
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
File: Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft (raw, json)
Hash identifier: DMlVtTK8dKfdOERGQY6+iDElqqu5OrzbLhZBRHaCjZw=
Subject key identifier: 2F:8C:DB:A1:4D:0A:7D:C0:DC:5D:EC:A6:FC:8F:95:8F:CF:B7:A1:23
Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
Certificate issuer: /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Certificate serial: 41
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
Manifest number: 3C
Signing time: Fri 24 Jul 2026 16:15:28 +0000
Manifest this update: Fri 24 Jul 2026 16:15:27 +0000
Manifest next update: Fri 31 Jul 2026 16:15:27 +0000
Files and hashes: 1: Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl (hash: OLYjtnmxDzLJb4mhIMX+4+yV6SDqnEeOIC9EKVj4gQw=)
2: E685F69A372D11F1A4767B088F833773.roa (hash: FJIzDWY4FUZYzGXG6swI0+oNcll13LRpA1sEgGuP3vM=)
3: AAEECC6A6E2D11F1A887915478A30FBC.roa (hash: JY+2F4fpy8yZBneZcoqizCFFml/1qiEJ9kZd9Mylttk=)
4: CB53532C4A9711F184FA30B7B0833773.roa (hash: uy6KJdAywX4n9D6cDCPQCt+q5gOWffOcvS4zvWYkygY=)
5: 62A4D5365DE711F18D15F5F9BA833773.roa (hash: Yl758J5gQQ4kaYtkddFzVioKhcg++8qC0CLb5+Q1zpU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 15:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Validity
Not Before: Jul 24 16:15:27 2026 GMT
Not After : Jul 31 16:15:27 2026 GMT
Subject: CN=6a638fa0-8e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:2a:ea:a7:b6:80:88:3d:a9:eb:ce:bf:5e:
fd:e2:e1:2d:43:16:cb:fb:90:81:cc:51:a1:4d:31:
82:5d:be:1e:f5:97:74:42:a6:a1:79:2a:fd:53:9e:
24:50:d2:22:81:f2:bf:75:87:9e:d7:9e:45:ff:14:
83:32:86:a0:df:63:d7:73:de:1e:92:66:c4:68:c8:
39:57:27:dc:32:29:88:15:11:9d:65:4a:ec:72:7b:
08:c5:b0:3e:c8:fa:20:59:44:1e:74:70:f4:a6:7e:
03:80:c3:5b:38:32:93:95:e5:ba:7b:c1:d3:2f:18:
cd:5f:f0:b5:70:5b:1c:51:0a:4c:33:bd:64:c8:bb:
36:7b:cc:df:d8:4f:8d:4c:17:7c:8f:81:6e:0d:ee:
cc:18:4a:0b:a0:5c:0e:8c:80:bd:4f:27:c2:b6:f5:
08:41:d7:d1:c8:08:b6:39:2c:31:6e:f5:09:b7:5d:
96:b7:2e:dd:88:4a:75:b5:d0:f2:0b:50:4c:b3:b9:
9b:85:9c:97:5c:36:34:ef:bf:63:8d:db:47:83:3f:
17:7b:33:8f:76:1d:a9:af:d6:a3:28:19:29:f3:e3:
cb:03:5b:3b:3c:a0:8f:7d:b0:a9:02:cd:2e:91:c2:
0b:3b:52:08:69:01:72:6f:97:e5:66:59:3b:af:25:
0f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8C:DB:A1:4D:0A:7D:C0:DC:5D:EC:A6:FC:8F:95:8F:CF:B7:A1:23
X509v3 Authority Key Identifier:
keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:69:7a:09:15:a1:45:20:f6:58:35:c4:64:71:5c:e9:e5:93:
f8:fa:b7:8c:88:47:d9:5f:7d:a4:45:38:e4:e5:31:e8:3e:72:
b1:9e:88:50:be:7d:23:cd:84:d1:50:fa:ef:4f:c7:b7:5e:20:
88:ea:db:d8:7f:bc:9d:32:84:45:6c:59:d8:9d:84:88:f6:b0:
97:67:95:78:87:f8:98:1d:03:a8:94:bc:d8:a0:18:30:7b:b5:
59:7c:9f:1c:85:db:92:c8:bf:cf:47:47:a1:36:2b:51:52:54:
57:51:8a:89:a4:5d:e0:7c:49:ed:c4:dc:43:91:05:f1:4d:47:
8c:30:17:27:c3:ca:d2:76:f3:d8:15:32:28:5c:5e:a2:16:a0:
0c:33:71:02:e1:87:eb:1a:f4:22:7b:e5:b7:02:e3:0e:83:7f:
6c:8b:09:61:ac:4d:59:89:e9:c0:6c:eb:49:aa:7a:16:61:05:
fe:c4:02:88:0d:bf:09:09:ad:8b:36:82:49:d4:a4:d1:be:24:
14:43:00:90:db:cc:e1:b1:a6:ad:fe:33:3a:48:ce:23:0b:42:
c6:a0:2c:b3:54:f9:15:ec:df:5e:32:e8:62:36:08:4b:5d:53:
bf:43:f1:e8:2b:c9:db:33:39:b7:f9:eb:b1:3b:47:7f:94:8a:
cf:e7:81:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:18:35 2026 by rpki-client