
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft
File: _y7elNMHvCOJpLc5WSplf3FhzKI.mft (raw, json)
Hash identifier: qlx2vNOFQkeL9J8+5TQ1ICsuWvBv+/NC8IIh+f7Lf4c=
Subject key identifier: 5F:3D:1C:9B:0C:E8:1B:7A:72:9F:BB:0B:8C:61:D7:13:3A:03:25:2D
Authority key identifier: FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2
Certificate issuer: /CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2
Certificate serial: 0235
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft
Manifest number: 022A
Signing time: Sun 25 Oct 2026 03:11:41 +0000
Manifest this update: Sun 25 Oct 2026 03:11:40 +0000
Manifest next update: Sun 01 Nov 2026 03:11:40 +0000
Files and hashes: 1: _y7elNMHvCOJpLc5WSplf3FhzKI.crl (hash: 4evMjKK+OICHSbigchkl72tB0d+UdBTpxk/YfEJNA0U=)
2: 020CCB128E9011EEB7C5651BC4F9AE02.roa (hash: UCp6rrqiqQr0+NrkScEIOxBhtPkUO8ePaR/RWaljIG4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl
rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 03:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A7C2, serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2
Validity
Not Before: Oct 25 03:11:40 2026 GMT
Not After : Nov 1 03:11:40 2026 GMT
Subject: CN=6add736d-1c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0a:52:ab:15:2c:10:dc:86:20:fc:b0:be:ca:
a5:d7:25:ca:34:3c:65:15:70:85:fb:7d:7f:9f:9e:
b3:5b:5d:c7:94:e2:fc:17:fe:95:56:9c:71:9f:b0:
f4:40:c9:1b:04:23:18:2c:b8:2e:78:04:58:93:0f:
b6:18:ef:bb:99:03:1a:81:6c:a9:7f:dc:b9:31:57:
a0:ee:bb:2d:d5:f9:93:8f:ca:d5:05:1a:8b:9e:48:
f9:b0:81:e1:de:79:83:6b:ed:38:ab:19:95:b9:bf:
36:54:c3:f9:b4:5c:da:8f:19:4f:0a:b1:1f:4f:5c:
95:1d:27:26:03:0f:2d:61:e6:a8:d5:60:f5:28:1e:
76:e7:fc:a8:41:59:8a:0a:68:63:ea:6e:da:15:e0:
a1:23:cc:81:74:6a:3c:16:3a:be:83:7e:bb:8e:46:
e5:2e:4b:0f:95:c1:af:c3:48:06:36:13:0e:ca:30:
79:e8:b0:b0:b2:b0:6d:bf:26:cc:1e:77:94:69:e2:
ae:a4:d1:9d:c5:b9:27:39:ea:d1:27:4c:bb:dd:33:
7f:4d:ee:38:98:e5:13:48:f4:0b:6a:43:37:e9:3b:
64:68:01:b2:8a:0d:e4:20:f3:9c:ae:92:77:a0:3b:
7e:5a:ad:6f:65:a8:1e:cc:93:84:7a:33:25:fc:4a:
ad:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3D:1C:9B:0C:E8:1B:7A:72:9F:BB:0B:8C:61:D7:13:3A:03:25:2D
X509v3 Authority Key Identifier:
keyid:FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:90:25:33:b3:77:eb:a8:82:5e:bf:71:78:80:b1:18:c5:3e:
5d:7b:d2:d1:b9:75:89:6b:f3:70:b0:07:54:6b:02:67:af:51:
53:95:c1:ca:26:a3:d9:96:ed:4f:ed:b7:3a:05:66:e4:07:3b:
6b:37:02:36:2d:92:7f:df:65:2e:25:95:d8:0b:35:c8:15:f7:
e8:19:c3:ae:46:6b:8a:53:79:d4:c6:d0:a2:c6:6f:ad:87:e7:
2a:0c:73:01:ba:7f:ef:f0:5f:c8:13:ec:fd:70:0d:8c:2d:07:
13:26:ea:9f:81:d4:eb:28:fc:12:24:73:56:88:95:62:07:30:
5b:7c:bb:84:f5:3c:3a:32:d8:e8:b7:1b:f7:b9:4e:72:99:0f:
16:8f:6c:e1:fc:90:b5:d0:21:ce:3d:06:65:cc:89:e3:ba:9c:
94:96:e4:7d:c3:a6:fa:78:49:5f:fa:f6:9e:91:da:76:39:1b:
4d:de:0f:2e:55:9d:a0:6b:44:24:65:84:d0:c6:87:3e:5f:f7:
60:90:f2:d2:b7:d4:fd:66:b2:e0:66:17:2e:33:72:c0:16:cc:
8a:ce:2e:fc:12:18:47:e5:c6:63:1b:16:0a:33:65:31:54:ce:
b0:2d:4e:88:12:71:17:3d:41:40:2d:dc:db:fd:83:c9:c1:af:
d1:0e:d4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:34:51 2026 by rpki-client