
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
File: Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft (raw, json)
Hash identifier: CKNebBab/BbGbgHAJVJiuB6Y5UeyRjbEcwUSsw2FgTs=
Subject key identifier: D2:67:D6:64:99:34:B1:28:6A:A8:E9:CF:10:2E:6F:FD:EB:E8:3E:ED
Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
Certificate issuer: /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Certificate serial: 40
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
Manifest number: 3B
Signing time: Wed 22 Jul 2026 16:13:01 +0000
Manifest this update: Wed 22 Jul 2026 16:13:00 +0000
Manifest next update: Wed 29 Jul 2026 16:13:00 +0000
Files and hashes: 1: Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl (hash: 6ABhUmCMZQpz6l2n+375krNN0tM9vKZbLEPTx2DiAss=)
2: 62A4D5365DE711F18D15F5F9BA833773.roa (hash: Yl758J5gQQ4kaYtkddFzVioKhcg++8qC0CLb5+Q1zpU=)
3: E685F69A372D11F1A4767B088F833773.roa (hash: FJIzDWY4FUZYzGXG6swI0+oNcll13LRpA1sEgGuP3vM=)
4: CB53532C4A9711F184FA30B7B0833773.roa (hash: uy6KJdAywX4n9D6cDCPQCt+q5gOWffOcvS4zvWYkygY=)
5: AAEECC6A6E2D11F1A887915478A30FBC.roa (hash: JY+2F4fpy8yZBneZcoqizCFFml/1qiEJ9kZd9Mylttk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:13:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Validity
Not Before: Jul 22 16:13:00 2026 GMT
Not After : Jul 29 16:13:00 2026 GMT
Subject: CN=6a60ec0d-3364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:3f:db:ee:5a:97:d1:2a:c6:49:bf:a2:62:
98:7c:a3:a3:8a:68:18:42:7f:36:2b:2d:dc:cb:3b:
86:d1:14:36:82:90:b3:a1:ed:ec:1d:20:c4:8b:b1:
36:e0:53:8f:aa:86:49:3f:d7:97:c3:5c:05:94:7f:
b1:60:a8:a8:ca:c9:62:5c:f9:0d:69:ff:b2:6c:05:
47:9f:ea:9d:ec:e8:8c:3d:01:42:3e:25:fb:8f:c0:
82:41:3c:5b:9e:bc:f6:f4:68:bc:88:0d:5a:d7:35:
ba:f3:1f:c1:cd:dd:f0:96:66:1b:43:88:3e:42:b1:
7d:6d:17:8f:57:99:2c:73:12:9a:25:b0:23:f3:52:
47:a7:44:f8:5f:0c:39:5f:b6:b7:82:db:fa:54:87:
cd:db:a9:61:1d:3a:b0:93:a9:f4:71:ec:7d:35:01:
f0:65:80:88:e7:54:66:68:73:bb:b8:fd:43:8a:1d:
5c:34:44:04:db:f7:2a:bf:82:38:dc:dd:c0:6d:b6:
a1:2c:99:33:7f:35:c3:b1:7f:87:fb:97:2c:b3:ae:
8b:eb:22:09:d5:aa:a8:45:92:b7:2e:00:c3:7f:cf:
1a:f3:05:f0:a5:ef:a0:79:25:9e:d0:3a:55:a4:52:
ea:1e:8f:41:74:88:2f:ec:ac:7d:64:67:1d:13:73:
c3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:67:D6:64:99:34:B1:28:6A:A8:E9:CF:10:2E:6F:FD:EB:E8:3E:ED
X509v3 Authority Key Identifier:
keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:c1:e5:a4:99:e1:9d:80:2d:b1:a3:c2:73:df:36:55:bb:03:
c8:ef:37:27:0e:b9:5b:d0:31:26:ab:13:48:fc:63:fc:69:e9:
06:ef:d3:0f:bc:14:f7:e9:1a:76:16:e0:7c:67:02:26:04:63:
1d:cc:51:f6:61:b0:d2:0b:6d:bb:38:3a:60:88:cd:38:57:53:
b4:16:3e:e6:99:4d:3b:06:6d:da:46:c9:7e:29:39:ce:5d:6a:
f6:fa:0e:dd:93:84:47:52:ab:c6:c5:24:13:f5:bd:5e:88:e4:
f4:51:06:a6:63:8a:3f:bf:32:2d:ed:55:2d:d6:f9:f2:ab:38:
b9:44:30:f5:86:33:0a:c5:75:b3:1b:ae:38:ca:2e:bc:5f:e8:
13:a1:3d:99:3f:87:12:2c:96:03:b5:5f:88:7b:18:0f:8b:01:
4d:f5:ba:d6:e1:18:6b:c2:d7:50:94:5f:2f:a4:88:a6:ee:0b:
29:6f:48:66:65:2c:1e:ce:a0:7e:7b:01:d9:8d:b0:34:46:43:
42:6b:b8:27:60:2d:97:04:3a:04:43:0d:eb:20:7b:14:ad:39:
3b:00:79:09:55:b8:da:cc:a5:2c:b0:36:c4:eb:2d:8a:b9:b6:
fb:17:0b:fa:59:3f:6b:1b:31:6a:e9:73:29:77:99:d5:6c:08:
29:4a:6a:2b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QTg0QTExMC8GA1UEBRMoNjM3RDU2QTc1QkI5NUJDNUM5RTZCMDg5RDkzNENCNUUy
RkJEOTYyRDAeFw0yNjA3MjIxNjEzMDBaFw0yNjA3MjkxNjEzMDBaMBgxFjAUBgNV
BAMTDTZhNjBlYzBkLTMzNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCggD/b7lqX0SrGSb+iYph8o6OKaBhCfzYrLdzLO4bRFDaCkLOh7ewdIMSLsTbg
U4+qhkk/15fDXAWUf7FgqKjKyWJc+Q1p/7JsBUef6p3s6Iw9AUI+JfuPwIJBPFue
vPb0aLyIDVrXNbrzH8HN3fCWZhtDiD5CsX1tF49XmSxzEpolsCPzUkenRPhfDDlf
treC2/pUh83bqWEdOrCTqfRx7H01AfBlgIjnVGZoc7u4/UOKHVw0RATb9yq/gjjc
3cBttqEsmTN/NcOxf4f7lyyzrovrIgnVqqhFkrcuAMN/zxrzBfCl76B5JZ7QOlWk
Uuoej0F0iC/srH1kZx0Tc8PrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0mfWZJk0
sShqqOnPEC5v/evoPu0wHwYDVR0jBBgwFoAUY31Wp1u5W8XJ5rCJ2TTLXi+9li0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBODRBLzc3QUM3QkQyMzRG
NzExRjFCQjczNkNBNzdDRUU1MjhFL1kzMVdwMXU1VzhYSjVyQ0oyVFRMWGktOWxp
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvWTMxV3AxdTVXOFhKNXJDSjJUVExYaS05bGkwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB
ODRBLzc3QUM3QkQyMzRGNzExRjFCQjczNkNBNzdDRUU1MjhFL1kzMVdwMXU1VzhY
SjVyQ0oyVFRMWGktOWxpMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA0weWkmeGdgC2xo8Jz3zZVuwPI7zcnDrlb0DEmqxNI/GP8aekG79MPvBT36Rp2
FuB8ZwImBGMdzFH2YbDSC227ODpgiM04V1O0Fj7mmU07Bm3aRsl+KTnOXWr2+g7d
k4RHUqvGxSQT9b1eiOT0UQamY4o/vzIt7VUt1vnyqzi5RDD1hjMKxXWzG644yi68
X+gToT2ZP4cSLJYDtV+IexgPiwFN9brW4RhrwtdQlF8vpIim7gspb0hmZSwezqB+
ewHZjbA0RkNCa7gnYC2XBDoEQw3rIHsUrTk7AHkJVbjazKUssDbE6y2Kubb7Fwv6
WT9rGzFq6XMpd5nVbAgpSmor
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:17:23 2026 by rpki-client