bd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9C:A7:64:39:1F:AF:21:82:F4:D0:21:1D:05:64:56:9D:D2:04:E4
X509v3 Authority Key Identifier:
keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:fd:01:0d:11:0e:94:12:e3:b9:ec:e5:4a:ce:17:27:b8:5a:
17:a2:98:72:02:63:99:d9:43:e6:ca:4b:c7:bb:86:5a:72:88:
0a:a3:12:51:24:22:07:a1:e6:e6:d5:c8:1e:3a:62:a3:3f:35:
31:58:89:8b:47:da:73:d4:85:a4:e5:4d:b9:38:ad:7f:30:ef:
e2:1b:7b:68:dd:0a:08:47:e9:2e:9f:a6:fc:14:38:94:4e:c4:
4e:66:55:eb:11:58:c7:03:12:8d:e9:25:37:99:a0:90:34:b7:
38:c8:a6:e0:ab:3b:4d:5f:63:e3:03:a2:c0:c6:2a:b0:ff:69:
f7:75:d7:15:cc:da:11:bf:d1:71:6f:fd:da:09:e9:9f:4b:a9:
b3:d0:00:e2:42:1e:40:c2:53:5d:4d:0f:54:b9:9a:c3:22:7c:
81:36:f4:e4:d8:c3:75:98:e5:7f:a2:91:e3:71:d2:d4:7c:32:
81:10:bc:df:cb:af:0e:11:9a:83:2e:ee:95:70:70:be:68:0a:
a6:9e:c9:31:8a:3e:04:bb:a1:bf:ff:4e:8a:45:ae:4c:d6:e9:
64:50:0c:95:06:04:1c:96:a6:3f:30:57:11:8d:e1:4d:a5:7a:
49:cf:33:06:2e:3a:61:3c:fa:2c:c8:ea:8a:2a:53:0c:2a:ea:
de:f9:90:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:06:10 2026 by rpki-client