
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft
File: 2y3U_v83CRJX9gGdUKI5MOxG4fs.mft (raw, json)
Hash identifier: 4PcPcjahYEePuhQoxF2oIy18xNYn9xAxoOyA/lf+4to=
Subject key identifier: 9A:B1:C5:ED:A5:C6:4F:00:B9:69:4D:D1:EE:99:A5:DD:81:71:16:21
Authority key identifier: DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB
Certificate issuer: /CN=A917F116/serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft
Manifest number: D7
Signing time: Thu 23 Jul 2026 08:54:12 +0000
Manifest this update: Thu 23 Jul 2026 08:54:12 +0000
Manifest next update: Thu 30 Jul 2026 08:54:12 +0000
Files and hashes: 1: 2y3U_v83CRJX9gGdUKI5MOxG4fs.crl (hash: lr3mNW5aINy74C0f3QrYU9MYPqsVCYXB/e1qUUFIOEc=)
2: 1210E96E791511F08360054EC4F9AE02.roa (hash: ULmaEbsCt8jx5VNQEK4A/L6Td+dmpFbzrt4LFjox2QU=)
3: 029780A8791D11F08A28C96CC4F9AE02.roa (hash: EvnupFOZS9saBqM7mIs3MvjaMbJtIFIC/WVZZVoBHUA=)
4: 5747D682B8C611F085BFD10DC4F9AE02.roa (hash: e/nGF9gabnytD0nDQ8tiyYbCWD4pMyOmMIQ/tzUfKDM=)
5: 3E9B5E9C791511F09DD1364EC4F9AE02.roa (hash: ZCsqysIZa7spZRDM5FKGh48jQ/BUyE3DwkRZdcL8PRg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl
rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F116, serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB
Validity
Not Before: Jul 23 08:54:12 2026 GMT
Not After : Jul 30 08:54:12 2026 GMT
Subject: CN=6a61d6b4-3545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:69:02:c1:ae:9f:d4:37:6e:8e:d2:60:86:
63:95:b8:3c:9f:46:bf:1f:a3:2a:6b:54:3f:0f:f3:
e0:5b:40:2e:ce:9b:87:15:ef:86:13:a0:29:31:c9:
cc:8c:a8:b4:0b:b2:1f:4d:8e:3b:0d:9f:4e:1d:2a:
33:6b:da:33:8a:f6:70:ae:ee:40:c7:e1:f2:83:09:
d9:bb:c8:c2:0b:6b:1c:9a:7f:da:d9:26:6d:24:0c:
75:a4:ab:97:50:11:33:4a:e1:b5:f3:08:26:42:bb:
c9:a7:c1:6e:77:59:70:3c:6c:a1:73:82:7a:ee:59:
83:eb:bc:de:78:a7:b0:f8:28:ac:48:27:b4:ed:3e:
fd:09:39:2c:41:6c:d7:de:fb:60:d1:6e:69:e9:20:
3c:78:e5:96:5a:50:84:d0:50:a4:fc:7a:96:ff:80:
82:14:fb:35:06:ea:86:79:1e:6a:e9:74:e9:ef:77:
c4:9b:a3:a4:dd:24:27:fc:72:68:22:81:a9:86:69:
63:11:86:77:28:d1:83:ae:97:06:af:e2:a9:92:cf:
7c:4b:47:fd:8a:2b:0f:b5:7f:ae:28:10:d9:51:44:
48:92:98:82:f3:26:f5:5e:09:f5:d9:a5:f9:2e:a0:
fd:bb:8c:9f:42:e9:9a:2c:31:7c:e4:69:5c:11:ec:
9b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B1:C5:ED:A5:C6:4F:00:B9:69:4D:D1:EE:99:A5:DD:81:71:16:21
X509v3 Authority Key Identifier:
keyid:DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:78:67:a8:34:82:d2:87:0c:69:03:e7:6e:66:2c:91:ae:82:
d5:fd:1f:ba:70:18:90:91:56:20:8d:fb:12:73:88:d7:f3:5d:
96:4d:37:64:de:0a:ce:09:1e:5e:12:90:51:99:54:9a:ca:51:
ed:1c:b7:b4:c0:9e:88:6a:0e:79:92:ca:83:7e:64:b9:bd:60:
75:2f:70:a7:b2:a9:93:79:bb:17:23:72:fc:ee:47:a3:3d:ed:
d8:b2:74:3e:06:2e:68:14:37:b5:68:42:c8:d8:34:30:0e:2e:
cc:4e:b0:25:af:8b:e1:95:0b:c8:d9:f9:a9:7a:96:2d:53:39:
e0:18:47:7c:af:44:61:a4:c9:34:04:99:b1:5b:2f:aa:5a:fd:
f6:88:46:a2:15:6c:cd:4d:62:60:8e:0f:3d:a2:ec:4c:e5:40:
5d:4b:53:84:76:bc:2b:ad:b6:a9:a6:6c:df:39:34:52:34:0a:
6e:cd:8c:58:43:fb:44:37:95:26:54:4a:b9:56:38:bc:3e:37:
d5:3a:38:f2:50:ad:cb:18:26:e1:1f:fa:de:2c:05:58:41:22:
4d:b9:64:ab:fc:17:83:8c:e0:81:a9:04:cf:e6:42:16:d1:b3:
d9:8e:9c:33:b7:2a:4e:96:81:27:72:39:65:b8:73:eb:04:e3:
ce:0d:e6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:50:49 2026 by rpki-client