
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
File: RYSuojlMRtaTTmPtaIfUcm_fehM.mft (raw, json)
Hash identifier: USn/C07KdgIDXeBqpnOqqABl2w7N2+uTfjby4VD1mYg=
Subject key identifier: 13:73:00:5C:61:2E:38:D0:0C:0E:7F:C3:35:44:82:FC:31:D8:16:43
Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Certificate serial: 052C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
Manifest number: 0504
Signing time: Mon 27 Jul 2026 00:44:15 +0000
Manifest this update: Mon 27 Jul 2026 00:44:15 +0000
Manifest next update: Mon 03 Aug 2026 00:44:15 +0000
Files and hashes: 1: RYSuojlMRtaTTmPtaIfUcm_fehM.crl (hash: CBA/p/VC/1Hrox7OolAVmcC0Kgy+YAcnGk9U8N6KsRw=)
2: BCD8D1DCD22B11EE9443A443C4F9AE02.roa (hash: 39C+hq9yHLOlvpEI0BBXna/9+vYl0n36FnAzYDNDqZ0=)
3: 783C88A285FF11EEAFD34A2CC4F9AE02.roa (hash: e8gT8HqV1esire/8xcI7iv1N+KlJ6UFqhxx1NHbDo3o=)
4: BC148566D22B11EE9443A443C4F9AE02.roa (hash: cfcf5ZIlJUYMjr0+qHEumL0rToA0BJQdmmF24Iwecxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl
rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:44:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1324 (0x52c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAAF5, serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Validity
Not Before: Jul 27 00:44:15 2026 GMT
Not After : Aug 3 00:44:15 2026 GMT
Subject: CN=6a66a9df-f621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:72:d4:12:d2:7d:fc:e5:1c:9d:b8:cd:7a:ea:
62:ef:d4:de:0b:d1:3b:f0:a7:d8:a6:94:b8:55:b9:
78:49:46:84:68:e3:d9:d9:44:24:07:97:4b:3c:ad:
3c:89:d8:9e:88:93:bb:b4:72:a1:af:73:03:a0:42:
2e:92:3f:75:bd:eb:32:e8:45:dc:22:e7:8d:4c:b6:
ed:f5:ff:8e:0e:66:2f:5f:ef:cd:92:1f:49:e5:0a:
fb:90:96:c5:5d:c8:3e:9b:96:82:ce:5d:05:48:dc:
7e:b5:92:0a:88:d3:11:b8:ba:58:6a:72:0b:b9:93:
b3:06:33:d5:78:be:5f:30:54:6c:d7:60:7d:d9:be:
82:2e:f9:75:84:12:20:42:8f:54:51:a4:09:37:59:
d8:d8:34:46:40:e3:23:07:5a:15:5e:79:b2:e3:69:
ec:b1:35:8a:21:10:93:04:bf:e7:10:f2:aa:bd:c0:
16:bf:05:f6:55:b0:6f:38:34:3a:9a:21:f5:54:c4:
f7:07:06:df:67:89:6c:b9:eb:a3:30:84:62:6c:5b:
32:ff:29:45:ef:ee:3e:49:d0:5c:85:e3:10:57:64:
11:35:91:f1:a3:44:38:b1:c3:20:a3:01:46:d6:b7:
0a:a1:70:71:f8:97:be:12:74:48:59:9a:b7:30:57:
1c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:73:00:5C:61:2E:38:D0:0C:0E:7F:C3:35:44:82:FC:31:D8:16:43
X509v3 Authority Key Identifier:
keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:0e:98:4f:7d:a5:52:42:1f:bb:81:ea:9a:c9:c8:43:d4:b6:
3a:eb:fa:3a:26:4b:b2:12:19:93:53:3f:02:dd:e3:b2:c2:ac:
d7:c9:09:1e:dd:76:c3:df:85:e7:6a:68:c0:1b:26:1d:a7:8c:
b6:5b:38:ef:e2:55:b5:d7:6d:70:86:35:ff:4f:37:8c:d0:3b:
ed:11:f8:8e:85:9e:f1:2e:1f:b5:06:f5:86:57:f4:06:1c:20:
c5:59:bf:e9:eb:a8:7e:92:fa:c8:67:24:42:e8:21:54:85:83:
1b:20:46:a8:34:a2:12:cf:93:dd:8b:ed:8d:57:1e:12:fa:51:
2a:0b:8f:cb:6f:c1:24:98:4f:7e:5f:ca:d2:36:30:32:42:d6:
a6:a5:e2:83:0b:46:7d:c9:a4:13:7e:3c:ac:34:46:71:48:73:
d3:06:ee:f8:6c:2f:6f:d9:fa:f3:f2:e9:6a:61:00:c8:73:89:
07:a3:69:9f:30:fb:5e:2e:93:09:15:94:b6:76:3d:64:8a:72:
71:7a:9b:29:30:8e:cd:58:7d:9f:79:9e:c0:4d:70:4f:4d:77:
3f:b4:0e:e7:48:2b:7d:1a:df:82:0a:c0:a0:0c:49:7f:96:54:
b7:3f:e6:8b:d0:10:ab:e9:2a:f2:a0:bb:60:a8:1c:ff:47:18:
ff:94:43:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:07:39 2026 by rpki-client