
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
File: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft (raw, json)
Hash identifier: XLn2rSn5Wyaj0ciUp88r9UVcZY1JsIXhqlc/LxGDOEM=
Subject key identifier: 2D:BF:1F:B1:1B:06:3C:56:72:19:58:CB:DD:F4:E2:72:FA:82:55:2B
Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
Certificate issuer: /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Certificate serial: 0877
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
Manifest number: 085A
Signing time: Fri 10 Jul 2026 21:19:14 +0000
Manifest this update: Fri 10 Jul 2026 21:19:14 +0000
Manifest next update: Fri 17 Jul 2026 21:19:14 +0000
Files and hashes: 1: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl (hash: f4vZra0AkB8nPiErRIhvBTh/hOyGawqv3nirLxxE80E=)
2: 7A299148000311F191DFD8AE3C6F56BC.roa (hash: CFc84riH2MB87zU/DpJZ0VZbTskfpT/fcnC+lNYeR50=)
3: 7AAA8154000311F191DFD8AE3C6F56BC.roa (hash: x6G+iXovRti/BntEfhaZ6wM5ntzRbJdW9j8h7+t6XG0=)
4: 8D0DD6C2690811EFAC6DE109C4F9AE02.roa (hash: XxTxvEaSE5hUqY+FgqA+JjfK7ug+VG+l0z5zQK56p5k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Jul 2026 21:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2167 (0x877)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130395, serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Validity
Not Before: Jul 10 21:19:14 2026 GMT
Not After : Jul 17 21:19:14 2026 GMT
Subject: CN=6a5161d2-bc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:a5:42:bd:98:0e:7d:65:05:d6:46:2b:ba:
b9:65:e7:00:e1:82:70:9a:0d:5f:7b:8b:90:34:6b:
60:74:bd:65:56:e7:ce:b4:9a:d8:fb:90:45:c2:6f:
34:b7:c8:30:4f:a4:ba:ad:be:d6:8d:a3:0d:8c:57:
7f:b2:95:9d:4f:fc:b5:78:38:f3:8b:32:06:0e:c0:
57:5e:82:f1:6c:1e:68:aa:b3:5a:f9:ce:df:e9:90:
5e:9e:c9:d1:47:ff:76:95:00:4e:d3:b8:9b:e6:c1:
d8:3d:68:e4:23:9b:a7:65:61:e2:72:33:77:c6:58:
73:a5:58:ac:90:be:1f:82:ca:ef:4b:c3:5f:d1:e6:
50:b1:d3:8b:de:b7:e7:4a:c1:2f:ac:bd:09:14:99:
ca:b4:62:66:e9:11:06:96:56:2c:2f:da:eb:af:51:
e1:05:a4:59:bc:7d:b5:db:07:55:2c:ed:4f:ae:86:
9c:b3:3b:4c:94:a2:21:97:21:63:36:17:73:4e:dc:
e5:d9:38:80:2d:bc:92:b3:d6:80:01:be:da:2d:b2:
42:2c:38:22:03:88:dd:fa:b9:d5:d6:02:a5:d9:a0:
ff:08:69:10:7c:43:17:40:86:83:64:4c:dd:6f:2d:
83:8d:ac:2b:da:b9:72:2a:24:ef:16:16:34:a9:2e:
f2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BF:1F:B1:1B:06:3C:56:72:19:58:CB:DD:F4:E2:72:FA:82:55:2B
X509v3 Authority Key Identifier:
keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5c:5b:c6:ff:25:50:82:9c:79:3a:26:f3:26:09:23:26:5c:
3e:a7:e1:81:ee:fe:6a:09:bc:0f:c0:a7:41:46:57:ca:0e:ff:
6b:b7:df:71:a3:34:92:24:6f:50:0e:50:ca:39:d0:7c:52:58:
ee:9a:f8:d0:86:a6:2a:00:1d:e7:76:a4:e4:33:27:eb:fc:7e:
60:4b:28:18:5d:41:d9:f5:0a:dd:2a:96:6c:7d:96:e8:58:e3:
cd:a4:f2:bd:ba:6f:57:c4:47:6d:0f:a2:21:45:c0:86:15:e6:
10:0b:74:95:1d:fa:ce:3a:fa:7d:1a:89:3f:ef:a0:c5:d0:33:
90:a5:55:2a:f5:c1:ca:7c:20:8e:00:d5:93:e9:9e:fa:d1:d7:
35:44:28:dd:f8:73:77:59:00:df:71:20:04:56:0d:e5:4a:21:
cf:08:28:7b:a7:93:e5:d3:39:ee:5b:ee:98:53:b9:62:3d:ab:
38:99:65:51:e4:e1:07:24:71:75:70:3f:ff:5e:11:55:78:83:
c4:f5:6c:64:ab:ce:94:23:59:2f:af:1a:a8:b1:cb:6b:60:20:
dd:66:99:ae:27:2f:26:c3:8e:69:5b:62:fa:a9:bb:81:28:3c:
07:67:9c:63:e3:4f:7d:ca:a5:02:68:61:5b:ee:fc:82:23:db:
c4:55:a5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 12:07:27 2026 by rpki-client