
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft
File: 73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft (raw, json)
Hash identifier: SDGUQhPGyfZyRlgJ8IAWT2rWNNxwtrGslALSO/+gC/g=
Subject key identifier: 2C:7D:58:38:F7:1D:EC:DF:27:FE:BD:D6:7B:7E:D9:6F:0C:D8:95:B2
Authority key identifier: EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64
Certificate issuer: /CN=A917E458/serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864
Certificate serial: 0103
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft
Manifest number: FF
Signing time: Mon 21 Sep 2026 06:10:46 +0000
Manifest this update: Mon 21 Sep 2026 06:10:45 +0000
Manifest next update: Mon 28 Sep 2026 06:10:45 +0000
Files and hashes: 1: 73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl (hash: ocL7+ry+M88zn3UPwS1J6i8RYMvUvTjyRuwUARD2YHc=)
2: 0E6E2FF4590A11F0B7FD292DC4F9AE02.roa (hash: Si9syy0a10iRlCe9npjHmkK+zgQ6f2XPNBmPhKIkgHQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl
rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E458, serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864
Validity
Not Before: Sep 21 06:10:45 2026 GMT
Not After : Sep 28 06:10:45 2026 GMT
Subject: CN=6ab0ca65-388b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:6d:57:1e:1c:0b:94:e9:cc:23:c2:3c:75:
6c:5d:b9:8f:0d:1c:e8:4b:6b:c4:22:95:48:c0:0f:
4e:f0:9f:81:c6:0e:52:4a:8a:91:6a:f1:89:1d:8a:
c2:50:2f:dc:91:02:58:98:c1:db:09:bb:a2:28:6b:
9a:ba:7a:dd:9a:7f:18:fb:09:9b:5e:9d:86:e4:24:
2a:f9:82:cd:d4:fc:2b:5b:11:b4:c3:2a:fd:bf:8d:
b2:14:ec:fa:62:52:4c:ed:58:8d:35:b3:6f:95:14:
5c:2f:c0:01:32:e2:c5:d4:28:53:e3:4c:ab:86:e7:
22:e4:74:63:8f:ef:38:ac:1c:22:fd:62:ea:59:ff:
ce:e4:87:98:73:b9:3c:bd:2f:e6:ce:fb:bd:48:2b:
e6:30:48:82:b1:a4:95:bd:aa:b2:c0:b1:cd:ba:bb:
58:eb:99:1b:68:59:5d:20:aa:90:37:26:bd:65:7f:
f9:4a:0d:1f:aa:90:7d:71:49:79:a7:e2:19:a1:97:
03:f7:57:cc:16:c4:b5:cc:91:88:a7:4a:ce:f1:80:
90:61:0c:f1:76:2b:b9:1a:cc:43:92:9f:05:48:f0:
78:10:71:0a:22:f2:10:78:98:94:7e:69:cb:04:17:
29:e5:15:9b:b1:50:d1:78:52:d5:36:ba:41:92:05:
d4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7D:58:38:F7:1D:EC:DF:27:FE:BD:D6:7B:7E:D9:6F:0C:D8:95:B2
X509v3 Authority Key Identifier:
keyid:EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:71:59:d3:f4:77:e0:8b:91:d9:67:52:fc:fd:bc:0a:d3:cd:
6b:3e:28:c7:af:d3:46:a3:84:79:96:a3:7f:bb:ec:c8:d0:13:
e2:ad:43:4d:e3:43:ea:e3:6e:86:69:f3:d6:ac:6e:31:ac:a5:
c1:4b:66:78:5c:94:70:46:9b:78:db:ff:6d:cc:56:96:68:c6:
16:54:0a:16:15:3a:32:9a:43:e0:d7:02:db:c0:fd:cb:72:e7:
4b:c7:37:ff:3f:f8:11:9e:ed:0a:0d:1a:8b:9b:4d:c2:89:b1:
1f:fe:e5:77:f1:9f:17:85:b4:e2:83:e5:51:cc:c0:26:1d:00:
17:75:2c:c5:87:1a:41:c3:0c:1b:91:23:d1:c1:e1:cc:30:e7:
91:03:5a:e9:67:e5:00:59:9c:49:89:b4:e1:92:58:a9:aa:21:
37:15:06:0c:a4:ea:5c:0e:f0:29:ec:15:d5:a9:4b:45:61:56:
6e:05:d1:20:30:b9:ef:bb:d6:25:37:b0:b9:62:d3:f5:a6:91:
91:c1:3b:62:06:0a:dd:e0:77:aa:9c:96:64:8e:77:d4:ef:d7:
81:04:f9:dc:af:fb:96:83:42:2b:2b:4a:aa:42:b6:9e:1f:5d:
d3:ad:3e:4c:3c:65:c9:8d:b0:34:f4:81:13:46:fb:ac:ae:1f:
4f:56:3f:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U0NTgxMTAvBgNVBAUTKEVGNzYyQ0M5NDIxOUUwOTkyM0ExMUIwRDNDNDMwRTdG
MzVDOEQ4NjQwHhcNMjYwOTIxMDYxMDQ1WhcNMjYwOTI4MDYxMDQ1WjAYMRYwFAYD
VQQDEw02YWIwY2E2NS0zODhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuN5tVx4cC5TpzCPCPHVsXbmPDRzoS2vEIpVIwA9O8J+Bxg5SSoqRavGJHYrC
UC/ckQJYmMHbCbuiKGuaunrdmn8Y+wmbXp2G5CQq+YLN1PwrWxG0wyr9v42yFOz6
YlJM7ViNNbNvlRRcL8ABMuLF1ChT40yrhuci5HRjj+84rBwi/WLqWf/O5IeYc7k8
vS/mzvu9SCvmMEiCsaSVvaqywLHNurtY65kbaFldIKqQNya9ZX/5Sg0fqpB9cUl5
p+IZoZcD91fMFsS1zJGIp0rO8YCQYQzxdiu5GsxDkp8FSPB4EHEKIvIQeJiUfmnL
BBcp5RWbsVDReFLVNrpBkgXUsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCx9WDj3
HezfJ/691nt+2W8M2JWyMB8GA1UdIwQYMBaAFO92LMlCGeCZI6EbDTxDDn81yNhk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTQ1OC8yN0JFODQwRTMw
RDgxMUYwQTdCRTJFNEZDNEY5QUUwMi83M1lzeVVJWjRKa2pvUnNOUEVNT2Z6WEky
R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzczWXN5VUlaNEpram9Sc05QRU1PZnpYSTJHUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTQ1OC8yN0JFODQwRTMwRDgxMUYwQTdCRTJFNEZDNEY5QUUwMi83M1lzeVVJWjRK
a2pvUnNOUEVNT2Z6WEkyR1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMHFZ0/R34IuR2WdS/P28CtPNaz4ox6/TRqOEeZajf7vsyNAT4q1DTeND6uNu
hmnz1qxuMaylwUtmeFyUcEabeNv/bcxWlmjGFlQKFhU6MppD4NcC28D9y3LnS8c3
/z/4EZ7tCg0ai5tNwomxH/7ld/GfF4W04oPlUczAJh0AF3UsxYcaQcMMG5Ej0cHh
zDDnkQNa6WflAFmcSYm04ZJYqaohNxUGDKTqXA7wKewV1alLRWFWbgXRIDC577vW
JTewuWLT9aaRkcE7YgYK3eB3qpyWZI531O/XgQT53K/7loNCKytKqkK2nh9d060+
TDxlyY2wNPSBE0b7rK4fT1Y/aQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:27:51 2026 by rpki-client