
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
File: pYrazvnSRVOlVka1puvM6rGfL7w.mft (raw, json)
Hash identifier: eyfKyl//LM+PZ9l03p032gPx6LGYAlCxS+ozmMTriwo=
Subject key identifier: D5:91:95:A6:42:CE:53:DA:FE:5C:B0:70:1D:C6:C1:86:71:3E:72:CD
Authority key identifier: A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
Certificate issuer: /CN=A9174C7A/serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
Manifest number: F8
Signing time: Fri 25 Sep 2026 06:21:32 +0000
Manifest this update: Fri 25 Sep 2026 06:21:31 +0000
Manifest next update: Fri 02 Oct 2026 06:21:31 +0000
Files and hashes: 1: pYrazvnSRVOlVka1puvM6rGfL7w.crl (hash: OPwR1lY4IzVlJ9hEsz/0sTnPqvryxQyo5sisaVWLsqc=)
2: 8D052914404911F0A4BD357BC4F9AE02.roa (hash: MvcG4U91ksg21bFQHUycofyC3j8v7/vCU+cxxJzP/x8=)
3: 5B118C12986011F0A5423187C4F9AE02.roa (hash: alasAzOtWpleBKeTwTXbhQlKP6svXTD3Kr1GRXjNvNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl
rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174C7A, serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Validity
Not Before: Sep 25 06:21:31 2026 GMT
Not After : Oct 2 06:21:31 2026 GMT
Subject: CN=6ab612ec-34c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:1a:dd:e0:2f:83:21:bc:11:6d:15:51:10:
71:c4:e3:a8:0e:d2:55:c8:54:3e:7e:a4:a0:60:78:
a3:90:1b:d1:86:26:fd:2f:af:b0:da:c7:2a:64:91:
53:2f:e9:fc:f9:de:c1:61:1b:57:ee:6c:c6:91:4d:
1d:53:45:c9:5f:2a:3b:fc:f5:f9:1e:f5:dc:db:63:
0f:ea:7f:c6:0b:c2:e6:72:21:41:a3:29:8b:0a:4e:
8d:63:00:4a:46:bb:ad:ea:5c:4d:46:5c:80:f1:32:
1c:6a:04:29:2a:b4:dd:51:64:54:35:19:e0:e7:44:
c2:80:3f:07:c5:3f:ab:e4:3f:79:ec:ff:64:25:1f:
48:ea:64:12:1c:6c:2c:7a:b8:8f:17:e5:de:51:86:
1a:44:f8:f2:66:fc:dc:ac:1b:c1:22:82:24:f7:11:
99:76:9f:b4:3a:e5:e2:8b:2b:2b:e2:61:0d:4d:09:
6a:50:7b:4e:c4:ff:8f:4a:62:ca:14:18:c9:fd:32:
b5:18:78:51:5c:a1:67:e3:d8:3b:2b:18:34:62:8a:
7e:89:b5:6f:0f:5d:e9:48:35:c2:4e:87:21:29:83:
d8:f2:cc:9f:d5:69:75:d6:c9:0f:31:d4:f6:a3:37:
1d:28:b7:3e:43:59:17:d7:da:d1:37:c4:b5:9d:f7:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:91:95:A6:42:CE:53:DA:FE:5C:B0:70:1D:C6:C1:86:71:3E:72:CD
X509v3 Authority Key Identifier:
keyid:A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ad:2d:ed:33:dc:54:55:d4:9b:76:ba:aa:bb:cf:4b:d5:8e:
29:d7:a6:52:10:64:7c:af:9e:a9:09:01:f9:94:73:e7:a3:0a:
34:f8:09:af:a1:da:0d:0f:5b:38:d1:b0:9f:cc:c9:be:cc:8e:
c0:9c:6f:36:a9:4b:b3:c2:e3:b2:36:75:ea:0d:d3:de:30:89:
18:b4:39:32:61:34:fd:bd:9d:a3:d1:1d:98:8a:d6:e6:25:31:
3f:71:7a:bd:b4:10:92:54:90:6c:c0:ba:22:86:3d:99:7d:e4:
e2:9b:c9:79:1f:95:56:8b:d3:97:c6:c5:32:0c:bf:93:fb:aa:
65:54:db:8e:2b:e5:b2:ba:1a:82:c9:df:36:33:90:81:c3:50:
78:0d:de:50:b0:89:2b:b1:c3:49:1b:40:96:9e:77:89:42:a1:
54:0b:e2:27:72:55:80:c6:57:df:9c:3f:8c:53:64:06:82:ff:
d5:e7:a6:63:04:6f:35:c4:03:8d:ea:93:4f:94:05:44:3d:02:
05:07:b3:72:3b:ee:29:0b:67:b6:06:4b:f6:d8:5c:64:53:79:
eb:f4:b8:c8:9e:91:f4:5e:86:89:49:0d:36:ff:ef:32:c0:2c:
c9:88:01:33:32:ff:19:ba:ca:28:7b:0c:84:ea:c0:e0:f3:a0:
c4:1f:91:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:07:42 2026 by rpki-client