
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
File: vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft (raw, json)
Hash identifier: nHVDItD4YK4ZImgMhoYAVDq+QHWz9qk6ll+tZuTBeLw=
Subject key identifier: AF:0A:FB:1B:B9:0B:6D:01:51:85:93:7C:66:F7:A2:C5:38:7F:37:79
Authority key identifier: BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97
Certificate issuer: /CN=A918E1C4/serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
Manifest number: 7B
Signing time: Thu 23 Jul 2026 09:41:48 +0000
Manifest this update: Thu 23 Jul 2026 09:41:48 +0000
Manifest next update: Thu 30 Jul 2026 09:41:48 +0000
Files and hashes: 1: vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl (hash: SiXIrV8UYKm5WL3/A65KJfklE/NPp8BTUGdxcY9+lQg=)
2: 722C58FACE9311F0A2C11D25C4F9AE02.roa (hash: ERXxcYaD/BipGW6AIZDMmzRHcboCoePXi+aLABZ/mKA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl
rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:41:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E1C4, serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
Validity
Not Before: Jul 23 09:41:48 2026 GMT
Not After : Jul 30 09:41:48 2026 GMT
Subject: CN=6a61e1dc-ec3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:64:c3:ee:ca:1b:bc:ab:0b:e9:ff:cf:7c:be:
4d:97:90:f0:53:21:ee:d9:e5:7d:37:92:1e:4a:0a:
b3:a1:84:3d:b7:4d:18:ab:18:c9:f6:c7:80:f4:3a:
6a:61:31:a4:80:5c:ff:f9:26:6a:7e:27:78:98:2b:
e8:c9:db:b3:4f:3d:f1:04:7d:0c:ba:fc:5e:b2:73:
c8:1c:86:ef:b7:79:3b:64:f2:67:eb:3e:a7:4e:34:
8f:46:d9:6e:da:0c:82:f7:dd:a3:8c:68:cd:49:d3:
6a:00:08:09:fd:c4:70:e6:a8:f9:a8:47:4d:5e:a8:
ee:f7:90:c6:a5:bf:f7:8f:e0:e7:4f:3f:ec:a2:b5:
d2:5d:b4:c8:48:69:91:9d:42:29:df:09:b8:48:58:
f0:bf:cf:b3:6b:53:8e:3f:65:39:32:b0:87:b8:93:
d9:9a:ac:01:00:8e:91:b9:ad:89:8b:23:f8:f9:37:
e5:f8:af:e9:29:2b:c4:5f:cd:79:ac:6e:03:5b:43:
50:7a:40:b5:3a:53:1d:f8:3e:a7:cc:14:4d:84:c1:
ae:32:c1:05:40:98:c3:e3:25:9a:e8:6c:cc:4d:2d:
5e:53:98:f7:ed:d3:2e:84:c8:ad:9f:a1:1f:2b:46:
41:20:73:2b:70:2c:d2:fa:f0:a4:c1:0e:73:f2:87:
d1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0A:FB:1B:B9:0B:6D:01:51:85:93:7C:66:F7:A2:C5:38:7F:37:79
X509v3 Authority Key Identifier:
keyid:BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2b:52:70:e8:49:cb:69:a4:a5:e7:ec:cb:9b:09:38:e7:14:
18:96:af:40:78:eb:14:8a:44:55:6f:0c:80:1e:db:1d:de:ff:
44:e7:5f:46:f0:b7:00:d1:a8:9b:80:12:ae:09:ef:bc:1a:59:
e2:6c:5a:7e:51:74:4d:7a:ac:72:09:70:ba:4f:4c:9a:3f:e2:
0b:bc:f6:e4:53:22:d6:ca:24:76:c0:db:0f:5a:c6:7f:48:e6:
11:b3:5f:b8:08:97:9d:05:4e:d0:3d:b5:13:58:e3:b4:13:e9:
6f:7c:11:1b:bb:07:a2:98:fe:2d:3f:bb:82:43:b0:d3:3b:86:
d3:c6:00:a1:78:e1:46:3b:5a:22:00:94:fb:a3:c3:f4:64:1d:
84:07:61:6a:4a:f3:20:55:3f:3c:df:4c:54:40:2e:77:04:ff:
f3:84:f7:cd:c6:12:ad:a9:e6:87:e3:dc:1a:35:00:b1:6c:4c:
43:5f:42:50:db:83:39:20:0c:11:c3:f6:e8:63:e5:77:ad:49:
f0:82:a9:41:3c:cc:5b:44:62:7c:9a:e1:e7:79:33:41:e9:9e:
97:91:4a:7b:56:89:e8:27:0e:15:80:65:57:f7:42:ec:94:5a:
f6:68:9b:08:ed:25:0b:f2:52:fc:86:d3:f3:af:17:3d:a0:ab:
f7:7c:99:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:49:23 2026 by rpki-client