
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft
File: rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft (raw, json)
Hash identifier: Smg1g58cG3wjQLjkbu0o5iUxVr+pj/Nx80NH1eJ5MAM=
Subject key identifier: 16:72:F3:04:46:27:1E:B6:63:71:6B:F4:BB:16:4E:70:87:1B:35:08
Authority key identifier: AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2
Certificate issuer: /CN=A91EF8B6/serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2
Certificate serial: 0C20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft
Manifest number: 0C12
Signing time: Sun 26 Jul 2026 19:12:33 +0000
Manifest this update: Sun 26 Jul 2026 19:12:33 +0000
Manifest next update: Sun 02 Aug 2026 19:12:33 +0000
Files and hashes: 1: rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl (hash: KJLuIXEJv6bfI5HuDlXFZW6WIwafeKEyZIRexyGa5Xo=)
2: FB6D5292263C11EEB9F5DB43C4F9AE02.roa (hash: 9vfMSvXUgFAWrMwGngY+4Eec7WyIf24UFnNt67nkKsk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl
rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 19:12:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3104 (0xc20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF8B6, serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2
Validity
Not Before: Jul 26 19:12:33 2026 GMT
Not After : Aug 2 19:12:33 2026 GMT
Subject: CN=6a665c21-97b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:05:f7:69:63:15:98:8f:d5:0b:e6:43:aa:
2f:e6:2d:3f:ba:e7:8f:14:27:1e:0c:b0:f5:41:1c:
53:65:b9:a9:ee:21:0f:8e:eb:eb:c4:d0:a3:64:8d:
6b:ed:71:d0:c9:f8:cb:bb:13:7a:e4:92:b7:7f:36:
f7:16:6b:1b:76:a0:c2:3c:cf:b6:80:ff:21:43:6e:
f9:d8:1a:24:33:54:8d:0c:6c:64:61:2b:36:20:11:
bb:8a:9b:06:b1:29:7c:bc:cb:26:50:c0:0d:a4:4b:
cc:36:01:cc:de:d7:01:f9:82:92:cc:47:84:59:a3:
8e:0d:03:34:ef:fa:02:87:ec:76:0b:74:a8:3a:3e:
02:71:41:22:12:8b:45:5f:86:34:d6:6c:27:a2:3b:
79:03:d2:b5:b7:73:f7:3c:f8:db:92:1c:f6:af:07:
78:b0:5f:e2:23:0b:2a:2c:29:fe:72:8e:ad:cd:e7:
2e:a3:fb:8c:f8:6e:c6:ce:10:3d:1c:97:db:90:dc:
16:12:64:90:20:79:a4:cf:eb:ad:08:d3:25:a8:29:
67:22:97:2d:6e:f5:12:54:1c:fc:93:91:35:23:71:
77:6c:5a:9a:37:71:5b:4c:2a:4c:ca:ae:35:9c:d8:
d8:58:1e:cc:f7:ec:9e:a4:be:6e:18:70:c4:89:a2:
9f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:72:F3:04:46:27:1E:B6:63:71:6B:F4:BB:16:4E:70:87:1B:35:08
X509v3 Authority Key Identifier:
keyid:AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:eb:e4:5a:ca:0d:5f:bd:6c:77:f6:d5:53:01:09:b4:f0:3b:
1c:04:26:e5:56:7c:80:7c:7d:54:61:71:40:66:bc:41:14:3a:
1d:d4:e8:17:97:e8:bf:65:30:79:aa:53:2b:90:84:e9:8c:cf:
c8:5f:20:1c:89:8d:9c:a9:60:8f:9f:af:21:4e:02:42:7d:55:
42:5a:20:34:66:9e:41:3f:52:ff:62:76:b4:79:96:c6:81:64:
c0:5e:fd:e1:9b:12:18:1e:ac:47:63:fd:25:39:f5:a9:e5:00:
0b:f3:e7:a3:9f:db:6d:cd:9d:52:9b:cf:68:fd:b0:1f:cb:0a:
6a:3c:1b:74:37:69:6c:0d:b3:a1:1d:c3:91:ee:77:a9:87:d9:
c5:54:e5:99:46:d5:2c:1c:76:70:3e:a8:54:52:d7:36:f9:b9:
d9:f8:3f:ec:06:8a:22:39:d6:ae:44:5c:d6:d7:0d:bd:8a:ca:
c3:9e:5a:36:d2:8a:30:b8:2a:6b:09:cb:c0:94:b5:ce:02:79:
83:20:27:e1:3e:e0:57:c8:5f:ce:07:36:a2:5f:3f:3f:b3:1a:
fd:ba:e7:ef:dc:14:88:05:d7:62:54:e0:e9:fb:23:0e:23:ad:
cc:0a:00:07:65:c2:d8:0a:fc:77:5c:0e:3e:8d:74:b6:e0:46:
07:d0:dd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:57:15 2026 by rpki-client