
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
File: pYrazvnSRVOlVka1puvM6rGfL7w.mft (raw, json)
Hash identifier: C2jLIyq6h9CSYV+yUXHwRlujRXAIS6touIM6h95M5lk=
Subject key identifier: FE:22:01:27:2A:40:CD:98:15:A9:C5:65:99:25:F0:84:BA:DE:72:DE
Authority key identifier: A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
Certificate issuer: /CN=A9174C7A/serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
Manifest number: D7
Signing time: Mon 27 Jul 2026 08:45:52 +0000
Manifest this update: Mon 27 Jul 2026 08:45:51 +0000
Manifest next update: Mon 03 Aug 2026 08:45:51 +0000
Files and hashes: 1: pYrazvnSRVOlVka1puvM6rGfL7w.crl (hash: HdRdkiJ2Tohjxer04d5AVdME1pTw35q1HdiH2Vg629I=)
2: 5B118C12986011F0A5423187C4F9AE02.roa (hash: Nv3VGs0s4nLweSbJ3JGcdt+LncTqoSFHEUO8LJ8JE2k=)
3: 8D052914404911F0A4BD357BC4F9AE02.roa (hash: HDAJrdViuU7kZQtbBcD9tgS1zcOCf1eCW5LDFit/g6Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl
rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:45:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174C7A, serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Validity
Not Before: Jul 27 08:45:51 2026 GMT
Not After : Aug 3 08:45:51 2026 GMT
Subject: CN=6a671abf-fe6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:7f:6c:4b:3d:2d:1e:39:76:42:af:6b:1f:3c:
33:ef:be:1f:69:24:3a:83:51:06:b0:46:93:c8:1d:
8c:bd:67:76:75:86:5f:9a:18:37:fc:0e:4b:d9:71:
ac:2e:39:59:95:29:66:32:4a:d3:a4:c9:09:9f:02:
8e:7f:1b:ae:f0:39:f2:f2:3a:0c:a0:f8:14:e8:9f:
fc:a7:b8:ac:5f:b1:41:ea:b2:f9:de:fe:f5:1a:56:
3a:4a:28:68:26:2e:20:e9:73:ee:ea:6b:c6:90:4e:
54:c5:16:18:f4:ee:38:9d:11:39:d1:d1:01:6b:30:
fd:d4:e0:5c:99:ec:33:f7:25:52:df:e4:c2:b4:58:
fe:47:d4:54:8b:65:40:97:ae:c6:64:01:c1:8b:b4:
3b:8d:37:1a:c6:a9:b8:36:28:b2:f9:f8:00:36:2e:
4e:0e:cf:ab:c8:e6:bd:26:ab:75:2a:2f:0a:db:04:
a6:d4:9e:51:6c:e9:5c:60:07:39:54:ed:af:9c:fb:
09:46:a8:9f:81:e9:b9:84:e5:36:01:1c:ec:21:5a:
51:df:d6:87:be:4a:6e:0a:54:cc:8f:7c:11:30:83:
24:2d:30:d3:0d:bb:0a:5c:9d:45:31:81:9f:4b:35:
53:26:bc:7a:1b:0c:4b:f2:96:13:1f:e7:ec:4a:e5:
7d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:22:01:27:2A:40:CD:98:15:A9:C5:65:99:25:F0:84:BA:DE:72:DE
X509v3 Authority Key Identifier:
keyid:A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:1d:58:36:2e:00:db:75:53:39:20:5b:91:1c:ab:0e:79:b1:
77:a8:91:52:ea:de:33:bc:23:22:02:66:e6:b4:13:d7:50:82:
89:2b:05:c3:80:6a:72:1b:2c:e7:a1:1b:13:82:4f:27:d6:c8:
80:9f:3d:b2:25:0d:0e:18:dc:96:c6:09:2d:2c:47:50:51:cb:
6b:2c:db:fc:f2:39:a8:3c:4f:42:79:a5:98:ec:75:78:0b:e4:
bb:5f:0b:a8:66:24:44:12:66:96:40:49:84:89:14:af:f1:ba:
b0:b9:22:85:50:86:a9:a9:ae:47:17:5f:cd:2f:11:11:84:4a:
ab:0a:d8:d6:14:22:05:a3:fd:eb:68:31:f1:d9:a3:7a:8b:6f:
4a:ca:98:3b:92:bf:78:97:57:81:fd:43:09:06:40:0a:b4:bd:
1e:ac:8b:30:b5:00:aa:e8:37:b0:03:f2:d8:8b:c8:76:0b:ca:
a1:bf:bf:7e:75:63:37:7d:4f:0c:cc:a5:d2:e9:d1:e1:80:a8:
a9:4e:d1:dd:f5:17:ca:ae:d2:d4:51:f2:86:16:60:98:40:12:
3e:58:9d:5a:17:5d:38:de:cd:d6:65:4a:76:cf:04:31:dd:55:
95:a4:d6:6a:39:11:40:1c:93:d7:64:8b:fb:07:95:16:6d:06:
61:d7:e6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:40:00 2026 by rpki-client