
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
File: yYr7tLua6bGiej3TrVlWs07anGM.mft (raw, json)
Hash identifier: 5ZTVJ+rLI6i7V4DPJjOWQvG6S1j2XMvJWJJNroHz1p4=
Subject key identifier: 64:8E:12:68:61:18:D4:0D:25:CB:62:55:2B:DF:31:57:DA:5E:C8:BA
Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63
Certificate issuer: /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
Certificate serial: 0E89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
Manifest number: 0E6B
Signing time: Wed 22 Jul 2026 18:18:48 +0000
Manifest this update: Wed 22 Jul 2026 18:18:48 +0000
Manifest next update: Wed 29 Jul 2026 18:18:48 +0000
Files and hashes: 1: yYr7tLua6bGiej3TrVlWs07anGM.crl (hash: F8rL22ntFH4/M4CRWgV2m6OyT0yf8A92A/juaFyYWJQ=)
2: 1CD82986C36111E9A37AC46EC4F9AE02.roa (hash: 79PmiP9NpDAtWC6dqYWk56B1VkuYlkflhPnSmUa7hdQ=)
3: 1E573054C36111E9A37AC46EC4F9AE02.roa (hash: J82yfuC+4aLDmhGWjyr0F1wn0ktPZ4aMMMR1qjOd0j4=)
4: 1D884A0AC36111E9A37AC46EC4F9AE02.roa (hash: nRexK0UA55I5+x5R0A2TMhaYmEDiazdKkjOfJ9kGLwQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl
rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:18:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3721 (0xe89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D529, serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
Validity
Not Before: Jul 22 18:18:48 2026 GMT
Not After : Jul 29 18:18:48 2026 GMT
Subject: CN=6a610988-af80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:84:d7:f7:05:71:56:a5:5f:b5:16:ab:94:
86:e2:dd:19:98:0a:53:69:92:5e:45:67:16:ec:e8:
ac:48:1d:e1:d7:f7:2c:f5:4f:ff:75:74:14:ef:ab:
77:3b:15:8c:7e:cb:27:5a:b8:b4:1c:85:0d:ac:b5:
f5:f3:83:4d:6f:3f:be:da:cf:dd:60:ac:40:14:7d:
57:01:4f:0a:4b:8b:ca:96:51:7f:82:84:9e:52:35:
8c:3b:70:ed:4f:2d:fa:9a:70:a4:7d:34:a6:6c:ac:
9c:8a:74:c8:a6:99:85:e7:8e:89:9d:aa:5c:dd:59:
3e:cd:ba:cb:17:fa:41:53:bc:57:cf:1b:6a:c6:b4:
b4:bf:49:8c:3c:fe:48:74:d5:20:fe:ac:14:34:f7:
78:12:dd:82:1f:c8:3c:1c:00:22:51:10:94:5e:58:
55:60:ed:8f:1a:50:0b:fb:e0:88:08:e0:e0:49:e0:
b9:45:01:3a:97:d5:f6:7b:87:e1:4d:80:b7:7d:96:
d4:30:47:a2:59:cd:70:98:2b:37:e3:bf:57:31:e7:
79:d7:f8:d8:3c:95:d7:4c:73:f5:1d:5b:0b:71:b1:
2b:c7:70:bc:8b:21:ac:3e:82:d6:bb:63:ed:48:28:
16:18:9b:62:45:02:2d:97:b8:07:96:e2:c5:56:71:
84:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8E:12:68:61:18:D4:0D:25:CB:62:55:2B:DF:31:57:DA:5E:C8:BA
X509v3 Authority Key Identifier:
keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:20:fe:d9:25:06:26:bc:29:d0:c7:47:55:2c:8e:05:fc:af:
14:13:1a:2b:34:3a:ef:31:41:25:ea:72:b5:16:f3:d8:e3:6c:
d6:5a:12:ce:20:3d:58:ff:4a:d7:49:03:b1:d8:04:9b:6e:38:
eb:ca:7b:88:e5:26:15:59:cc:b5:1a:bc:e2:d6:c0:b6:08:70:
45:7f:c3:fa:0c:5e:3a:95:72:2a:c0:5b:75:fd:be:8c:73:08:
95:f0:70:dc:3f:95:6e:51:bd:67:01:00:6f:72:3e:d5:f1:fb:
9b:d3:87:5d:b3:a4:b6:20:6c:7f:84:aa:22:24:e9:21:5d:17:
5b:cf:1d:34:1a:61:2e:73:b9:7a:93:32:07:6f:e6:4c:82:4a:
40:6c:30:c6:78:d9:9a:6f:b1:97:fd:09:0c:7e:56:5c:44:17:
77:fc:0d:b6:ab:3a:7f:93:73:88:89:50:75:af:46:63:6a:b6:
2b:63:5c:d7:83:4e:aa:e1:69:94:0f:26:a7:82:8e:e8:2c:59:
10:fa:5c:5a:cd:4e:06:59:da:71:44:06:6e:a4:65:9e:06:fc:
5b:36:41:0b:c3:f9:fe:56:63:5d:06:dd:86:fd:20:51:a9:02:
c2:5e:c0:dd:8b:99:91:48:24:cf:d2:02:38:dd:f7:44:e7:ac:
15:d8:e2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:54:11 2026 by rpki-client