
$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
File: RYBbVYDVFRl9GmFa1myLnUhU9eo.mft (raw, json)
Hash identifier: GoeFbGjg9xmR7CXiqajscF5YyiNZ1trocYihPU1j1n8=
Subject key identifier: 09:4C:E8:6A:43:22:96:12:B3:E6:5D:CF:7F:BC:95:07:59:C1:C0:D8
Authority key identifier: 45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA
Certificate issuer: /CN=A91589E7/serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA
Certificate serial: 18C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
Manifest number: 18BB
Signing time: Tue 28 Jul 2026 16:34:09 +0000
Manifest this update: Tue 28 Jul 2026 16:34:09 +0000
Manifest next update: Tue 04 Aug 2026 16:34:09 +0000
Files and hashes: 1: RYBbVYDVFRl9GmFa1myLnUhU9eo.crl (hash: poGw/EeikgeTZJ8G6MH7O1Myd4gKtch3VLE8iDIukk0=)
2: 94A1F97A369711EA866E381CC4F9AE02.roa (hash: S0eb6BXPdezebakxVAbsrMO/KgjOPcxO/tmX+jv5Uos=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.crl
rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:34:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6343 (0x18c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91589E7, serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA
Validity
Not Before: Jul 28 16:34:09 2026 GMT
Not After : Aug 4 16:34:09 2026 GMT
Subject: CN=6a68da01-fb46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:f2:81:e3:3f:f9:66:73:56:cd:2f:70:8b:
90:41:cb:73:f3:6f:a9:ef:13:d9:d5:46:41:2f:dd:
ee:f0:d9:b9:ca:ee:51:e0:a1:a9:8b:d0:98:58:3d:
9a:a0:50:0e:db:c1:7d:f3:fe:33:06:e4:04:b4:10:
1f:57:6e:8d:86:19:d4:9e:9b:f0:26:4d:09:20:91:
73:55:3e:1e:d4:51:e9:18:e1:04:cf:f9:a4:96:05:
69:f0:8c:d3:f2:14:f3:af:cb:55:40:cf:77:82:04:
50:5e:12:b4:10:c8:ee:fa:af:bc:32:05:7b:04:d0:
47:39:a7:9c:28:41:07:47:c2:da:6d:03:58:3e:c1:
02:e7:38:2d:42:5a:41:5f:3b:c0:0e:11:06:bb:60:
2e:b0:73:0c:2d:62:4a:cd:77:6a:a3:8d:e0:cf:28:
6e:ef:91:2f:c9:e6:d2:19:3b:a2:46:9b:63:5c:19:
e2:1c:f3:36:98:0a:95:4d:46:b0:0b:44:64:30:f0:
fb:66:83:00:1d:e1:12:d5:f1:41:cb:13:2e:d2:b1:
09:6a:fe:a9:d5:53:47:a7:f6:aa:95:46:56:6f:bc:
e6:0e:03:e4:8a:90:3a:7f:ce:7d:55:b2:96:cb:c6:
3e:a9:52:52:15:84:a9:70:c7:2a:64:35:3c:34:9a:
c5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4C:E8:6A:43:22:96:12:B3:E6:5D:CF:7F:BC:95:07:59:C1:C0:D8
X509v3 Authority Key Identifier:
keyid:45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:f7:20:26:59:ec:05:56:45:2e:fa:8e:89:30:b8:59:13:85:
0b:5f:e4:a9:d9:13:58:64:e0:ed:c1:6c:57:f6:fa:bc:c2:51:
07:d4:37:b5:cf:7b:6b:10:2c:0e:b0:4e:0a:3c:ba:e8:77:e4:
4d:53:bb:65:07:dc:ad:7d:70:cf:ee:90:4e:79:9d:eb:40:6a:
ff:a4:5b:9e:20:95:90:dc:81:63:67:a1:e2:83:7e:fe:9f:05:
19:25:44:6a:49:c6:ca:96:f8:5f:a5:38:99:c0:be:57:7b:7b:
7e:a3:a7:32:a8:14:72:1c:2a:0a:24:9a:36:ba:80:68:e0:49:
d7:a8:37:a7:bf:0d:56:a2:90:ae:ed:39:81:fd:60:cc:96:de:
e2:1f:a8:0e:72:a7:18:56:20:79:15:22:20:73:ea:18:72:94:
3f:86:8c:6a:32:be:1a:ad:61:60:85:f0:36:75:b1:16:d2:3b:
18:24:57:e1:2d:16:38:8f:f1:17:3a:c1:fd:c5:97:8c:22:27:
c9:89:21:32:23:1d:c1:19:bc:02:cd:82:a7:af:2c:1c:f3:90:
e6:8f:86:aa:f1:d0:bc:98:42:70:b5:1c:cf:b6:df:25:24:93:
f1:5c:3b:e6:87:e4:25:93:19:be:70:21:71:ce:5e:75:27:ea:
2b:8f:90:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:40:07 2026 by rpki-client