
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft
File: kY5yieKMGkkiojy1Zb2CG34gphE.mft (raw, json)
Hash identifier: cOahO4LIskFH4JlEsyRjCtV0sosimLGMR0rg0haFrfU=
Subject key identifier: DC:4C:98:67:23:03:DB:09:60:DC:D7:77:A6:8B:F2:72:41:33:CF:0F
Authority key identifier: 91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11
Certificate issuer: /CN=A9171B1A/serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611
Certificate serial: 0D83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft
Manifest number: 0D71
Signing time: Wed 22 Jul 2026 18:11:04 +0000
Manifest this update: Wed 22 Jul 2026 18:11:04 +0000
Manifest next update: Wed 29 Jul 2026 18:11:04 +0000
Files and hashes: 1: kY5yieKMGkkiojy1Zb2CG34gphE.crl (hash: VPmQjfgBkL5XHAkAUXchT/EfZJjorwpCW+k+qK1Z4D4=)
2: 6E3B1338F41211E9AAF5924EC4F9AE02.roa (hash: X8sSkThLSb4fvyIS1pC23KDUjsj3Bu29OZPUHsBaV1A=)
3: 6D9433B0F41211E9AAF5924EC4F9AE02.roa (hash: Aw64/YmY/GSEcpV9lRNLIVB3nggqqcAVaMWqQLrAoig=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl
rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:11:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3459 (0xd83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171B1A, serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611
Validity
Not Before: Jul 22 18:11:04 2026 GMT
Not After : Jul 29 18:11:04 2026 GMT
Subject: CN=6a6107b8-0825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6a:47:3d:24:c1:35:b8:d1:e9:1c:c8:2e:5d:
5a:eb:73:3f:30:c4:51:20:4b:55:4c:a9:89:fc:7b:
5a:d2:d8:db:fb:36:e5:6d:f3:20:1d:3a:0a:8d:cb:
a6:22:3c:9b:5d:31:c9:4a:1c:3c:9b:49:4a:d6:da:
53:2e:e2:3a:e0:22:45:13:6b:f6:d9:e1:58:04:f4:
1b:9b:d6:f7:4d:c4:23:39:4c:21:ca:e9:4c:ea:d9:
00:d9:f5:9a:b9:dc:ab:d5:cd:18:13:e3:a8:8a:27:
33:94:c5:c3:5b:29:d0:ef:ca:0d:0c:b9:c6:73:2a:
9f:12:d1:ef:0c:9f:92:9a:13:9d:5c:d3:f5:81:11:
ca:cb:18:54:7d:c6:c2:2b:81:d5:8c:67:8e:0b:41:
78:50:58:d2:d1:5d:59:33:af:a6:4b:07:ba:38:9c:
98:24:17:af:44:e1:91:ec:13:56:42:df:9b:a2:f6:
a0:78:0b:52:a0:72:a0:54:d0:e1:6c:d0:72:f3:b1:
56:2d:2e:01:60:32:c0:62:b0:14:32:4d:2d:f0:05:
e1:7e:03:21:52:60:33:6a:ff:11:ef:0e:0b:78:c6:
37:73:75:56:28:ed:1b:79:47:43:ba:90:f8:fe:67:
18:9a:57:51:e6:57:1f:ea:21:fb:78:06:0a:92:59:
46:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4C:98:67:23:03:DB:09:60:DC:D7:77:A6:8B:F2:72:41:33:CF:0F
X509v3 Authority Key Identifier:
keyid:91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:94:1d:67:12:30:ca:d8:ba:a3:1f:ef:4e:36:73:05:6f:f6:
49:1b:53:da:fa:8f:cc:2a:e2:18:21:5c:cb:4d:53:8b:11:e3:
81:1e:44:f4:33:ca:8c:c3:94:dd:27:f3:54:0c:6a:0f:f7:59:
06:16:88:b7:56:c9:61:86:ae:a8:79:7e:b5:b6:37:e6:bd:fb:
72:ee:c5:5b:4e:9d:75:3a:0d:70:ec:78:1a:e1:d1:a7:3c:51:
c4:05:b7:df:65:c2:d8:f4:2a:c7:32:ed:e1:f9:66:01:f4:d9:
e7:7d:e2:df:c2:ab:f7:fe:15:58:44:ee:4a:8d:a3:18:ec:17:
78:af:40:8b:40:f3:b9:35:1f:45:ae:91:7a:9d:e4:0b:fd:12:
b7:ba:7a:4b:62:ad:93:1b:87:48:dc:1a:ba:53:d7:b0:70:d1:
3d:97:c6:85:1c:42:ff:d4:cb:4e:5b:57:3d:ce:f6:2f:c6:86:
21:1f:53:08:cc:65:ef:e8:42:ea:91:32:ee:89:8c:74:10:46:
c2:69:31:b4:6f:c3:a0:12:6e:16:2e:61:68:73:49:07:7d:cb:
4e:7c:4c:e8:21:4f:40:cc:a4:c9:1c:00:a7:4a:f2:b5:d4:f9:
44:03:f9:00:f8:5e:06:d8:1e:45:1a:aa:2a:04:f1:40:5a:62:
0b:80:ef:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:00:22 2026 by rpki-client