
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
File: 03yc1lDAIKNQDtybQKVGqEw_Jgs.mft (raw, json)
Hash identifier: WFIwe9yuZpGYjnA8Rlta4T4otD9A5J2bLyB+FbQthF8=
Subject key identifier: D8:53:E0:9C:B3:95:19:D9:99:C1:5E:89:33:47:B2:26:16:3F:99:07
Authority key identifier: D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B
Certificate issuer: /CN=A9153C50/serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B
Certificate serial: 05A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
Manifest number: 0597
Signing time: Mon 27 Jul 2026 00:09:11 +0000
Manifest this update: Mon 27 Jul 2026 00:09:11 +0000
Manifest next update: Mon 03 Aug 2026 00:09:11 +0000
Files and hashes: 1: 03yc1lDAIKNQDtybQKVGqEw_Jgs.crl (hash: ZMJAnEE5YcolumiDuGwtG/qanwOjhWmudfntfWfqsJc=)
2: 8B97D7A22CD911ECA528B744C4F9AE02.roa (hash: ekGdq5XwvQSiFAECeI1yOoTTSMBYmajgvzc3Dt6ibs8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl
rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1442 (0x5a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153C50, serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B
Validity
Not Before: Jul 27 00:09:11 2026 GMT
Not After : Aug 3 00:09:11 2026 GMT
Subject: CN=6a66a1a7-f73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:b7:81:30:da:da:6c:9a:1d:a2:ed:98:24:
5a:de:a2:1e:d2:9a:67:d1:06:54:90:b2:05:bd:2d:
b6:19:ce:f4:45:48:7b:4a:dd:3a:b9:c4:21:cc:e4:
9a:b7:37:cd:f6:8a:4b:8f:2f:64:7b:d8:b2:88:ae:
08:8e:55:b6:45:1b:15:07:84:3c:51:5a:64:58:7b:
c6:09:a8:6d:0c:bd:11:a8:eb:44:00:a1:83:57:df:
6e:f0:65:7b:83:6e:b9:df:21:2a:13:86:be:d1:38:
25:bd:af:a1:11:0b:81:2d:19:58:89:5d:42:41:6e:
72:8b:79:e6:a4:2f:a6:2d:4b:c1:4a:5e:56:67:73:
eb:5c:23:54:86:87:94:6e:8e:31:e8:d6:b9:63:a6:
e9:16:25:19:47:80:c0:38:fd:ba:a8:c4:ef:00:f1:
70:aa:f1:a4:38:90:8f:72:3a:5e:2c:1d:77:77:f5:
d0:b5:4d:c1:ee:69:10:ee:b4:9a:53:ea:40:ef:f8:
51:e5:52:19:b1:83:ed:66:44:bb:9b:ec:b0:04:bd:
ea:ba:26:b0:c6:cc:7f:a2:e4:1d:ed:95:75:5f:a9:
e9:e5:05:fa:79:86:34:20:d3:c5:f0:1c:b4:a8:ad:
d5:5b:24:d8:98:c9:b9:ff:ce:a9:27:67:fd:0e:6d:
d7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:53:E0:9C:B3:95:19:D9:99:C1:5E:89:33:47:B2:26:16:3F:99:07
X509v3 Authority Key Identifier:
keyid:D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:79:4a:e1:46:22:ae:bb:cf:70:b9:1e:e4:12:79:26:47:45:
05:a1:f4:87:36:5f:c2:80:30:34:37:7f:d0:d2:b7:26:39:95:
6f:87:ed:ec:31:c8:8b:2d:4e:06:00:39:be:45:6f:a6:27:29:
fd:ec:2e:e1:e6:4e:b9:d1:e4:6c:94:8f:3e:70:94:a0:f2:c6:
a8:47:da:da:a1:53:25:b3:79:26:8a:2d:c2:d5:9d:3d:74:b4:
c9:63:73:9e:76:14:55:52:c3:f4:a1:0b:4b:68:f8:d7:41:d0:
3c:1f:ff:b2:d4:c0:00:5c:5f:ee:d6:b9:45:4f:cb:de:d0:94:
60:24:f9:b3:e6:ac:80:da:ba:88:eb:33:eb:9a:05:07:28:c8:
46:ba:9a:8f:29:6e:f0:a6:9b:8f:6a:2b:47:a7:d2:0b:85:b4:
fe:00:5e:6c:d2:15:58:9f:f9:19:28:53:24:00:2f:2b:56:a1:
ac:20:5b:87:ed:10:94:6e:38:23:aa:50:db:46:e0:2f:46:7c:
26:ff:2f:fc:e0:c7:31:09:dc:1e:4d:1d:c3:28:35:6a:87:58:
c7:70:cc:7a:7f:a0:4a:c6:8a:7c:0f:a9:c0:41:44:fa:90:a7:
12:dd:cd:9f:96:dc:4d:a1:44:14:50:f5:fa:b1:f8:49:0f:a3:
37:6a:ae:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTNDNTAxMTAvBgNVBAUTKEQzN0M5Q0Q2NTBDMDIwQTM1MDBFREM5QjQwQTU0NkE4
NEMzRjI2MEIwHhcNMjYwNzI3MDAwOTExWhcNMjYwODAzMDAwOTExWjAYMRYwFAYD
VQQDEw02YTY2YTFhNy1mNzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqMm3gTDa2myaHaLtmCRa3qIe0ppn0QZUkLIFvS22Gc70RUh7St06ucQhzOSa
tzfN9opLjy9ke9iyiK4IjlW2RRsVB4Q8UVpkWHvGCahtDL0RqOtEAKGDV99u8GV7
g2653yEqE4a+0Tglva+hEQuBLRlYiV1CQW5yi3nmpC+mLUvBSl5WZ3PrXCNUhoeU
bo4x6Na5Y6bpFiUZR4DAOP26qMTvAPFwqvGkOJCPcjpeLB13d/XQtU3B7mkQ7rSa
U+pA7/hR5VIZsYPtZkS7m+ywBL3quiawxsx/ouQd7ZV1X6np5QX6eYY0INPF8By0
qK3VWyTYmMm5/86pJ2f9Dm3XNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNhT4Jyz
lRnZmcFeiTNHsiYWP5kHMB8GA1UdIwQYMBaAFNN8nNZQwCCjUA7cm0ClRqhMPyYL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0M1MC80QjkwNjMwMjJD
RDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlLTlFEdHliUUtWR3FFd19K
Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzAzeWMxbERBSUtOUUR0eWJRS1ZHcUV3X0pncy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
M0M1MC80QjkwNjMwMjJDRDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlL
TlFEdHliUUtWR3FFd19KZ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlHlK4UYirrvPcLke5BJ5JkdFBaH0hzZfwoAwNDd/0NK3JjmVb4ft7DHIiy1O
BgA5vkVvpicp/ewu4eZOudHkbJSPPnCUoPLGqEfa2qFTJbN5JootwtWdPXS0yWNz
nnYUVVLD9KELS2j410HQPB//stTAAFxf7ta5RU/L3tCUYCT5s+asgNq6iOsz65oF
ByjIRrqajylu8Kabj2orR6fSC4W0/gBebNIVWJ/5GShTJAAvK1ahrCBbh+0QlG44
I6pQ20bgL0Z8Jv8v/ODHMQncHk0dwyg1aodYx3DMen+gSsaKfA+pwEFE+pCnEt3N
n5bcTaFEFFD1+rH4SQ+jN2quCw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:28 2026 by rpki-client