
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft
File: C-AoY1W14laYjORU35P8D8p_YEA.mft (raw, json)
Hash identifier: hSFivPkyvixddwtd7wT6/+3dX6tL3TXZCzd1zmRc3x4=
Subject key identifier: 1D:29:CB:C5:6C:41:6C:D2:B0:C0:A3:AA:27:1A:07:44:27:7D:B0:29
Authority key identifier: 0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40
Certificate issuer: /CN=A91A1D43/serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040
Certificate serial: 026B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft
Manifest number: 025E
Signing time: Thu 23 Jul 2026 03:22:07 +0000
Manifest this update: Thu 23 Jul 2026 03:22:06 +0000
Manifest next update: Thu 30 Jul 2026 03:22:06 +0000
Files and hashes: 1: C-AoY1W14laYjORU35P8D8p_YEA.crl (hash: 5WqfbwxjYPuqujXFxihxqkl3NHW57BYUmGohQDkt0lg=)
2: 7BD32D1678F211F1985843FB5DA30FBC.roa (hash: y5JcZuVUbyUkHrroNxYLyYNDHkcGqagm4UKRx6C9gY0=)
3: 8B1BDC14EA3911EDB91E190BC4F9AE02.roa (hash: IRQ+OR5t+v1uxAMW20q5TYiXjn6EFNEgE2VqHO9rI/w=)
4: 8BCB2CFAEA3911EDB91E190BC4F9AE02.roa (hash: QhSp+pceORKO5TeSj6aanaSrz92dgNngwmylNT95Bc4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl
rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 619 (0x26b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1D43, serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040
Validity
Not Before: Jul 23 03:22:06 2026 GMT
Not After : Jul 30 03:22:06 2026 GMT
Subject: CN=6a6188df-3f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fd:0f:60:a9:ac:3d:18:c7:b1:bb:d0:4d:30:
b3:24:8f:b0:21:2d:27:a3:aa:54:6b:3d:47:78:c9:
24:fa:6e:28:41:91:c6:51:f7:73:4d:b8:4b:8c:c9:
66:f4:51:b8:b9:50:63:50:20:21:c3:39:8d:f2:6b:
37:e6:eb:21:9b:69:73:57:03:77:23:3f:ab:c0:ae:
3a:22:1f:6b:07:6b:b4:51:4b:69:0f:81:31:86:d1:
79:c0:ce:7f:b7:d9:0f:19:75:ae:07:6b:56:46:90:
5b:30:d1:45:4c:41:67:27:99:b9:3a:4c:a5:ae:6e:
6b:d7:5c:58:d0:2c:87:35:b2:6f:83:53:6b:69:61:
60:27:13:b3:3e:9d:c1:6f:15:fa:21:1c:6d:84:c8:
56:48:e3:44:9e:ab:bb:6a:56:5b:2e:69:8f:ac:6d:
59:04:05:1d:79:63:ba:ec:2b:58:d7:8c:d8:c2:8e:
4f:f9:bb:2a:e9:9c:c0:53:ef:98:c4:b6:37:c6:ce:
0a:d3:a8:de:43:35:26:2c:b2:87:6c:57:6d:b4:43:
ac:24:14:58:97:e3:a5:72:58:e6:3c:24:4b:77:4b:
ac:de:b4:01:76:da:e0:84:80:50:d0:1e:cc:5e:ab:
7d:dc:7f:a0:28:1f:c5:03:02:2b:58:c0:75:79:c1:
55:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:29:CB:C5:6C:41:6C:D2:B0:C0:A3:AA:27:1A:07:44:27:7D:B0:29
X509v3 Authority Key Identifier:
keyid:0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:97:6e:ef:91:41:c4:8f:1b:b4:4e:eb:51:e8:41:5d:34:40:
0a:c6:61:d2:7f:a6:70:96:b7:2d:32:d7:1e:f7:8c:9e:f5:ca:
21:0c:9a:a5:ad:a9:f8:b1:59:dc:6c:0f:c3:b4:a8:5a:73:d6:
e9:0e:46:03:53:e6:e2:3f:57:84:ad:21:72:94:22:b2:f9:63:
35:81:e2:ee:5a:58:e1:62:55:54:95:e6:4e:64:53:49:df:3e:
d4:23:f6:e6:41:88:74:c9:90:d2:84:f3:2c:20:6b:6c:0f:a9:
88:7c:65:d8:42:36:3b:55:8a:d8:45:51:59:43:65:4a:7e:c5:
06:d2:a6:05:64:41:26:24:42:d3:d0:c9:80:b9:dd:32:d8:7f:
d7:a3:1c:03:b5:18:59:7e:24:63:49:b8:2b:d9:f0:d4:a4:8e:
54:2e:3b:72:e5:d4:b4:94:e8:91:2d:a2:79:fb:2e:24:a5:68:
93:86:d4:5a:cf:ce:b9:f4:d3:3f:e0:ac:01:46:db:60:94:19:
c6:c3:98:9d:e2:c8:48:ec:da:bd:d5:83:c4:05:b9:00:9e:81:
e0:83:42:65:3d:6f:e7:9a:c6:7a:bd:8c:b5:10:92:74:dc:e3:
cf:a7:6d:02:0f:30:b0:41:57:70:75:84:8f:aa:4d:6e:87:69:
e1:bb:6b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:45:04 2026 by rpki-client