
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
File: Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft (raw, json)
Hash identifier: EL+zxs+SvTr942a7OZd9N8fObPqsOfa7pUTceefJlWw=
Subject key identifier: E8:A9:D1:02:32:1E:5C:4E:7B:BF:9A:A0:EB:7B:96:9E:70:89:22:82
Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
Certificate issuer: /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
Manifest number: 26
Signing time: Fri 12 Jun 2026 16:06:27 +0000
Manifest this update: Fri 12 Jun 2026 16:06:27 +0000
Manifest next update: Fri 19 Jun 2026 16:06:27 +0000
Files and hashes: 1: Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl (hash: LEDxyKMl2Glj4Cg04tc6jiXamlxwafUa2I5j6mFsalw=)
2: CB53532C4A9711F184FA30B7B0833773.roa (hash: uy6KJdAywX4n9D6cDCPQCt+q5gOWffOcvS4zvWYkygY=)
3: 62A4D5365DE711F18D15F5F9BA833773.roa (hash: Yl758J5gQQ4kaYtkddFzVioKhcg++8qC0CLb5+Q1zpU=)
4: E685F69A372D11F1A4767B088F833773.roa (hash: FJIzDWY4FUZYzGXG6swI0+oNcll13LRpA1sEgGuP3vM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Validity
Not Before: Jun 12 16:06:27 2026 GMT
Not After : Jun 19 16:06:27 2026 GMT
Subject: CN=6a2c2e83-aa44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:97:b0:ee:68:7c:f2:3f:98:b9:3e:b4:2e:
5c:2a:f4:58:59:b6:39:78:4c:52:9b:54:d5:c1:a7:
f7:8d:90:08:f3:2e:2b:29:90:f7:48:7e:14:03:54:
da:c3:c2:4e:a6:23:e2:53:c6:7e:57:61:7e:58:4c:
6a:ae:2c:00:77:ad:0a:f2:73:27:2a:d2:64:d2:35:
a2:5e:ba:42:84:6e:22:81:26:11:11:e9:ac:2f:08:
54:2c:18:f6:6c:56:06:cc:18:c6:b5:6d:3e:ad:7d:
68:1e:ef:fa:d3:48:10:29:6a:e9:01:af:31:a5:6a:
06:34:2d:63:43:d0:d4:d7:77:8b:49:c3:79:4d:5c:
60:13:da:e3:ea:6b:7c:db:00:a1:a3:a2:8a:cf:2e:
74:71:69:e5:e5:9a:8e:ae:d2:7c:e9:89:36:36:8f:
bc:c5:94:f8:18:4f:51:ba:91:30:2a:82:90:1d:35:
6f:26:46:f7:2b:17:33:b3:70:3c:25:0d:6c:f8:a4:
57:55:95:c7:12:03:42:51:5e:31:d5:c4:e3:54:56:
61:c0:4e:54:d1:6b:e4:b0:cf:1e:a2:ea:62:0c:a8:
c2:5d:eb:3d:3f:90:de:f0:74:a5:79:7b:4f:d1:6b:
5a:26:7f:bf:75:ae:bb:2c:88:d4:02:19:ac:e5:30:
e9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A9:D1:02:32:1E:5C:4E:7B:BF:9A:A0:EB:7B:96:9E:70:89:22:82
X509v3 Authority Key Identifier:
keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:9e:e2:3a:f5:04:70:f4:9c:85:13:5e:73:00:dc:b5:31:ff:
1e:5f:5e:c2:27:e0:6a:cb:eb:8b:65:56:99:f0:eb:fa:74:4b:
c5:d9:33:cf:d1:ce:98:3f:92:13:d3:35:d8:37:34:7b:93:1b:
94:ea:9c:88:4d:02:b1:e8:79:b0:35:d8:75:c4:1a:d0:2a:68:
ca:40:e2:cd:3f:60:59:7c:a0:ab:9e:0b:51:6e:4b:3a:35:13:
cf:62:43:ac:c5:29:14:e4:a2:31:53:1c:28:f6:76:83:80:91:
97:76:bf:84:1a:d8:68:6b:49:f7:53:32:b1:77:ff:f0:27:84:
93:84:a1:da:6a:7d:b1:ac:f4:53:d2:08:30:62:1d:9d:80:d3:
c5:16:43:4b:51:f4:52:0a:e5:69:c6:72:8f:eb:13:b3:d4:c8:
29:c5:ee:0e:b5:79:4f:72:23:e0:2f:80:37:18:3d:65:07:51:
95:47:b0:0f:f8:8e:30:9c:85:51:2e:db:b7:7b:cd:81:d1:0c:
f7:e4:1a:3a:7e:aa:7c:fe:7c:39:6f:51:51:15:2e:a7:8e:ce:
c6:f2:99:ac:3a:1e:dd:9e:2a:56:8e:18:d9:96:94:30:2b:72:
c2:79:2f:5f:55:c9:ec:74:30:8e:09:68:4e:af:39:47:b8:e8:
a5:a7:b8:9a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QTg0QTExMC8GA1UEBRMoNjM3RDU2QTc1QkI5NUJDNUM5RTZCMDg5RDkzNENCNUUy
RkJEOTYyRDAeFw0yNjA2MTIxNjA2MjdaFw0yNjA2MTkxNjA2MjdaMBgxFjAUBgNV
BAMTDTZhMmMyZTgzLWFhNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4IZew7mh88j+YuT60Llwq9FhZtjl4TFKbVNXBp/eNkAjzLispkPdIfhQDVNrD
wk6mI+JTxn5XYX5YTGquLAB3rQrycycq0mTSNaJeukKEbiKBJhER6awvCFQsGPZs
VgbMGMa1bT6tfWge7/rTSBApaukBrzGlagY0LWND0NTXd4tJw3lNXGAT2uPqa3zb
AKGjoorPLnRxaeXlmo6u0nzpiTY2j7zFlPgYT1G6kTAqgpAdNW8mRvcrFzOzcDwl
DWz4pFdVlccSA0JRXjHVxONUVmHATlTRa+Swzx6i6mIMqMJd6z0/kN7wdKV5e0/R
a1omf791rrssiNQCGazlMOlrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6KnRAjIe
XE57v5qg63uWnnCJIoIwHwYDVR0jBBgwFoAUY31Wp1u5W8XJ5rCJ2TTLXi+9li0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBODRBLzc3QUM3QkQyMzRG
NzExRjFCQjczNkNBNzdDRUU1MjhFL1kzMVdwMXU1VzhYSjVyQ0oyVFRMWGktOWxp
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvWTMxV3AxdTVXOFhKNXJDSjJUVExYaS05bGkwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB
ODRBLzc3QUM3QkQyMzRGNzExRjFCQjczNkNBNzdDRUU1MjhFL1kzMVdwMXU1VzhY
SjVyQ0oyVFRMWGktOWxpMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQASnuI69QRw9JyFE15zANy1Mf8eX17CJ+Bqy+uLZVaZ8Ov6dEvF2TPP0c6YP5IT
0zXYNzR7kxuU6pyITQKx6HmwNdh1xBrQKmjKQOLNP2BZfKCrngtRbks6NRPPYkOs
xSkU5KIxUxwo9naDgJGXdr+EGthoa0n3UzKxd//wJ4SThKHaan2xrPRT0ggwYh2d
gNPFFkNLUfRSCuVpxnKP6xOz1Mgpxe4OtXlPciPgL4A3GD1lB1GVR7AP+I4wnIVR
Ltu3e82B0Qz35Bo6fqp8/nw5b1FRFS6njs7G8pmsOh7dnipWjhjZlpQwK3LCeS9f
VcnsdDCOCWhOrzlHuOilp7ia
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:07:07 2026 by rpki-client