
$ rpki-client -vvf rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
File: cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft (raw, json)
Hash identifier: bPeU35TQ/BckEq7d03aamfUbqzAghGB+FcoiiSfbmwk=
Subject key identifier: 81:E5:A1:0E:CB:ED:8E:23:9D:DB:AE:C9:DE:9A:51:38:E5:B6:AD:38
Authority key identifier: 71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7
Certificate issuer: /CN=A917174E/serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7
Certificate serial: 0EBE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
Manifest number: 0EBD
Signing time: Tue 12 May 2026 17:42:36 +0000
Manifest this update: Tue 12 May 2026 17:42:36 +0000
Manifest next update: Tue 19 May 2026 17:42:36 +0000
Files and hashes: 1: cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl (hash: o5+Yf5gZn6gE3uNEymHXxPDGWKzEQ6i/doZaAUhUYjs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl
rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:42:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3774 (0xebe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917174E, serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7
Validity
Not Before: May 12 17:42:36 2026 GMT
Not After : May 19 17:42:36 2026 GMT
Subject: CN=6a03668c-757e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f7:31:c1:2e:69:35:da:90:19:d0:a5:29:92:
8e:02:46:2b:5f:5f:92:79:ee:89:ab:5f:dd:f8:67:
d8:08:2d:3e:4b:ae:dc:28:be:1a:ff:5d:8a:e3:45:
ce:f8:06:1f:de:cf:59:b4:67:89:dd:16:8c:f2:84:
ca:e7:b6:3a:10:df:04:ad:b8:04:3a:f4:ba:85:30:
8f:1a:2a:b4:6e:c5:0e:a4:22:0d:20:08:67:de:10:
3b:05:20:f2:51:36:50:dc:cb:8b:6d:7c:2a:f3:08:
45:d0:6a:d8:ee:96:48:fd:aa:b7:4f:24:f2:ec:b5:
39:7a:f1:fa:d0:96:64:29:a1:e3:5f:41:e0:21:c0:
50:cf:2f:fa:2a:b3:c7:e7:40:43:b2:23:c1:f3:06:
2a:1f:65:78:47:72:b3:46:3a:55:e3:be:bd:41:0e:
00:68:54:e2:b8:d1:e2:e7:2d:cf:93:da:44:ef:5d:
ef:70:8c:d0:e6:69:4e:77:4f:00:25:3d:8e:31:e8:
96:db:d9:66:43:4d:c4:86:70:e9:aa:9b:b6:9a:ed:
33:36:f6:4b:ea:9e:9d:84:4d:21:79:b7:7c:48:80:
ef:a6:90:90:16:a8:bb:06:de:2a:aa:e6:1e:3a:94:
69:a9:1c:15:fc:da:8f:7a:60:56:14:91:99:c1:c2:
d1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E5:A1:0E:CB:ED:8E:23:9D:DB:AE:C9:DE:9A:51:38:E5:B6:AD:38
X509v3 Authority Key Identifier:
keyid:71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:13:54:27:be:38:3a:f7:62:76:bc:42:68:3f:d2:fb:3b:bc:
5f:12:6e:2e:d6:18:a1:fc:3a:4f:37:bc:b0:0c:ed:68:c8:38:
80:55:f0:9a:25:29:95:94:fd:8c:bd:19:56:47:a8:79:13:91:
a3:8e:a2:bb:7e:c9:47:2f:ce:5a:f6:26:b2:97:ca:7e:00:ef:
b1:43:63:ef:76:c0:11:b3:62:1b:9c:3d:89:e8:8a:96:cf:91:
de:05:c1:c9:9a:74:c9:fc:05:a7:31:67:54:bb:5c:8d:94:b4:
ec:a8:6e:d2:7a:05:58:cd:d4:5e:f5:8f:12:97:bd:72:59:76:
72:64:12:c4:94:dc:36:56:a1:90:ef:e1:23:57:25:63:f3:97:
2e:ed:0f:3c:16:1b:e5:f8:f4:a4:fe:5e:01:03:b5:9d:ce:76:
62:c1:98:52:99:5b:54:6e:80:ea:24:34:48:1c:bd:7b:46:c6:
90:b1:05:2d:b9:be:e4:36:43:54:a1:8d:01:21:51:c0:f7:1d:
5b:ac:9c:bc:0a:28:f1:99:d8:9f:16:97:46:c0:86:98:98:f4:
84:38:a1:41:8b:19:b6:18:c6:11:7a:b6:c7:b4:dc:77:c9:e1:
2b:01:a2:18:1b:63:61:6b:b9:11:66:f0:e3:4f:8d:65:2a:59:
d4:95:9b:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE3NEUxMTAvBgNVBAUTKDcxODA3MzA5OEFGMDM5NkZEOEUzMzA5QTFCOUZCNkYz
RUVCMTdBRTcwHhcNMjYwNTEyMTc0MjM2WhcNMjYwNTE5MTc0MjM2WjAYMRYwFAYD
VQQDEw02YTAzNjY4Yy03NTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwPcxwS5pNdqQGdClKZKOAkYrX1+See6Jq1/d+GfYCC0+S67cKL4a/12K40XO
+AYf3s9ZtGeJ3RaM8oTK57Y6EN8ErbgEOvS6hTCPGiq0bsUOpCINIAhn3hA7BSDy
UTZQ3MuLbXwq8whF0GrY7pZI/aq3TyTy7LU5evH60JZkKaHjX0HgIcBQzy/6KrPH
50BDsiPB8wYqH2V4R3KzRjpV4769QQ4AaFTiuNHi5y3Pk9pE713vcIzQ5mlOd08A
JT2OMeiW29lmQ03EhnDpqpu2mu0zNvZL6p6dhE0hebd8SIDvppCQFqi7Bt4qquYe
OpRpqRwV/NqPemBWFJGZwcLRbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIHloQ7L
7Y4jnduuyd6aUTjltq04MB8GA1UdIwQYMBaAFHGAcwmK8Dlv2OMwmhuftvPusXrn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTc0RS81NEFBMTQ5Q0FB
RjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09XX1k0ekNhRzUtMjgtNnhl
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NZQnpDWXJ3T1dfWTR6Q2FHNS0yOC02eGV1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTc0RS81NEFBMTQ5Q0FBRjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09X
X1k0ekNhRzUtMjgtNnhldWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcBNUJ744OvdidrxCaD/S+zu8XxJuLtYYofw6Tze8sAztaMg4gFXwmiUplZT9
jL0ZVkeoeRORo46iu37JRy/OWvYmspfKfgDvsUNj73bAEbNiG5w9ieiKls+R3gXB
yZp0yfwFpzFnVLtcjZS07Khu0noFWM3UXvWPEpe9cll2cmQSxJTcNlahkO/hI1cl
Y/OXLu0PPBYb5fj0pP5eAQO1nc52YsGYUplbVG6A6iQ0SBy9e0bGkLEFLbm+5DZD
VKGNASFRwPcdW6ycvAoo8ZnYnxaXRsCGmJj0hDihQYsZthjGEXq2x7Tcd8nhKwGi
GBtjYWu5EWbw40+NZSpZ1JWbBA==
-----END CERTIFICATE-----
Generated at Wed May 13 12:06:47 2026 by rpki-client