
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
File: Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft (raw, json)
Hash identifier: XmpLf/RPaRoHFZ8WSQY81WSHlwL8jP81S26p8MidOwg=
Subject key identifier: 72:9E:D2:EB:C8:4D:9C:8E:E2:88:78:16:89:2E:1F:71:B8:E7:EB:D2
Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58
Certificate issuer: /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58
Certificate serial: 0D0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
Manifest number: 0D02
Signing time: Tue 28 Jul 2026 18:28:16 +0000
Manifest this update: Tue 28 Jul 2026 18:28:15 +0000
Manifest next update: Tue 04 Aug 2026 18:28:15 +0000
Files and hashes: 1: Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl (hash: Zg+8wTv0kXuwuVtQxCt6BWG3b1v6CZkIRxkUuJ/4Gag=)
2: A0E062260A8C11EAB25FD253C4F9AE02.roa (hash: 5Ti6m1LIl0TQP6ix0VQfMwgNVX0N4OYoM9ENVwcx4C0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl
rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3341 (0xd0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9D5D, serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58
Validity
Not Before: Jul 28 18:28:15 2026 GMT
Not After : Aug 4 18:28:15 2026 GMT
Subject: CN=6a68f4c0-219d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:16:28:12:20:ba:cf:58:76:0e:9a:17:16:
09:a3:0d:db:62:ee:f8:60:aa:97:11:85:1f:c9:05:
59:16:e1:23:15:a8:a5:a7:c4:26:07:c0:9b:5d:0d:
17:0c:c9:3c:83:45:d6:36:c9:73:96:8e:c4:b0:db:
f5:9e:26:e0:b8:9c:cb:09:aa:eb:be:c3:ad:27:26:
43:6c:52:26:20:7a:89:b7:9d:37:91:2c:03:26:db:
ac:d6:05:a0:7e:1c:9e:8c:55:c8:d4:55:9a:30:d6:
f0:60:b7:14:f7:c6:e2:63:87:81:4c:7b:20:1b:12:
80:7c:f9:63:a4:78:60:95:5a:0a:1e:99:95:ff:bd:
59:ac:36:71:3f:29:3f:6e:ae:d2:46:33:3d:09:b6:
a1:99:7d:7f:55:08:e0:11:15:9b:57:ab:34:7d:cb:
3f:e0:de:a1:14:4e:f7:f3:c3:49:e9:41:ab:5d:bb:
12:4e:8c:26:d8:cc:62:b9:fd:e7:7a:5b:02:80:11:
b1:58:2e:47:03:eb:74:ef:1f:19:0f:ac:73:d3:7c:
df:33:01:e7:ac:22:c4:ed:22:a5:33:d1:3b:ba:fe:
0d:61:b4:ba:20:3f:45:34:c4:77:04:d4:7d:47:77:
59:07:90:24:e1:1c:c5:f2:e8:ab:43:11:78:f6:3c:
cf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9E:D2:EB:C8:4D:9C:8E:E2:88:78:16:89:2E:1F:71:B8:E7:EB:D2
X509v3 Authority Key Identifier:
keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:eb:7c:aa:97:af:2e:d4:3f:78:2a:af:32:b2:2a:c0:59:95:
f1:03:bc:77:a0:1b:19:01:cd:2a:e0:01:b6:4d:23:ea:62:99:
46:79:dd:60:d2:cf:a4:36:11:b8:75:21:f9:57:86:70:03:1b:
72:04:d3:98:f5:d9:7c:95:27:df:17:4d:95:00:2b:6b:5f:46:
c0:31:11:57:55:c4:83:22:f9:8a:b9:b5:99:9a:9b:29:87:33:
bd:3e:90:6a:ad:05:7a:c2:5d:df:50:d3:91:f6:32:55:54:7e:
eb:ec:72:e2:c5:26:f3:d6:33:23:6f:30:84:c8:28:45:ef:ee:
1f:1a:5e:74:53:93:db:e0:f5:01:9a:19:2a:17:09:aa:96:ab:
d3:f2:4b:59:dc:1f:d3:3b:a7:3e:34:7a:a8:43:2b:fd:3b:76:
98:c9:73:0e:e9:f3:9c:75:72:d5:cb:40:de:2f:85:3b:19:a7:
cb:23:c8:cd:58:1a:85:16:37:a8:e4:49:24:76:46:22:d8:3e:
ce:95:0b:bf:d0:4d:23:94:ce:34:10:02:71:b3:a6:3e:ba:4d:
f1:38:88:6c:a6:26:45:83:31:bd:c3:20:94:74:13:ad:ce:b4:
6b:60:f4:bc:6f:c1:52:7c:7e:20:d4:90:58:b5:ef:82:fb:66:
0a:12:09:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlENUQxMTAvBgNVBAUTKDM3MkQ5MzZFMzhEOEI5Q0IxRjcwMTIyMTlGRjgyMTcy
QjkwQkVFNTgwHhcNMjYwNzI4MTgyODE1WhcNMjYwODA0MTgyODE1WjAYMRYwFAYD
VQQDEw02YTY4ZjRjMC0yMTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwfIWKBIgus9Ydg6aFxYJow3bYu74YKqXEYUfyQVZFuEjFailp8QmB8CbXQ0X
DMk8g0XWNslzlo7EsNv1nibguJzLCarrvsOtJyZDbFImIHqJt503kSwDJtus1gWg
fhyejFXI1FWaMNbwYLcU98biY4eBTHsgGxKAfPljpHhglVoKHpmV/71ZrDZxPyk/
bq7SRjM9CbahmX1/VQjgERWbV6s0fcs/4N6hFE7388NJ6UGrXbsSTowm2Mxiuf3n
elsCgBGxWC5HA+t07x8ZD6xz03zfMwHnrCLE7SKlM9E7uv4NYbS6ID9FNMR3BNR9
R3dZB5Ak4RzF8uirQxF49jzPzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHKe0uvI
TZyO4oh4FokuH3G45+vSMB8GA1UdIwQYMBaAFDctk2442LnLH3ASIZ/4IXK5C+5Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ1RC9ERDZGMjg3MjBB
OEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVjc2ZjQklobl9naGNya0w3
bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL055MlRiampZdWNzZmNCSWhuX2doY3JrTDdsZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUQ1RC9ERDZGMjg3MjBBOEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVj
c2ZjQklobl9naGNya0w3bGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABet8qpevLtQ/eCqvMrIqwFmV8QO8d6AbGQHNKuABtk0j6mKZRnndYNLPpDYR
uHUh+VeGcAMbcgTTmPXZfJUn3xdNlQAra19GwDERV1XEgyL5irm1mZqbKYczvT6Q
aq0FesJd31DTkfYyVVR+6+xy4sUm89YzI28whMgoRe/uHxpedFOT2+D1AZoZKhcJ
qpar0/JLWdwf0zunPjR6qEMr/Tt2mMlzDunznHVy1ctA3i+FOxmnyyPIzVgahRY3
qORJJHZGItg+zpULv9BNI5TONBACcbOmPrpN8TiIbKYmRYMxvcMglHQTrc60a2D0
vG/BUnx+INSQWLXvgvtmChIJgg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:12:44 2026 by rpki-client