
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft
File: NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft (raw, json)
Hash identifier: kuQ+UIc/rHzqIMERz+bm3uxzWavhWlIFdyeFHssc+a8=
Subject key identifier: B8:D9:56:3B:FC:74:5E:77:50:13:75:2F:BC:C8:0A:0B:37:89:43:1E
Authority key identifier: 37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96
Certificate issuer: /CN=A913CADE/serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96
Certificate serial: 1795
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft
Manifest number: 1788
Signing time: Tue 28 Jul 2026 16:40:36 +0000
Manifest this update: Tue 28 Jul 2026 16:40:35 +0000
Manifest next update: Tue 04 Aug 2026 16:40:35 +0000
Files and hashes: 1: NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl (hash: +2r7ovLqYJeI9bsfv0ZkdDcR49I+op8IiBcdYo3Dq2k=)
2: DDDE13B8FAE811E7A715F157C4F9AE02.roa (hash: bWzOQvxadVIRVJggE+JLhWTu+F27vX2SLKSXFN99hpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl
rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6037 (0x1795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CADE, serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96
Validity
Not Before: Jul 28 16:40:35 2026 GMT
Not After : Aug 4 16:40:35 2026 GMT
Subject: CN=6a68db84-aed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:16:84:d4:ee:82:97:51:8e:6c:78:e1:38:
00:42:27:be:d8:04:67:96:6d:e0:c3:ca:13:bb:90:
4e:c7:69:bd:bf:79:6a:43:61:38:50:6f:88:fe:18:
2a:ae:e1:37:bb:bb:ed:cb:6f:d1:db:ca:da:1d:39:
05:4c:c2:6e:56:1c:79:c6:ad:67:ed:8a:dd:83:c1:
9b:35:58:b1:d1:39:b6:77:0f:58:d5:78:59:3b:30:
26:ff:4e:b0:e6:ca:16:ee:17:c8:d3:01:f1:d3:63:
72:c1:02:e0:66:c6:2a:27:1a:16:19:ea:79:80:48:
0f:17:2a:f4:4d:8e:ac:2e:a6:2c:da:0b:31:07:8c:
04:41:85:17:35:b0:e0:1c:00:9b:e4:49:50:0a:fd:
36:ba:28:04:90:dc:6e:00:e4:d2:b7:79:dd:19:05:
6e:58:3f:a5:f3:44:cf:3b:5e:c8:79:5c:17:6a:39:
da:58:e3:27:c6:6b:d7:5b:f3:ee:e6:58:a1:2b:19:
8c:80:86:f1:0c:dc:45:30:5e:ea:aa:cf:fa:4c:5a:
06:ad:6c:05:13:95:4f:b6:4f:a4:65:8f:fd:ec:c4:
2b:90:c9:9b:1e:10:31:57:3f:40:26:73:10:29:12:
d7:3a:1b:1a:ac:64:30:93:b9:79:f6:ef:80:76:4d:
97:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D9:56:3B:FC:74:5E:77:50:13:75:2F:BC:C8:0A:0B:37:89:43:1E
X509v3 Authority Key Identifier:
keyid:37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:b8:3a:a3:d0:5c:7f:a8:69:f2:5b:0d:3d:5d:bb:b8:bd:d7:
61:43:57:27:36:6b:d8:fb:10:36:33:0c:59:76:b6:bc:73:dd:
de:d9:c8:72:ce:8c:8a:55:1b:46:bd:a8:b4:cf:d5:d1:91:16:
4d:30:67:1e:c1:63:ae:6d:98:66:3b:ba:3c:33:99:9d:1a:b6:
c7:e0:7a:84:19:f6:7a:08:6e:4f:8a:82:20:eb:71:6f:45:43:
7c:c8:1e:42:72:45:81:66:df:f4:78:d9:43:75:2a:87:47:47:
b1:47:f2:30:db:bd:2a:66:e9:2e:03:96:b8:c2:46:4e:ce:0e:
c3:ae:ea:af:2c:5e:09:de:7a:16:68:62:c0:0c:a6:42:75:82:
0e:0b:8d:8c:56:77:ed:33:d9:ca:a4:27:83:1a:ff:97:cc:1e:
35:f4:93:d9:4c:80:09:80:9c:33:78:74:69:03:63:f9:b9:9b:
ab:49:1d:bc:64:7e:95:6d:ef:95:65:cb:49:b4:22:c9:64:9c:
05:8b:4f:b5:50:26:f9:68:b4:a4:20:13:1c:ab:cb:5b:f5:9e:
3a:34:4a:7a:db:4d:d2:ec:90:60:29:11:9b:c5:fc:ce:61:c6:
4a:c8:fb:5c:ff:de:34:cb:70:e5:21:8d:e8:5e:d1:8a:f0:50:
17:02:13:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0NBREUxMTAvBgNVBAUTKDM3MjVCMkU5N0RENDVEQzBCNzUyMUMwQTFCQjVFNDA2
MDlCMDVEOTYwHhcNMjYwNzI4MTY0MDM1WhcNMjYwODA0MTY0MDM1WjAYMRYwFAYD
VQQDEw02YTY4ZGI4NC1hZWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnpYWhNTugpdRjmx44TgAQie+2ARnlm3gw8oTu5BOx2m9v3lqQ2E4UG+I/hgq
ruE3u7vty2/R28raHTkFTMJuVhx5xq1n7Yrdg8GbNVix0Tm2dw9Y1XhZOzAm/06w
5soW7hfI0wHx02NywQLgZsYqJxoWGep5gEgPFyr0TY6sLqYs2gsxB4wEQYUXNbDg
HACb5ElQCv02uigEkNxuAOTSt3ndGQVuWD+l80TPO17IeVwXajnaWOMnxmvXW/Pu
5lihKxmMgIbxDNxFMF7qqs/6TFoGrWwFE5VPtk+kZY/97MQrkMmbHhAxVz9AJnMQ
KRLXOhsarGQwk7l59u+Adk2XIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLjZVjv8
dF53UBN1L7zICgs3iUMeMB8GA1UdIwQYMBaAFDclsul91F3At1IcChu15AYJsF2W
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FERS9GMDJBQjE3Q0ZB
RTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhjQzNVaHdLRzdYa0JnbXdY
WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL055V3k2WDNVWGNDM1Vod0tHN1hrQmdtd1haWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
Q0FERS9GMDJBQjE3Q0ZBRTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhj
QzNVaHdLRzdYa0JnbXdYWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdLg6o9Bcf6hp8lsNPV27uL3XYUNXJzZr2PsQNjMMWXa2vHPd3tnIcs6MilUb
Rr2otM/V0ZEWTTBnHsFjrm2YZju6PDOZnRq2x+B6hBn2eghuT4qCIOtxb0VDfMge
QnJFgWbf9HjZQ3Uqh0dHsUfyMNu9KmbpLgOWuMJGTs4Ow67qryxeCd56FmhiwAym
QnWCDguNjFZ37TPZyqQngxr/l8weNfST2UyACYCcM3h0aQNj+bmbq0kdvGR+lW3v
lWXLSbQiyWScBYtPtVAm+Wi0pCATHKvLW/WeOjRKettN0uyQYCkRm8X8zmHGSsj7
XP/eNMtw5SGN6F7RivBQFwITjw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:37:29 2026 by rpki-client