
$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
File: cyJU29YY8YhtTfkgE5O_34ueAg4.mft (raw, json)
Hash identifier: 3KzgZrQx2rjoqduZd+FizMWG5aJB9szAY7kYf1Kf6lE=
Subject key identifier: 66:3B:BF:A9:12:98:B5:9E:60:CC:A2:50:D4:65:0E:35:27:D7:95:A5
Authority key identifier: 73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E
Certificate issuer: /CN=A91142EA/serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E
Certificate serial: 0787
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
Manifest number: 20FE
Signing time: Tue 28 Jul 2026 16:07:09 +0000
Manifest this update: Tue 28 Jul 2026 16:07:09 +0000
Manifest next update: Tue 04 Aug 2026 16:07:09 +0000
Files and hashes: 1: cyJU29YY8YhtTfkgE5O_34ueAg4.crl (hash: U2hkXw0e80gT3Up8BPXxRZNOX6n8qffGc+6+Ot1pjng=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl
rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1927 (0x787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91142EA, serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E
Validity
Not Before: Jul 28 16:07:09 2026 GMT
Not After : Aug 4 16:07:09 2026 GMT
Subject: CN=6a68d3ad-ec8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:8f:37:61:2c:8e:7a:d0:ce:4b:bc:92:e9:
50:c3:ae:a3:06:f4:bb:5d:5a:b0:a7:33:7b:7d:07:
53:4d:f8:d9:0d:eb:79:43:10:6a:79:1a:49:1a:73:
7b:f0:46:57:8d:9f:4a:76:56:e4:04:b0:9e:59:2e:
31:12:bd:80:08:de:70:f6:6f:df:f0:9d:be:76:e8:
ba:b7:bb:2b:80:cf:b0:f2:f3:f0:c6:f0:af:04:5d:
7c:59:52:cf:a1:2f:64:88:af:52:b6:9e:55:af:93:
2c:1c:0a:93:e3:36:9b:e9:c9:8b:93:3e:94:e1:4c:
d3:1e:07:4a:4b:92:cd:15:57:2d:0b:ea:75:3d:c2:
6a:a7:52:13:d3:11:f1:5b:4e:ef:fd:95:6c:90:f9:
dc:af:18:0d:c9:43:e0:56:d5:54:25:09:6e:91:0c:
01:f7:4d:29:e0:d5:a9:f1:9b:e8:0a:2c:27:29:50:
55:5b:01:c3:59:b3:4a:20:85:97:80:43:bb:e0:d0:
f6:fc:ae:aa:66:48:5f:26:23:17:c9:87:4c:f4:54:
85:61:ed:e7:8a:eb:91:59:b5:db:35:fc:32:5c:98:
96:6b:e3:bb:39:98:da:9e:db:9d:ba:3b:cb:ce:e1:
76:d0:ef:cb:74:97:c7:78:a3:71:5e:88:5a:36:b2:
48:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3B:BF:A9:12:98:B5:9E:60:CC:A2:50:D4:65:0E:35:27:D7:95:A5
X509v3 Authority Key Identifier:
keyid:73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:64:d4:cc:27:fe:f6:0c:2b:97:46:ee:7d:74:4d:b5:61:5a:
e3:97:c5:2d:4b:fb:95:ca:5f:a9:0f:b3:ab:e9:70:94:3c:32:
6f:5f:36:f5:40:cc:f5:f8:56:32:4c:34:f6:75:33:93:c2:43:
34:74:8b:68:97:5b:99:00:dd:15:d5:5f:0d:5a:aa:9e:f5:71:
27:76:e0:b4:04:8e:62:be:fb:0d:dc:a6:18:44:70:df:2f:c3:
d8:71:01:52:43:e8:be:92:01:37:69:4d:39:e5:20:cc:1c:ed:
5b:dd:b6:37:eb:15:d6:b0:3d:cb:e8:19:fb:83:d5:5a:67:37:
c5:b5:93:9e:01:72:8a:9c:d5:e1:6e:62:bf:85:ba:ad:73:87:
30:6b:72:fb:71:91:9c:8f:d3:9e:41:66:87:3f:35:7f:b8:f3:
12:b0:27:af:2d:d2:3c:ba:f3:78:30:11:67:45:56:16:de:a1:
c1:ea:22:d1:2d:6a:73:3e:d6:a4:ce:cf:9d:0d:0f:96:f5:56:
f3:a1:15:b0:92:96:71:53:1c:86:1b:ff:88:e4:2a:6f:31:7d:
41:01:10:24:b0:ea:27:81:b1:c4:c3:54:88:a1:a5:b9:d6:b0:
b6:6f:62:dd:34:72:a3:96:03:8c:ef:19:90:7b:4c:87:06:5b:
ac:f0:02:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:48:19 2026 by rpki-client