
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
File: rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json)
Hash identifier: q9q7Gw+X/7SXEEURdCvkrmGQm/nwtsre3yo+goX7qLI=
Subject key identifier: 07:29:EF:BB:9E:94:2B:FD:3B:C8:C4:C6:5D:26:0D:21:52:B0:95:A6
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Certificate issuer: /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial: 023D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
Manifest number: 022B
Signing time: Sat 13 Jun 2026 02:42:51 +0000
Manifest this update: Sat 13 Jun 2026 02:42:50 +0000
Manifest next update: Sat 20 Jun 2026 02:42:50 +0000
Files and hashes: 1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: Of5gd3H2DyCp/Tt2o/BVp/0Gni2tiosc9ojHid25yhc=)
2: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: kgK3NjgQxpDJ05PetKW0f4eD4WtSWH7QBEKwm+5D1qk=)
3: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NpABsuTNt3Of0zFwuT3M1C2R99zLqBty3uuQSGUzpfg=)
4: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: tRTg+EzOsPEBd/CyA9yv6uVUIfA6399PeHgHdLPDFdI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 573 (0x23d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Validity
Not Before: Jun 13 02:42:50 2026 GMT
Not After : Jun 20 02:42:50 2026 GMT
Subject: CN=6a2cc3ab-33d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:49:37:82:f0:9d:70:cc:b8:de:0c:a0:2a:c3:
42:d9:3c:42:0e:43:ef:d6:ad:a8:53:c3:4b:fd:2d:
e1:b6:d6:87:d3:93:23:80:38:13:77:82:c8:c3:f7:
2f:ee:b0:24:cc:91:e5:3b:48:a7:9e:15:7c:19:ba:
27:a5:24:46:83:8d:e2:8c:54:31:2e:b8:9d:c1:60:
7c:5f:7b:fa:05:91:1c:31:36:2e:5a:e9:67:fa:71:
66:ee:e2:3a:66:74:05:27:6d:ce:66:65:fd:a8:46:
c3:2c:8d:59:e9:be:5d:07:13:fc:66:a4:8c:4d:7d:
51:79:19:39:fc:a2:13:5b:1e:f1:ef:f8:5e:0d:aa:
bc:41:a1:02:0e:e6:f5:f3:11:83:e3:ee:0f:77:1d:
0f:b5:74:f8:ae:83:ae:d2:53:27:ea:1a:2f:89:98:
e0:07:1d:04:62:e4:ad:9f:51:6d:a1:a1:e7:bf:0b:
ad:2d:b3:5b:5c:61:87:5d:30:7f:34:96:81:c2:8e:
3a:9b:fd:e6:ea:a9:45:15:dd:6a:e5:27:7e:87:93:
9e:1e:2c:50:e7:36:c9:ef:ee:1c:fb:b1:ab:8a:05:
d4:9f:6e:29:be:09:03:82:c6:5b:47:d4:f8:b3:2f:
33:67:18:c1:3e:9c:53:5e:03:d8:8f:f0:00:50:35:
7a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:29:EF:BB:9E:94:2B:FD:3B:C8:C4:C6:5D:26:0D:21:52:B0:95:A6
X509v3 Authority Key Identifier:
keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2c:15:52:2f:c7:e7:54:48:78:8d:04:75:59:e5:09:0d:b3:
00:7c:f4:43:ac:25:50:ca:aa:c9:0d:4b:0d:e4:cc:5c:8d:f3:
3b:8f:7c:ed:7e:b0:6e:9e:76:6a:6e:88:f3:11:60:18:61:8c:
6c:e9:07:44:61:98:b2:17:cf:eb:81:65:96:1e:fa:85:1f:92:
7c:16:e7:37:37:7f:cb:bb:c2:f3:c1:83:1c:29:6e:de:9c:01:
29:cf:ff:bf:6e:3e:9d:b6:10:12:d1:dc:2e:c8:6f:44:59:ad:
e7:b9:40:c7:1b:a1:5b:9a:73:f2:4f:5a:14:24:64:e7:d0:eb:
b4:06:d2:1a:75:24:62:b6:f1:16:97:0f:59:b5:d9:08:bf:b6:
94:10:58:0b:00:71:04:97:7f:66:2b:d9:11:9c:e7:c6:2f:7e:
ca:7d:86:96:6b:55:8c:13:40:dd:c4:0b:d4:0c:3d:17:a0:4b:
cc:52:6b:ba:cd:1d:59:41:bc:aa:2f:cc:a6:b9:83:b1:8c:88:
5b:8a:69:fe:d9:51:46:5e:63:1f:69:78:da:bb:06:6b:57:c8:
5a:fd:3b:da:95:63:53:46:87:f9:9a:33:d1:55:56:35:be:4f:
64:54:9d:b0:cb:b3:42:1b:a8:20:05:45:15:4b:4b:7f:5a:fb:
ec:45:b8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:29:42 2026 by rpki-client