
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json)
Hash identifier: KUqLaAzPjz6J73tO7uFgYskaQFwFn7eNs9wVbKDmNB4=
Subject key identifier: 52:AF:45:F6:34:3E:24:9F:4C:78:CF:05:30:C4:34:2B:31:6B:CF:57
Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Certificate serial: 0539
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
Manifest number: 0529
Signing time: Wed 29 Jul 2026 00:16:58 +0000
Manifest this update: Wed 29 Jul 2026 00:16:57 +0000
Manifest next update: Wed 05 Aug 2026 00:16:57 +0000
Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: PUHzX/v2XviHrRGTVxonpGD4MVuhip1FkPeZFocuqqQ=)
2: 9CA1FC26FA7A11F0A1FE82F24D6F56BC.roa (hash: D7TWn4uVI/L44bR9jZY7LmPRQC44gxFuipaLGEVANoA=)
3: FDFFD0D8FFFC11F0BE7B89863A6F56BC.roa (hash: ctyWpGsIE5EQesNkt+cSgGgPoPwdQaksbBOUuFK3Fho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 00:16:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1337 (0x539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Validity
Not Before: Jul 29 00:16:57 2026 GMT
Not After : Aug 5 00:16:57 2026 GMT
Subject: CN=6a694679-c266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:15:4c:34:8d:24:44:82:e3:74:de:04:98:b4:
65:f1:2d:26:58:04:f0:f7:1e:ac:22:60:fc:a8:7a:
fd:9a:b4:e1:31:67:99:65:cd:3a:a0:01:80:87:8a:
76:77:89:0d:10:bf:12:f5:04:65:38:4a:bc:b1:82:
7c:c5:4a:4f:41:21:7a:66:ac:2d:27:d3:ba:a3:40:
33:13:cf:ea:34:d6:da:84:75:8c:44:a9:fb:45:47:
2c:13:40:ca:a4:4f:77:ad:47:19:23:d6:a6:9c:51:
40:c9:46:63:95:10:ba:dc:f1:56:7e:c1:82:01:7b:
f3:b6:07:61:28:bf:c2:0c:02:65:f9:15:dc:06:eb:
47:b8:85:0f:45:13:bf:fe:c4:00:dc:01:68:f3:a3:
0e:66:d2:6c:8b:ab:6e:43:86:cd:26:24:61:6a:f3:
26:f5:68:95:8e:f8:9a:7f:89:75:08:90:38:cb:ac:
f2:f9:a0:f8:4e:30:5c:46:86:7b:b1:3d:62:eb:12:
8c:3c:3a:5e:0a:8c:5c:0d:6a:08:21:5f:bc:75:68:
d3:6e:75:c3:5f:dc:2a:ad:1a:ab:fe:96:a9:4d:d2:
78:49:93:c4:39:e8:d6:90:8f:dc:e0:57:ac:03:95:
be:60:3d:0a:11:0f:08:f3:70:95:d6:00:72:14:f8:
0a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AF:45:F6:34:3E:24:9F:4C:78:CF:05:30:C4:34:2B:31:6B:CF:57
X509v3 Authority Key Identifier:
keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:3f:fc:51:c6:37:fe:1a:51:77:dc:b2:9e:47:27:8e:52:56:
fe:09:df:97:69:d5:df:10:93:62:47:c8:6d:1a:c6:c2:e1:40:
90:61:7e:ad:b1:fb:17:e4:e9:ba:3e:0e:4b:cc:9c:7b:95:7d:
52:4b:f2:cc:ad:34:38:68:43:ab:8a:c9:f8:ec:16:a3:9b:86:
d4:64:c1:20:23:e6:75:91:22:cc:4b:d6:8f:69:b8:52:c7:2a:
32:28:0d:44:0b:72:51:82:35:cb:1e:ea:f8:10:4c:6a:54:d6:
e2:a0:0f:57:8a:e6:4d:e6:42:1f:f6:58:6a:dd:e9:7c:ea:ff:
b6:94:45:44:f7:ab:fd:8f:cc:11:9a:42:13:62:aa:4d:79:f6:
da:53:d8:b9:4b:d9:80:94:f3:ea:80:4f:1a:1e:e4:60:bf:30:
75:e9:7f:cb:66:3e:79:fa:20:06:7a:4c:e8:f8:4c:50:35:84:
a7:ac:9f:86:6a:ef:6b:be:93:b4:c4:f8:d4:50:4d:3b:f2:9f:
00:83:f1:4f:21:28:5b:cd:37:65:8e:5f:08:6a:a3:c5:ee:9a:
cd:77:83:6b:2a:7a:47:63:00:1d:ec:19:04:2e:a6:6a:85:00:
73:8a:d1:bb:bb:a2:84:17:0e:d2:a9:c1:22:e7:03:21:a2:7e:
42:8a:fd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:54:22 2026 by rpki-client