
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
File: pYrazvnSRVOlVka1puvM6rGfL7w.mft (raw, json)
Hash identifier: 4EJ8wgN9J/DT/zFdD36h33lBUHMVwYHgkUY1PgxU5X8=
Subject key identifier: 4A:B8:C7:C6:1E:5A:69:FC:4F:ED:F0:A5:14:34:A4:0A:30:B6:25:93
Authority key identifier: A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
Certificate issuer: /CN=A9174C7A/serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
Manifest number: 99
Signing time: Wed 25 Mar 2026 06:37:11 +0000
Manifest this update: Wed 25 Mar 2026 06:37:10 +0000
Manifest next update: Wed 01 Apr 2026 06:37:10 +0000
Files and hashes: 1: pYrazvnSRVOlVka1puvM6rGfL7w.crl (hash: 2+GhQSq6ADBNi8TOaMVPhJlBEOzEsRpOUB5l5C74FCM=)
2: 5B118C12986011F0A5423187C4F9AE02.roa (hash: Nv3VGs0s4nLweSbJ3JGcdt+LncTqoSFHEUO8LJ8JE2k=)
3: 8D052914404911F0A4BD357BC4F9AE02.roa (hash: HDAJrdViuU7kZQtbBcD9tgS1zcOCf1eCW5LDFit/g6Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl
rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174C7A, serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Validity
Not Before: Mar 25 06:37:10 2026 GMT
Not After : Apr 1 06:37:10 2026 GMT
Subject: CN=69c38297-6747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:8b:d0:c6:c3:d7:8b:f5:39:f0:a9:cd:c9:
88:e3:d2:14:88:a5:89:96:e7:49:97:b7:1f:20:67:
49:79:cb:12:18:ed:af:5f:63:51:3a:39:8e:94:ad:
d9:13:55:7b:9a:eb:af:f3:93:a0:fe:81:c3:bc:ad:
53:1f:53:72:82:47:0b:c7:eb:fc:60:06:ae:7d:1b:
1c:4d:38:69:a6:22:07:b4:4c:88:14:d5:ea:bc:1c:
01:7f:f9:4f:f1:f3:19:85:d7:30:93:44:c0:32:c9:
05:95:50:2f:6b:45:7a:8d:83:68:04:d6:8d:2f:f2:
6e:49:bf:03:a6:44:b4:0c:ee:47:2d:7e:57:d1:85:
78:1e:67:05:e6:91:4f:17:2e:6e:d5:88:df:75:9c:
71:de:70:70:64:d8:3f:99:f2:a6:6b:20:e3:df:e4:
65:84:79:50:50:5b:c1:99:90:3a:05:de:44:e8:b1:
b4:13:93:28:9a:6f:cd:ad:af:10:47:d1:57:b5:3b:
92:7c:51:aa:62:84:ff:e4:e9:96:3a:87:63:46:fc:
06:92:53:7e:c8:9b:95:17:05:84:ea:4c:66:aa:a2:
95:53:1f:7d:cd:f9:aa:b7:93:4a:e3:7d:c6:ee:59:
e4:12:0e:a9:6e:da:e9:43:bc:d9:50:5b:67:ab:b4:
f0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B8:C7:C6:1E:5A:69:FC:4F:ED:F0:A5:14:34:A4:0A:30:B6:25:93
X509v3 Authority Key Identifier:
keyid:A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:00:59:8b:f3:cc:6c:06:ef:95:dc:9a:94:55:ad:59:bb:12:
b3:95:8f:14:74:83:2c:54:a0:8a:bd:6f:78:9e:b9:42:6f:da:
62:f5:b6:b8:bf:99:7d:28:44:eb:9c:a3:88:c2:d7:f9:93:74:
b3:23:e3:8e:6a:e8:ab:60:94:af:12:36:52:0e:1e:27:75:5d:
4a:e5:5b:1a:a9:06:13:bd:36:96:e3:59:2c:c2:d8:0e:8e:aa:
c0:a3:56:f3:28:f5:a2:a1:ad:c4:77:47:35:93:de:01:1b:55:
19:ab:cb:5f:63:75:e4:3d:85:97:bb:36:cc:8e:64:c5:64:43:
9b:25:06:ff:9c:1f:04:b1:6a:c2:76:d5:1d:65:af:df:e5:1d:
7f:0f:8c:45:7c:da:a3:70:d2:5c:ac:f8:90:ed:90:a6:de:d3:
89:10:f2:9d:1d:76:e9:b0:df:68:6a:21:14:26:59:61:9f:ec:
8b:d4:30:41:3d:89:5b:e5:f6:67:a6:c5:98:26:f6:d7:f0:cd:
95:bd:ee:aa:15:85:ff:34:ca:ff:9f:4b:32:13:cf:71:e3:37:
49:7e:f2:da:b6:14:96:bf:e7:5d:57:cc:55:b2:46:21:10:a0:
8d:dc:97:d9:e1:b3:f2:2c:9a:d4:15:28:1a:98:b5:a0:b7:67:
8c:9a:75:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:36:27 2026 by rpki-client