
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft
File: yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft (raw, json)
Hash identifier: FWlzgkTHfDyUEarLbxgFDz+xrNyCPCYNfl3IJcuFjBg=
Subject key identifier: 86:FB:94:E2:1E:20:18:54:31:14:57:6A:38:A4:20:7F:BB:DE:FB:74
Authority key identifier: C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0
Certificate issuer: /CN=A917E1FA/serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0
Certificate serial: DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft
Manifest number: D7
Signing time: Thu 23 Jul 2026 08:28:50 +0000
Manifest this update: Thu 23 Jul 2026 08:28:49 +0000
Manifest next update: Thu 30 Jul 2026 08:28:49 +0000
Files and hashes: 1: yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl (hash: f58O0j9TQbUaJuIEp41rn21slcxthnqxYznUUf4Z/H0=)
2: 7354ACC0472811F0ADE2D44BC4F9AE02.roa (hash: znoNuAslfVcaeYT9Qtb9J+D936zhsxuFnvCQ4z32+wE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl
rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FA, serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0
Validity
Not Before: Jul 23 08:28:49 2026 GMT
Not After : Jul 30 08:28:49 2026 GMT
Subject: CN=6a61d0c2-bcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:c1:7c:be:7a:09:62:20:49:e4:e5:a2:ed:
39:98:28:ee:ca:29:a3:35:02:5c:b1:44:9f:3c:c9:
f5:9a:82:6e:53:7e:95:4d:3e:83:c8:ca:aa:be:8b:
98:fc:03:1f:41:74:7a:17:5f:43:35:da:61:12:6b:
c8:0f:b8:6d:06:cf:12:5a:75:d2:8e:35:60:d3:d3:
43:56:62:d6:ae:31:01:14:ca:33:b3:d2:4a:f0:60:
1c:20:0d:e6:3b:38:7e:3e:d3:24:0b:48:92:fb:2c:
5a:b8:23:ef:06:f1:69:bd:6b:93:89:93:75:6a:d8:
2f:38:fd:af:18:4d:fc:f8:b7:0d:8d:ac:61:b7:00:
0e:e9:2c:b1:e0:27:38:d0:4d:57:dc:d5:40:49:4c:
4f:a1:5e:ef:a1:14:03:8b:bd:82:88:e9:12:5b:f8:
e9:aa:8e:61:6d:6f:bd:42:8d:9e:1a:65:58:c6:6a:
99:91:f8:16:d4:38:ad:70:c4:2b:41:94:18:97:5a:
27:36:e6:df:7d:b0:eb:43:e6:ca:49:10:38:ee:d2:
70:fa:6f:00:0f:46:4b:6a:f8:b4:26:7b:c4:82:2f:
63:94:14:15:c3:02:5f:d5:19:07:ff:8b:14:9f:db:
64:cb:9b:4c:fd:71:19:48:5b:40:7d:e1:e1:1c:6a:
ba:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FB:94:E2:1E:20:18:54:31:14:57:6A:38:A4:20:7F:BB:DE:FB:74
X509v3 Authority Key Identifier:
keyid:C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:b7:4f:88:18:e5:fd:8b:30:6f:37:bf:4f:b9:b5:0b:c6:94:
a8:8c:f3:48:92:70:ab:2f:82:e1:b8:8d:11:11:cd:56:0a:10:
83:d8:e1:8c:1c:e2:69:f8:8a:23:58:fc:c8:6e:bf:22:11:51:
38:74:f5:4d:81:0f:6c:c2:ec:66:f7:2a:ce:e5:5f:1c:9f:46:
63:67:a4:f3:e1:f0:91:9a:c0:a1:e4:e3:ed:0b:15:53:03:12:
6e:f2:bb:4e:f0:4a:e5:3c:b6:2a:56:7c:c5:4b:19:fb:93:a2:
5c:9c:7a:d6:af:34:a2:2e:d9:2a:93:ca:ab:1a:f0:ff:68:cc:
3e:a5:db:99:9d:5e:33:02:90:42:d9:9c:f6:8f:15:f8:8d:11:
f1:e5:56:74:b7:89:0d:ef:b5:62:6f:34:e0:2d:dd:a6:d5:fb:
c0:e6:1c:13:58:de:da:3b:74:2f:07:b4:ce:bb:7a:97:67:ce:
f3:22:c4:2c:5d:31:e1:1b:3e:4e:5b:b2:dd:8b:d9:6c:03:94:
43:ea:5b:54:88:a4:b1:6b:66:33:01:5a:e7:96:20:24:3d:d7:
3f:2a:7f:04:e3:2c:10:26:3f:6b:6f:9e:52:4c:ad:95:71:5c:
ba:a6:82:3c:18:1a:43:ff:27:b3:c6:b2:44:f9:48:cb:e2:c3:
cf:35:fc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:00:24 2026 by rpki-client