
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
File: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft (raw, json)
Hash identifier: t2UB3O1vYEHE1TQnea7EMF9jAZYaN8AfieEjg6S8tDA=
Subject key identifier: D5:5E:63:21:B8:43:BE:08:0A:2C:6F:CD:A3:1A:CD:C9:BE:86:A5:4D
Authority key identifier: D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02
Certificate issuer: /CN=A911F5B7/serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802
Certificate serial: 026D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
Manifest number: 0DFC
Signing time: Tue 28 Jul 2026 19:21:38 +0000
Manifest this update: Tue 28 Jul 2026 19:21:38 +0000
Manifest next update: Tue 04 Aug 2026 19:21:37 +0000
Files and hashes: 1: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl (hash: kQCV7DAv29fcX7d+fNE2mQCNfGkBLm/jRC84k+41abo=)
2: 751E90665BAB11EFB9769A80C4F9AE02.roa (hash: tr2lD7o9Jj2eezYb6KX+vn/JZs+QxwzBoXg4U7YfC4M=)
3: 21980772889311F09BCDF026C4F9AE02.roa (hash: bV3VCAOcVbgdSch/nYusz9I52dpCIoj+s37MruAcxdM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl
rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 621 (0x26d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F5B7, serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802
Validity
Not Before: Jul 28 19:21:38 2026 GMT
Not After : Aug 4 19:21:37 2026 GMT
Subject: CN=6a690142-ee34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:18:43:a1:62:fe:54:77:f8:4a:e2:e3:b2:
ba:6a:f3:1b:b4:3d:3c:da:34:85:fa:cb:68:d2:57:
d2:56:5d:54:ac:96:60:b5:5f:ac:2d:7d:41:c3:ec:
44:cf:15:02:cb:3f:e0:d6:58:4d:45:ec:0d:a6:65:
8a:72:7d:b5:64:37:05:04:ca:91:37:2b:b1:b2:9d:
9e:18:41:6b:41:b4:5c:7a:ef:07:53:f7:df:09:bd:
14:55:35:a6:5c:79:90:f6:e4:78:90:c9:88:d8:43:
db:b9:fd:4b:e4:2c:cd:78:b4:ff:57:6b:c4:53:5b:
51:85:c1:6d:6c:72:28:a4:c2:22:57:3d:96:8e:66:
a2:e4:aa:6d:42:3c:e6:86:60:61:4a:a5:c0:e8:1c:
03:97:dd:15:79:0d:b7:1b:11:db:ed:a5:b4:7c:86:
76:54:c0:d3:11:44:b7:d7:74:d2:5a:c8:9c:a6:b7:
59:e2:ad:40:44:a8:18:fe:d4:0e:86:a3:23:41:b8:
87:be:f8:e5:75:28:23:88:a3:ca:47:ac:44:4c:e2:
8b:fb:30:09:d8:08:f2:a6:19:51:56:14:06:20:c2:
21:a4:39:4a:a5:00:39:13:58:ef:47:b1:d8:4a:6f:
fb:8b:6b:73:70:42:36:18:48:06:30:e1:1b:dc:05:
99:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5E:63:21:B8:43:BE:08:0A:2C:6F:CD:A3:1A:CD:C9:BE:86:A5:4D
X509v3 Authority Key Identifier:
keyid:D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:a4:db:a6:80:b0:8c:46:9d:3d:3a:4b:6b:80:08:01:3f:9a:
81:22:cb:0a:ba:fd:a9:4f:51:0d:4a:59:8e:05:44:51:64:47:
b9:86:3a:02:c8:42:38:dd:bf:b6:81:7f:12:26:ad:76:ab:74:
88:62:f0:de:37:49:a2:6a:30:68:ce:3d:42:c5:37:5a:fe:d2:
12:20:78:8f:eb:5b:10:24:4e:9a:6e:80:d7:8c:95:4d:50:e8:
61:d4:c1:63:11:57:6e:18:c6:73:c1:f1:26:42:e1:f6:5a:21:
e5:f4:79:d3:ae:a5:c4:2c:76:31:0f:a0:b6:a0:d8:5f:c2:92:
42:3d:6e:d5:8a:03:47:a2:1f:12:2e:80:d3:6f:5d:84:03:e0:
da:02:32:d5:a0:ae:cb:b9:54:a2:ab:82:1f:5f:b3:70:dd:48:
51:3d:db:49:83:fc:2f:81:8a:c7:47:ff:2d:93:dc:ec:1d:27:
64:0e:cc:c7:73:e5:bc:3d:6f:56:7a:38:db:35:95:74:f6:2f:
de:c2:78:c7:a6:47:d9:65:61:07:58:13:b7:64:13:de:5b:1f:
24:2c:bc:f1:bb:4b:0e:3b:34:36:62:a8:8f:68:06:c1:a1:41:
72:cb:ed:63:22:a4:84:79:23:7e:22:ee:eb:ce:35:91:58:16:
87:50:c5:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY1QjcxMTAvBgNVBAUTKEQ3MkU5MjQzNUNFN0RCQjc3ODlCMjQzOEE0OEYyMTFD
NDMxQzU4MDIwHhcNMjYwNzI4MTkyMTM4WhcNMjYwODA0MTkyMTM3WjAYMRYwFAYD
VQQDEw02YTY5MDE0Mi1lZTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt4EYQ6Fi/lR3+Eri47K6avMbtD082jSF+sto0lfSVl1UrJZgtV+sLX1Bw+xE
zxUCyz/g1lhNRewNpmWKcn21ZDcFBMqRNyuxsp2eGEFrQbRceu8HU/ffCb0UVTWm
XHmQ9uR4kMmI2EPbuf1L5CzNeLT/V2vEU1tRhcFtbHIopMIiVz2Wjmai5KptQjzm
hmBhSqXA6BwDl90VeQ23GxHb7aW0fIZ2VMDTEUS313TSWsicprdZ4q1ARKgY/tQO
hqMjQbiHvvjldSgjiKPKR6xETOKL+zAJ2AjyphlRVhQGIMIhpDlKpQA5E1jvR7HY
Sm/7i2tzcEI2GEgGMOEb3AWZswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNVeYyG4
Q74ICixvzaMazcm+hqVNMB8GA1UdIwQYMBaAFNcukkNc59u3eJskOKSPIRxDHFgC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx
OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3ZDRteVE0cEk4aEhFTWNX
QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzF5NlNRMXpuMjdkNG15UTRwSThoSEVNY1dBSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3
ZDRteVE0cEk4aEhFTWNXQUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABaTbpoCwjEadPTpLa4AIAT+agSLLCrr9qU9RDUpZjgVEUWRHuYY6AshCON2/
toF/Eiatdqt0iGLw3jdJomowaM49QsU3Wv7SEiB4j+tbECROmm6A14yVTVDoYdTB
YxFXbhjGc8HxJkLh9loh5fR5066lxCx2MQ+gtqDYX8KSQj1u1YoDR6IfEi6A029d
hAPg2gIy1aCuy7lUoquCH1+zcN1IUT3bSYP8L4GKx0f/LZPc7B0nZA7Mx3PlvD1v
Vno42zWVdPYv3sJ4x6ZH2WVhB1gTt2QT3lsfJCy88btLDjs0NmKoj2gGwaFBcsvt
YyKkhHkjfiLu6841kVgWh1DF/w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:12:41 2026 by rpki-client