
$ rpki-client -vvf rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft
File: y7Nb36Nai-snCaTbsy49IWLsH6g.mft (raw, json)
Hash identifier: BL0JHx1l0wEtjEK9trbKyXtxLR1dAUR4SbupsZqU8YM=
Subject key identifier: 97:21:B7:9A:53:6C:EF:2D:DD:EE:2D:EC:31:2B:C4:9D:23:B1:D6:EB
Authority key identifier: CB:B3:5B:DF:A3:5A:8B:EB:27:09:A4:DB:B3:2E:3D:21:62:EC:1F:A8
Certificate issuer: /CN=A919130F/serialNumber=CBB35BDFA35A8BEB2709A4DBB32E3D2162EC1FA8
Certificate serial: E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft
Manifest number: E5
Signing time: Mon 27 Jul 2026 08:34:05 +0000
Manifest this update: Mon 27 Jul 2026 08:34:04 +0000
Manifest next update: Mon 03 Aug 2026 08:34:04 +0000
Files and hashes: 1: y7Nb36Nai-snCaTbsy49IWLsH6g.crl (hash: vwWcYa27dHa9hnsBhTUjnvQTsdAXTqvYRgS/15/2LOE=)
2: 26B1D24C2A4211F08783A40EC4F9AE02.roa (hash: 0Esu2ITkq2JO6eSubkpSXkJLoiB2r42MQ/8tZBJXmmU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.crl
rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919130F, serialNumber=CBB35BDFA35A8BEB2709A4DBB32E3D2162EC1FA8
Validity
Not Before: Jul 27 08:34:04 2026 GMT
Not After : Aug 3 08:34:04 2026 GMT
Subject: CN=6a6717fd-8d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9c:e9:83:66:26:12:72:f4:51:f6:c9:c1:74:
48:d2:e6:bf:c7:10:53:84:e3:40:28:d6:58:55:1b:
41:2b:9d:1b:28:63:aa:62:e3:3d:1e:2a:e6:fd:61:
30:7f:69:8c:fa:f4:72:a2:6f:c4:df:56:3e:43:46:
f4:6b:b8:d7:70:5a:02:25:1e:5b:9b:2d:a8:35:28:
e9:cd:12:f4:a3:78:71:93:50:5a:cd:b5:42:65:b9:
fa:2b:c2:89:2e:34:94:4d:fd:15:e3:1b:1a:fc:e3:
9c:dd:29:ea:11:7e:17:22:a9:4d:d7:56:53:1b:00:
ae:b6:e9:28:bb:44:f0:92:f5:ac:60:16:2d:bb:09:
d3:69:9a:b6:76:3b:bc:a4:9f:38:07:c3:86:aa:81:
ca:ce:81:1b:b2:23:41:c7:d3:47:24:ea:a8:58:8a:
5e:cc:63:f3:ca:a1:69:f2:b9:92:bb:96:e7:16:75:
3b:9b:56:9d:fa:f6:8a:33:76:8a:0c:6e:f1:aa:c0:
ae:d0:57:ee:45:b8:8f:44:ed:d7:a5:cc:55:10:18:
0f:a7:cc:11:74:fe:92:99:24:eb:29:b1:22:89:1a:
61:43:18:19:f3:be:78:2e:3d:2e:29:21:be:b5:e5:
02:1e:98:04:82:e1:0c:bc:3f:1a:03:04:ac:a6:3b:
92:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:21:B7:9A:53:6C:EF:2D:DD:EE:2D:EC:31:2B:C4:9D:23:B1:D6:EB
X509v3 Authority Key Identifier:
keyid:CB:B3:5B:DF:A3:5A:8B:EB:27:09:A4:DB:B3:2E:3D:21:62:EC:1F:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:a4:5a:12:57:ac:38:93:4a:8e:40:8b:10:fd:73:dc:af:38:
60:b2:a5:b4:ee:b4:8d:c6:78:0d:42:eb:ec:95:11:99:1d:be:
80:52:bc:b0:92:a2:89:61:78:4d:d5:14:c6:ab:5d:2c:ad:82:
96:d1:1a:12:89:d7:de:c0:2f:25:fb:95:7f:c9:83:b5:19:42:
b7:39:d1:98:a5:66:a8:5e:8a:ca:65:08:f8:06:4a:03:14:e3:
42:f5:7b:59:8c:f2:ff:6e:ac:cb:c5:87:82:0b:8d:1f:ad:2d:
9b:0b:8b:39:13:b3:1c:1d:31:41:e3:d8:e4:5e:61:b3:b9:c4:
55:09:3f:8e:c7:d2:c6:17:d7:23:94:01:45:2c:76:6c:db:58:
95:21:e5:08:cc:de:97:93:0f:8a:a8:fd:93:fc:f3:d7:19:5f:
d8:28:5e:7f:43:13:62:19:36:72:85:90:e3:0e:55:e8:7b:4b:
f3:b0:19:d8:b6:82:2f:3a:77:9f:56:6b:a2:9b:f3:f1:0e:b2:
cb:b7:d7:b7:c5:c7:df:a6:1a:d5:db:3e:6c:95:33:ba:f6:f7:
5c:47:2b:ab:69:57:70:ca:bb:10:67:56:4d:bb:ae:59:23:be:
30:0c:c7:7e:48:f2:01:e8:4a:a5:fc:d0:9b:89:6d:32:60:a9:
f6:88:24:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:37:41 2026 by rpki-client