
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft
File: _YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft (raw, json)
Hash identifier: ynkXleJxYwSitahCL/AvXptfkRi+Ua8PawX6zMep6z4=
Subject key identifier: 7B:4F:8C:0D:F9:17:43:63:54:44:2E:B8:01:28:CE:4D:DC:17:22:19
Authority key identifier: FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30
Certificate issuer: /CN=A9171064/serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430
Certificate serial: 0D23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft
Manifest number: 0D1A
Signing time: Wed 22 Jul 2026 18:26:03 +0000
Manifest this update: Wed 22 Jul 2026 18:26:02 +0000
Manifest next update: Wed 29 Jul 2026 18:26:02 +0000
Files and hashes: 1: _YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl (hash: +Te7/uqvSKavBocnixKdbmPbKCIVZieKF2TgNu7gIa0=)
2: A2A3D38A05CE11EA80526530C4F9AE02.roa (hash: nlkFWUzq5OO+pTS3z8k8oaCv56U483SdYeWxCplbsVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl
rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3363 (0xd23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171064, serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430
Validity
Not Before: Jul 22 18:26:02 2026 GMT
Not After : Jul 29 18:26:02 2026 GMT
Subject: CN=6a610b3b-92a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0a:91:6e:10:f1:dd:91:f5:5a:44:91:1e:7c:
d5:da:db:ff:53:76:2f:1b:57:8b:53:be:a7:d1:ff:
18:7f:f4:4d:0b:8c:90:93:17:1f:01:8c:26:88:2a:
52:bb:31:ae:bc:62:6e:dd:16:5b:9a:2d:91:1e:4d:
ed:b8:96:b0:a0:6a:f8:f4:b6:ac:dc:24:ab:15:59:
61:c9:16:5c:ca:9d:8d:fa:7a:7a:bf:2e:be:c0:38:
d8:d7:01:f5:c7:3c:3d:b3:66:0a:6a:4c:6e:e4:81:
a6:de:e6:2e:74:3b:db:09:02:20:7f:9a:40:6c:96:
64:62:10:80:4d:bc:87:2d:26:21:90:ba:8c:46:0e:
9c:35:ff:33:7d:e7:35:e1:c9:02:03:4e:93:81:15:
6e:db:b0:20:69:dd:ba:f6:a4:38:32:7b:7d:94:cd:
cb:17:84:ee:24:1f:9c:1d:a3:c1:e0:c2:5e:e8:a1:
2d:09:d7:18:73:13:ca:7c:72:ee:8a:ef:21:10:99:
ba:06:7f:fc:8b:6c:c4:e7:49:cb:1f:f8:1a:84:0a:
9f:63:db:54:ca:bd:74:ea:1c:8d:5c:96:71:ac:fc:
d6:78:e9:93:b6:5c:05:4f:8a:6c:8f:26:e1:27:9d:
9d:3b:33:3d:04:4c:d4:34:7f:a6:07:ef:fd:00:7e:
85:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4F:8C:0D:F9:17:43:63:54:44:2E:B8:01:28:CE:4D:DC:17:22:19
X509v3 Authority Key Identifier:
keyid:FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7b:cd:5c:e0:61:0c:bc:44:52:6c:bf:7c:50:5c:60:12:77:
8a:6e:90:f7:8f:4c:cc:bb:5a:3e:bc:de:19:30:70:b5:b4:23:
a8:51:0f:33:33:33:b7:9f:0e:74:7d:d3:c8:fe:ef:98:91:1c:
23:8b:13:8b:a4:f7:29:f7:81:20:b1:9e:18:00:90:f9:56:80:
15:06:fb:28:00:3b:5e:f2:be:8c:7d:8c:f1:63:28:7e:69:c2:
a8:42:ef:66:dd:75:9f:4b:e1:59:ae:1b:ac:60:55:6a:4c:1e:
85:db:f2:1e:21:c2:38:d2:06:22:af:e8:bb:cc:1f:11:66:02:
6e:b1:89:bc:0f:ac:6e:a3:b0:3f:18:bc:3e:9b:6b:79:33:9a:
31:85:94:fe:b0:88:e4:93:ae:b3:e2:2c:9b:34:5f:fd:8f:cc:
6a:08:d4:48:f6:e9:01:5c:94:6a:77:db:d5:4f:71:d0:00:e7:
ca:aa:71:f9:d1:fc:6f:b7:ff:08:99:28:5a:fc:6c:e8:2a:6d:
8a:5e:54:96:76:48:40:c4:e7:95:bc:94:17:03:b4:ef:5f:61:
a9:ec:cb:81:3a:65:57:30:1d:32:56:85:60:35:16:2e:cc:8d:
49:07:63:54:80:d5:ba:c3:57:8c:3b:ec:98:b1:e4:e3:c6:b4:
d8:ce:e0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:47:19 2026 by rpki-client