
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/rYRGnC7Pu9ySonyb88f3Ok2lMHI.mft
File: rYRGnC7Pu9ySonyb88f3Ok2lMHI.mft (raw, json)
Hash identifier: 0hVuai/BvadjTG2QD92juDikjKj+JQMdRzFlD3SR+h8=
Subject key identifier: 53:CE:86:63:0E:D7:66:5F:8F:F1:C6:FD:90:81:27:15:B1:28:09:C7
Authority key identifier: AD:84:46:9C:2E:CF:BB:DC:92:A2:7C:9B:F3:C7:F7:3A:4D:A5:30:72
Certificate issuer: /CN=A918E84C/serialNumber=AD84469C2ECFBBDC92A27C9BF3C7F73A4DA53072
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYRGnC7Pu9ySonyb88f3Ok2lMHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/rYRGnC7Pu9ySonyb88f3Ok2lMHI.mft
Manifest number: 08
Signing time: Mon 21 Sep 2026 09:12:06 +0000
Manifest this update: Mon 21 Sep 2026 09:12:06 +0000
Manifest next update: Mon 28 Sep 2026 09:12:06 +0000
Files and hashes: 1: rYRGnC7Pu9ySonyb88f3Ok2lMHI.crl (hash: MKnWB+HQuwt6NAXmBYSDRcooBeiebX4MJ65V5dIgWN0=)
2: D6B9385EACC011F19308CC8D6511F970.roa (hash: u+DXYVjLCll7ilsoFengKrajZwvFgK6HVRL/3pZYwJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/rYRGnC7Pu9ySonyb88f3Ok2lMHI.crl
rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/rYRGnC7Pu9ySonyb88f3Ok2lMHI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYRGnC7Pu9ySonyb88f3Ok2lMHI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 09:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E84C, serialNumber=AD84469C2ECFBBDC92A27C9BF3C7F73A4DA53072
Validity
Not Before: Sep 21 09:12:06 2026 GMT
Not After : Sep 28 09:12:06 2026 GMT
Subject: CN=6ab0f4e6-d181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:09:f1:4b:bc:dc:52:7a:1a:53:8f:3f:78:11:
89:7d:f1:e4:da:15:98:f2:45:e4:43:6d:7b:93:4e:
35:14:f4:f4:0c:f4:30:db:d9:31:45:3b:1f:64:40:
cd:11:d3:ec:73:b7:d7:a1:f6:90:12:58:c6:5a:d8:
9c:f6:7d:c2:64:6b:75:bb:fd:aa:44:67:1b:2f:2f:
2f:99:71:d9:b6:bb:a2:b4:b2:db:12:e3:0f:fe:c3:
77:b8:75:46:f7:a5:c7:e4:99:f3:bd:a8:8b:71:cb:
13:34:21:2a:0c:2e:3a:7e:7d:7d:30:cb:49:ff:09:
fd:ac:18:ac:24:ca:f5:a9:5d:1e:3d:4c:92:8f:90:
c6:e4:77:00:49:39:b5:96:7d:30:71:7a:5f:fd:2d:
b6:8a:66:68:17:64:ce:64:1c:c6:6b:2f:97:3a:0d:
e1:15:ad:61:16:83:ae:ec:41:17:6c:9c:18:26:be:
ad:32:21:cb:6e:5d:64:02:20:ba:40:fb:5f:f2:c0:
6a:69:52:30:07:2e:b5:47:9f:ee:0e:14:30:0a:c4:
b3:0d:fe:ff:31:1f:c0:c4:e0:f7:5d:e4:97:60:0d:
fc:0d:24:e8:f8:13:f0:53:34:09:8c:b0:0a:7a:e4:
aa:23:a9:68:99:99:b6:2f:7e:22:5e:e8:59:85:e6:
e3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CE:86:63:0E:D7:66:5F:8F:F1:C6:FD:90:81:27:15:B1:28:09:C7
X509v3 Authority Key Identifier:
keyid:AD:84:46:9C:2E:CF:BB:DC:92:A2:7C:9B:F3:C7:F7:3A:4D:A5:30:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/rYRGnC7Pu9ySonyb88f3Ok2lMHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYRGnC7Pu9ySonyb88f3Ok2lMHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/rYRGnC7Pu9ySonyb88f3Ok2lMHI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8c:8e:9c:1f:98:de:db:2b:86:98:01:af:1e:8e:ec:92:ba:
c6:20:20:60:95:43:92:b2:fd:58:42:cc:5e:f2:b4:e0:d3:54:
7c:01:79:fb:d6:95:40:7c:16:f4:14:8f:27:e1:96:89:73:9b:
29:3a:49:4c:19:ed:9b:9a:7d:47:29:44:df:37:74:fe:ae:45:
8a:e1:2d:ed:2b:39:6d:7f:b4:ee:19:d0:42:de:71:f0:89:22:
ea:27:f4:e8:a7:e2:d9:72:9e:9f:02:87:22:08:40:15:83:a2:
62:80:71:5f:f8:28:32:da:8c:6c:c5:01:dd:1d:81:9c:de:46:
ee:eb:c7:04:2c:97:62:9c:75:aa:fb:cb:f3:ec:94:04:50:29:
ee:f3:24:1b:30:1c:3c:af:01:67:7a:22:85:1a:b0:da:c5:b5:
98:b3:ac:41:00:66:e1:32:5a:6d:c8:0d:ee:2a:ec:c8:7f:2a:
dc:23:94:6a:87:a4:08:71:b6:07:18:50:fc:58:8b:84:ae:e3:
31:8b:3a:44:07:cd:34:4a:f4:07:d4:a7:00:8c:8e:20:22:83:
77:00:04:81:35:1e:16:44:de:8d:08:9e:b4:23:1d:cd:28:e2:
f0:91:a2:28:c5:e8:bc:6c:67:2a:6b:44:22:2e:8d:03:d8:2e:
88:c4:08:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:26:10 2026 by rpki-client