
$ rpki-client -vvf rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
File: y3TVYT1zQs-5t_ed7wyfrYhceCI.mft (raw, json)
Hash identifier: ZZafoDNL7Qjd7SB9+AFXculymtnTINGWlceuwiuO4tc=
Subject key identifier: 85:E2:B0:FE:1A:37:D3:65:E6:54:84:CE:CE:0A:33:4E:A5:8A:F2:39
Authority key identifier: CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22
Certificate issuer: /CN=A917845B/serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822
Certificate serial: 023E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
Manifest number: 0238
Signing time: Thu 23 Jul 2026 03:46:50 +0000
Manifest this update: Thu 23 Jul 2026 03:46:50 +0000
Manifest next update: Thu 30 Jul 2026 03:46:50 +0000
Files and hashes: 1: y3TVYT1zQs-5t_ed7wyfrYhceCI.crl (hash: fF++jc5JvRMMS74DHTh9uZ55FsIlOWeR0sOeW434VBY=)
2: D5981734217611EE9EBE2F70C4F9AE02.roa (hash: 4D3L2HVQh9/CoYMqSW86iigkVTttSKmbPRkmZFzgEf4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl
rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:46:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917845B, serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822
Validity
Not Before: Jul 23 03:46:50 2026 GMT
Not After : Jul 30 03:46:50 2026 GMT
Subject: CN=6a618eaa-3e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:13:c4:ff:23:f2:7c:d4:e1:3b:b1:45:77:
47:ce:21:96:a1:be:5d:b7:23:9d:f4:9a:f2:98:2d:
52:0f:2d:f1:ea:35:6b:6a:c7:c1:6c:a4:a9:3e:e1:
fc:a2:2d:d8:8e:e4:fb:aa:f8:58:95:0e:22:91:66:
a8:ef:c5:42:12:24:c6:21:cf:58:4d:df:8b:24:28:
d1:7f:6a:50:ec:4f:9a:9f:cc:68:12:70:d7:61:49:
24:b8:69:55:74:9b:b1:f8:fa:3e:03:98:82:67:ed:
ab:ca:3d:f3:ce:62:41:8e:48:67:d9:0c:66:69:bd:
43:98:e6:18:00:0d:2e:87:ac:40:03:fa:6b:76:66:
3f:29:04:62:06:17:cf:1f:66:10:ea:68:d0:24:fc:
ce:2b:bb:91:20:b7:c4:3a:19:bd:06:62:44:df:d1:
8d:51:8f:7c:1e:60:b3:3d:70:8d:62:94:02:1b:f9:
c0:c4:05:2b:a0:b1:98:3a:2f:a8:d7:e1:ee:bc:e9:
c9:0f:21:0d:6d:b5:c6:1d:f8:0b:bb:d3:11:74:b2:
c8:e6:a5:80:5b:8a:ef:e7:55:be:63:48:8c:36:6e:
70:ec:07:68:e2:bb:56:c4:ea:6b:b4:4b:ff:bd:f5:
fa:f2:aa:b1:4a:f2:1b:0e:09:57:76:dc:21:66:40:
54:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E2:B0:FE:1A:37:D3:65:E6:54:84:CE:CE:0A:33:4E:A5:8A:F2:39
X509v3 Authority Key Identifier:
keyid:CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:23:d1:cb:e8:6b:40:5a:1f:8b:1d:b0:e3:ca:83:ce:1b:b0:
9c:06:05:4b:76:50:0d:b6:d7:29:d4:4c:f5:e4:8f:9e:e6:26:
42:9f:01:68:10:57:51:5f:5d:3a:2f:07:ee:2e:57:5a:e3:a4:
6c:35:7f:3f:1d:fd:7d:e0:c3:28:59:d1:74:3e:26:39:c2:87:
99:c2:ea:44:64:2b:d6:a1:e8:20:be:56:8b:68:a7:48:04:a2:
ef:d2:fc:f4:02:5d:b0:6c:67:2c:aa:19:d8:b1:ac:6e:8b:f5:
0a:7b:dc:ee:c4:58:fa:fa:47:ac:c0:8e:ba:71:b6:e4:f9:a2:
b8:9e:c8:66:c9:ab:5b:18:79:fa:4f:74:e3:94:64:ed:98:d1:
e2:2c:07:19:63:b0:25:6b:46:b1:75:9f:b6:b4:58:e7:9a:5d:
52:23:e9:dc:55:aa:b0:21:50:bb:ea:46:eb:c1:8a:9f:9f:87:
a1:17:11:88:a5:fe:df:ba:9c:ae:38:15:67:35:55:b3:73:34:
b1:7a:db:78:d8:a7:df:e7:38:6e:ee:66:db:8f:fb:21:e7:82:
1a:0c:fa:02:b0:27:28:6d:58:25:c6:a0:0c:48:4f:14:0b:89:
94:ae:0c:9e:c4:2c:61:29:01:45:0e:44:fe:94:1b:1b:dd:19:
70:63:25:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:26:20 2026 by rpki-client