
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
File: rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json)
Hash identifier: SQu1KcFFbM5QECkKFfwLmiSb/9q2KB7xCOj/sit88O4=
Subject key identifier: 62:20:5E:CE:8D:D1:E7:41:B5:53:82:8E:FB:8D:F9:86:A4:15:3B:39
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Certificate issuer: /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial: 0254
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
Manifest number: 0242
Signing time: Wed 29 Jul 2026 03:32:11 +0000
Manifest this update: Wed 29 Jul 2026 03:32:11 +0000
Manifest next update: Wed 05 Aug 2026 03:32:11 +0000
Files and hashes: 1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: fA9TLLse5DqgyKfNak8wGxt8ls4RDWhV71xOX2Blsak=)
2: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: tRTg+EzOsPEBd/CyA9yv6uVUIfA6399PeHgHdLPDFdI=)
3: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NpABsuTNt3Of0zFwuT3M1C2R99zLqBty3uuQSGUzpfg=)
4: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: kgK3NjgQxpDJ05PetKW0f4eD4WtSWH7QBEKwm+5D1qk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 03:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 596 (0x254)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Validity
Not Before: Jul 29 03:32:11 2026 GMT
Not After : Aug 5 03:32:11 2026 GMT
Subject: CN=6a69743b-8750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:70:4c:6f:a2:5c:d1:c3:0e:45:04:6e:6d:
96:7e:7a:d9:ac:55:74:e1:4d:1d:fa:12:cd:76:5b:
06:51:c0:48:27:6c:8c:a3:94:6a:5b:82:03:ce:ed:
d9:a0:ea:b9:2f:b6:84:db:c5:b3:52:6d:4a:fd:3b:
8c:d5:81:2d:9e:78:23:13:e8:71:b1:f5:80:36:73:
c7:e4:f0:16:99:25:35:00:af:89:4c:5a:19:2c:1a:
6f:e5:61:fd:0b:2b:70:0c:0f:81:d4:e2:b3:c9:89:
5b:51:99:f0:92:41:75:80:dc:1b:a1:48:01:51:d6:
b6:a7:f0:6e:6d:c3:68:04:61:65:8c:a2:63:f3:29:
dd:94:bb:04:48:61:52:11:6c:82:df:5c:9b:a1:34:
f3:24:26:a9:ca:d8:ce:8b:57:07:c6:69:b3:27:ff:
b1:95:f4:35:a2:d6:2b:cb:6e:df:65:5b:d0:8b:3a:
cf:a4:14:aa:39:22:e5:3e:e8:c0:31:e2:1c:35:1f:
68:ed:57:7a:b6:23:a4:00:a5:43:d7:4e:b1:a5:86:
5e:9a:7e:00:55:79:d6:4e:23:a2:7f:50:a8:75:47:
56:d7:bb:7a:18:ae:aa:74:a8:e3:11:e0:0f:1f:7b:
52:d9:fb:d6:2d:c5:33:f7:d3:0b:8e:30:fc:db:19:
55:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:20:5E:CE:8D:D1:E7:41:B5:53:82:8E:FB:8D:F9:86:A4:15:3B:39
X509v3 Authority Key Identifier:
keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:8c:a5:fb:8d:d1:80:85:ca:76:be:12:0b:76:63:7d:b1:61:
f2:54:db:f4:25:e3:08:aa:e0:b1:03:47:5c:42:ea:87:1f:2b:
66:78:bc:89:bc:4e:7d:de:15:44:93:93:b0:90:09:50:84:ad:
65:ee:c3:9b:f4:b3:bb:b3:3f:ab:9a:b7:2c:54:e1:e7:d6:5a:
d6:3a:1b:68:65:65:fc:25:e9:4b:bd:d3:37:d3:a0:a8:8b:0e:
eb:47:1c:6b:82:84:84:75:87:68:3c:a1:08:a6:52:53:61:db:
c6:77:53:36:0a:50:c9:33:5e:c0:4a:54:b0:a3:5d:73:53:9f:
d5:05:00:37:51:ab:37:86:28:cd:99:35:ee:e6:10:f9:55:4f:
e9:3a:63:97:f5:21:c1:b0:1a:7c:e9:f6:d7:49:67:a4:1f:15:
f9:4b:ea:81:df:96:d0:ed:d6:9a:bf:b0:ac:43:b7:5c:8e:da:
b8:3e:7d:63:52:d8:6f:5a:ee:65:49:69:5a:a5:69:61:0d:a9:
57:20:53:2b:0c:64:2e:70:86:f6:1a:7a:1b:7c:22:f2:c5:73:
7b:16:7e:81:cb:2e:f8:ed:0f:40:dc:f1:79:20:4c:d5:df:44:
9c:37:80:af:f8:e6:a6:26:d7:13:ce:91:0f:34:34:59:0d:40:
34:72:47:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:29:01 2026 by rpki-client