
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
File: -Y3cNC9-J7aMoI09R8emmyaVXqE.mft (raw, json)
Hash identifier: txeDPzbLTkaJUQ4CA+kJGX5BnnuT/q/FkxntY1UhE+8=
Subject key identifier: 5D:1C:9E:E5:9C:BD:DD:7B:08:8A:68:F8:5C:1F:BF:44:41:05:13:43
Authority key identifier: F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1
Certificate issuer: /CN=A913C68B/serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
Certificate serial: 021A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
Manifest number: 0261
Signing time: Mon 27 Jul 2026 04:33:02 +0000
Manifest this update: Mon 27 Jul 2026 04:33:01 +0000
Manifest next update: Mon 03 Aug 2026 04:33:01 +0000
Files and hashes: 1: -Y3cNC9-J7aMoI09R8emmyaVXqE.crl (hash: /RLAVdmScTmo4fPF6f4Fq02C832m/B0Df87nphHVmfg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl
rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538 (0x21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C68B, serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
Validity
Not Before: Jul 27 04:33:01 2026 GMT
Not After : Aug 3 04:33:01 2026 GMT
Subject: CN=6a66df7d-5b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:1d:0e:08:be:39:d5:26:ce:de:17:ac:05:
42:ab:2b:92:e7:b0:cf:5b:62:9f:17:90:a1:56:5f:
11:78:a8:75:91:fd:2a:40:5b:7d:46:a1:ef:88:ec:
a7:cf:ae:5a:7e:9e:83:ed:f9:46:08:ad:79:c8:cf:
6c:39:af:92:d7:92:ed:8a:22:eb:fc:4e:a0:18:47:
8f:02:1d:74:e7:30:8f:e8:13:0d:ee:00:8f:dd:2d:
d1:45:18:fc:3c:2d:d1:c9:d8:85:ab:c8:93:d1:38:
41:bc:7f:f9:9c:f3:10:61:50:a6:d1:bd:e2:55:8e:
51:88:8c:68:0a:c5:60:e3:39:33:13:42:cc:53:1c:
3c:fa:f0:e6:af:fa:e4:3f:7d:27:1c:75:f5:80:1c:
28:17:93:4e:f8:08:a9:93:90:44:9c:3f:16:af:24:
30:43:c2:cb:4b:e6:6f:49:bb:b9:e5:f8:f2:7d:ed:
c8:15:a8:74:14:7a:ef:57:88:e6:fd:f0:b6:5e:b0:
0a:c1:f2:c2:79:19:68:83:f2:97:97:6e:38:92:07:
6a:14:1a:45:e2:44:33:0a:05:4d:76:70:eb:3e:80:
c6:98:1a:16:0c:93:83:bd:eb:0e:77:93:0a:65:b4:
f4:3d:d7:82:e3:7c:39:d4:91:df:99:4f:ae:f9:2e:
89:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1C:9E:E5:9C:BD:DD:7B:08:8A:68:F8:5C:1F:BF:44:41:05:13:43
X509v3 Authority Key Identifier:
keyid:F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:77:ab:5b:cc:80:b8:6d:b0:93:48:4c:33:7d:21:fd:54:48:
6e:59:43:91:2e:82:23:e5:0b:fc:69:4e:46:48:f1:81:c1:f4:
4d:c0:ba:bd:14:87:7e:30:a0:23:5b:02:06:83:22:1d:64:0c:
9e:2b:c2:b5:81:42:b7:03:c4:26:e9:08:8f:f8:bf:b4:c6:94:
be:e7:36:ce:b4:fe:a4:a4:cd:76:5e:12:51:f1:2a:99:49:98:
e8:14:7b:09:2a:5c:cf:27:39:f7:91:ea:8b:54:97:07:d4:4b:
e5:31:a9:4e:bd:6f:4e:a5:d0:2a:d2:61:9c:28:1b:65:c0:1f:
b0:86:62:51:e3:91:15:80:e4:76:17:97:43:86:34:dc:fa:89:
9b:6c:36:86:1c:11:c0:8b:ff:6a:65:5e:f9:58:5f:5d:e7:50:
0f:23:71:bb:b3:fb:db:1e:e1:f5:ac:99:3b:d6:ab:f9:26:d6:
e2:52:ea:72:c6:37:1e:91:68:e3:e0:c2:8e:81:95:4b:bb:3b:
9a:8d:d7:de:2b:86:44:b7:99:7f:66:f8:60:91:b2:8d:75:92:
1f:c8:c1:85:b3:ff:ba:5d:08:d4:d7:52:7a:5d:a3:ec:63:c2:
5c:9c:99:65:6e:c0:f8:b1:be:17:c4:7b:df:40:90:3c:53:4f:
45:8f:b8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:45 2026 by rpki-client