
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
File: ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft (raw, json)
Hash identifier: gDcYV7NMudDhe0v+mbDt3jGhJ4gOrNNbtrwB6Z++3v8=
Subject key identifier: AE:B5:E7:5C:18:F2:C7:D5:EA:AB:44:3D:84:EE:29:F9:E5:A3:6B:FF
Authority key identifier: 93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45
Certificate issuer: /CN=A91CEF3E/serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145
Certificate serial: 0F74
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
Manifest number: 0F54
Signing time: Wed 22 Jul 2026 17:43:09 +0000
Manifest this update: Wed 22 Jul 2026 17:43:09 +0000
Manifest next update: Wed 29 Jul 2026 17:43:09 +0000
Files and hashes: 1: ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl (hash: M4Y5op+QDZxZQzeZSXXa6a4NeOJfTxTc+e/Xz/uEFIA=)
2: 5C154406988911E991B10838C4F9AE02.roa (hash: tQrQ6Cd+gUF5DxrjyCWytmMItl98qXXXMjLohZ6qa3w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl
rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:43:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3956 (0xf74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEF3E, serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145
Validity
Not Before: Jul 22 17:43:09 2026 GMT
Not After : Jul 29 17:43:09 2026 GMT
Subject: CN=6a61012d-2d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:5e:95:91:e4:dc:fb:5f:ad:70:03:79:5b:
fa:5a:d4:d8:f8:fd:82:ce:75:4d:6d:51:cf:f8:87:
3c:cc:76:1b:92:3d:d9:7e:5c:50:1f:f0:be:30:cc:
2e:8b:20:53:01:d3:ce:80:da:7b:9e:e2:97:0d:e7:
e7:92:44:23:41:2e:a7:15:03:dd:d8:fb:e4:64:2e:
da:73:38:4f:08:96:6c:50:de:c4:d6:30:2a:e4:bd:
1c:2b:51:82:37:7b:4f:49:f2:e2:93:a6:cb:54:8a:
7a:9a:67:f4:87:e0:57:49:91:a0:a2:c4:50:01:99:
9c:90:e5:44:0d:a3:14:76:3c:93:02:39:85:78:6c:
85:fd:9c:92:25:02:08:c1:f9:32:d7:29:a3:a0:8c:
f0:23:73:fd:76:e3:e2:12:e1:2e:26:64:99:ed:70:
fd:e3:96:35:4a:ba:6a:5f:d2:a5:bc:a5:34:a0:68:
6c:a8:d6:f9:34:32:bb:f8:d6:f7:72:6d:38:87:25:
fa:a7:c0:d6:70:df:c5:c7:bd:d0:5b:9d:09:8c:b0:
ab:6c:ec:7d:3f:46:28:60:8f:58:66:8d:bf:f8:fb:
f0:0c:01:fe:e7:b5:6e:11:4d:d9:25:95:25:55:ea:
ae:a2:d9:6d:d8:bc:a4:70:27:17:6a:3d:e0:94:32:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B5:E7:5C:18:F2:C7:D5:EA:AB:44:3D:84:EE:29:F9:E5:A3:6B:FF
X509v3 Authority Key Identifier:
keyid:93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:ac:3a:df:f6:01:de:8d:5c:3f:5c:2f:ff:1c:8a:c8:e6:62:
9c:e6:2d:cd:a4:1a:29:bd:52:d7:96:14:f5:35:85:3a:d3:6c:
7b:e5:8c:74:5c:1b:07:79:e8:06:c3:be:83:da:05:8f:18:62:
9d:13:4d:84:2d:80:55:02:7e:ce:5d:f7:35:1b:8a:bd:be:06:
73:cd:03:59:4a:f4:35:f5:fd:04:d1:b6:08:c6:52:f6:93:f5:
21:15:c9:bb:52:8d:58:90:f1:08:8c:dd:ab:b9:70:00:b4:d1:
3b:2b:a8:ea:71:72:db:25:c4:ae:d9:ed:43:7e:63:8d:3e:41:
40:12:1e:0f:85:a7:86:4d:fe:17:33:55:59:f7:7d:d3:a0:e3:
66:3c:8c:7d:63:68:79:d4:c2:79:e2:e2:9e:db:46:cd:c4:e2:
5f:a8:bb:85:7b:be:98:2a:61:c4:16:cb:4c:82:72:e5:86:60:
db:03:bb:8e:45:bf:3d:72:d2:e8:d7:9a:32:9b:6f:06:cb:14:
0b:5e:80:21:86:00:0a:42:ef:6a:63:6a:57:ae:56:62:4e:1e:
e3:ed:67:dd:ac:a3:24:d9:86:9a:98:a0:e0:f0:36:0a:38:08:
df:a9:1b:3a:59:56:7b:c1:be:c7:ef:38:00:4e:20:4b:4b:93:
cd:31:8d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:42 2026 by rpki-client