
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft
File: RByw2GqSzt--gIPe1peibWI-5lU.mft (raw, json)
Hash identifier: NQPz2oTYp3csT4IG0hJQGyY1wHcUp7LZ8FhsnB76tVQ=
Subject key identifier: A3:E7:F6:83:13:88:FB:90:92:B0:04:8C:85:2A:98:E8:C2:E2:9A:C1
Authority key identifier: 44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55
Certificate issuer: /CN=A9171235/serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655
Certificate serial: 0419
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft
Manifest number: 0409
Signing time: Mon 27 Jul 2026 01:26:31 +0000
Manifest this update: Mon 27 Jul 2026 01:26:31 +0000
Manifest next update: Mon 03 Aug 2026 01:26:31 +0000
Files and hashes: 1: RByw2GqSzt--gIPe1peibWI-5lU.crl (hash: KMgAlsvzc6RSzPsy/T7dQxp19FF2FcQ6D/xd8OVt4c8=)
2: 9C072F22C9E411EC956B0A3CC4F9AE02.roa (hash: t1SOICrusOgawX9+u5Y2aTK/YPhhEOG5ZgMKx4tTpgo=)
3: 9CD74392C9E411EC956B0A3CC4F9AE02.roa (hash: Q7hGGSqwTn1Hry6vIOjNT8JbvFoGysAzJ6H0s1cSSPs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl
rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:26:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1049 (0x419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171235, serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655
Validity
Not Before: Jul 27 01:26:31 2026 GMT
Not After : Aug 3 01:26:31 2026 GMT
Subject: CN=6a66b3c7-5ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1f:b7:75:73:b9:fa:ee:40:7d:d1:82:cf:aa:
a7:f5:f8:5e:3d:29:a5:2d:e2:ae:2b:0b:04:50:78:
d5:8d:5f:27:41:4e:87:9f:49:c8:d6:ab:52:f3:77:
7f:f6:23:31:27:50:6c:98:64:d0:0a:98:c5:d9:4d:
cc:71:24:bc:95:a9:c0:b1:81:7e:c7:8b:9e:c0:a7:
71:79:79:7c:2e:d0:b0:c9:57:5b:93:de:e8:16:3d:
ce:f6:ca:91:b4:a1:eb:c7:0b:06:99:51:b4:22:fe:
34:a3:2c:22:62:d4:78:92:bb:38:1d:39:4e:91:86:
c8:d0:48:75:28:73:ab:33:43:54:e1:92:8f:43:9a:
b7:20:fb:66:33:01:d6:19:9c:54:45:3f:95:55:4d:
94:34:e7:74:9f:87:9b:d1:23:5b:1f:38:5d:1a:13:
92:f8:37:9b:b3:cb:82:a3:71:46:61:f6:a8:d9:9e:
47:e2:cb:d7:d8:84:05:70:97:ad:d1:84:24:49:0c:
28:9e:b6:3d:e9:c9:41:7c:fa:da:8a:49:8b:22:a0:
10:3d:e2:33:40:33:0f:fd:e0:b8:10:14:8a:2d:0c:
a6:f7:57:c8:d5:18:e5:09:a0:eb:84:0e:70:c4:c2:
66:2b:cf:49:06:dd:90:cd:50:58:f6:c7:65:cb:71:
ee:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E7:F6:83:13:88:FB:90:92:B0:04:8C:85:2A:98:E8:C2:E2:9A:C1
X509v3 Authority Key Identifier:
keyid:44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:96:d7:0b:78:d5:d5:ca:ca:2d:23:8b:4c:b7:ac:4b:5a:79:
61:a3:a7:fd:e2:ca:9f:75:ad:62:38:38:9e:bc:f4:a9:d5:2b:
9a:ca:ad:4b:05:44:5e:6b:01:14:4b:81:40:a3:90:8d:d6:b7:
b9:82:69:24:e7:cc:8d:57:61:e3:9e:90:ea:b1:62:54:ed:85:
84:24:05:f7:64:7e:d0:e7:af:1b:8e:6f:73:c3:b4:89:fe:c1:
1b:85:2e:02:09:81:1c:08:dd:b0:84:c0:09:d1:40:9a:e5:00:
be:be:20:5d:64:58:b8:fe:ac:aa:50:d3:24:6c:f0:85:27:48:
00:53:c4:35:07:a0:0e:08:5b:42:90:8a:42:bd:23:a3:d5:03:
89:9a:90:66:ee:e4:dc:8d:18:58:89:40:71:a7:36:18:08:23:
32:3e:88:e6:d8:7e:7d:77:8d:47:e5:bb:f4:a1:a0:ab:b2:75:
02:7c:25:14:68:14:84:89:4c:2e:15:57:cc:92:51:26:0e:bb:
76:26:ee:39:35:9b:ba:38:aa:40:c2:07:5b:af:c2:dd:f6:86:
7e:67:47:5b:40:37:fd:31:6f:85:3f:34:34:29:8d:4c:5b:a1:
0b:80:6a:e8:42:d8:6a:9a:d4:32:d8:b5:e2:d0:8a:b2:64:ab:
d1:86:08:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzEyMzUxMTAvBgNVBAUTKDQ0MUNCMEQ4NkE5MkNFREZCRTgwODNERUQ2OTdBMjZE
NjIzRUU2NTUwHhcNMjYwNzI3MDEyNjMxWhcNMjYwODAzMDEyNjMxWjAYMRYwFAYD
VQQDEw02YTY2YjNjNy01ZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1x+3dXO5+u5AfdGCz6qn9fhePSmlLeKuKwsEUHjVjV8nQU6Hn0nI1qtS83d/
9iMxJ1BsmGTQCpjF2U3McSS8lanAsYF+x4uewKdxeXl8LtCwyVdbk97oFj3O9sqR
tKHrxwsGmVG0Iv40oywiYtR4krs4HTlOkYbI0Eh1KHOrM0NU4ZKPQ5q3IPtmMwHW
GZxURT+VVU2UNOd0n4eb0SNbHzhdGhOS+Debs8uCo3FGYfao2Z5H4svX2IQFcJet
0YQkSQwonrY96clBfPraikmLIqAQPeIzQDMP/eC4EBSKLQym91fI1RjlCaDrhA5w
xMJmK89JBt2QzVBY9sdly3HuFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKPn9oMT
iPuQkrAEjIUqmOjC4prBMB8GA1UdIwQYMBaAFEQcsNhqks7fvoCD3taXom1iPuZV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTIzNS9ERDYxRTIyRUM1
REQxMUVDQkVGNDJDNzdDNEY5QUUwMi9SQnl3MkdxU3p0LS1nSVBlMXBlaWJXSS01
bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JCeXcyR3FTenQtLWdJUGUxcGVpYldJLTVsVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTIzNS9ERDYxRTIyRUM1REQxMUVDQkVGNDJDNzdDNEY5QUUwMi9SQnl3MkdxU3p0
LS1nSVBlMXBlaWJXSS01bFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASpbXC3jV1crKLSOLTLesS1p5YaOn/eLKn3WtYjg4nrz0qdUrmsqtSwVEXmsB
FEuBQKOQjda3uYJpJOfMjVdh456Q6rFiVO2FhCQF92R+0OevG45vc8O0if7BG4Uu
AgmBHAjdsITACdFAmuUAvr4gXWRYuP6sqlDTJGzwhSdIAFPENQegDghbQpCKQr0j
o9UDiZqQZu7k3I0YWIlAcac2GAgjMj6I5th+fXeNR+W79KGgq7J1AnwlFGgUhIlM
LhVXzJJRJg67dibuOTWbujiqQMIHW6/C3faGfmdHW0A3/TFvhT80NCmNTFuhC4Bq
6ELYaprUMti14tCKsmSr0YYIuw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:56:06 2026 by rpki-client