
$ rpki-client -vvf rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
File: CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft (raw, json)
Hash identifier: LCvmR5LbuCm2jKIFitvrIa81tctIgr1ovwLHTkarhFw=
Subject key identifier: 26:22:10:40:6B:44:C5:82:19:18:19:81:53:3C:C6:60:87:B4:46:84
Authority key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77
Certificate issuer: /CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
Certificate serial: 0884
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
Manifest number: 087A
Signing time: Sat 04 Jul 2026 20:52:18 +0000
Manifest this update: Sat 04 Jul 2026 20:52:18 +0000
Manifest next update: Sat 11 Jul 2026 20:52:18 +0000
Files and hashes: 1: CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl (hash: pu/uTBe66p7zyLal1hbEjVyf6AHniYNSQeJ3zKwEG2Y=)
2: 1AC2369A010911ECB732340DC4F9AE02.roa (hash: 1d5DWa9kmJ4w10WbuE7/Yrtfavj9f+ay8eq6OsazIQw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl
rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 20:52:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2180 (0x884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913806E, serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
Validity
Not Before: Jul 4 20:52:18 2026 GMT
Not After : Jul 11 20:52:18 2026 GMT
Subject: CN=6a497282-a28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b2:25:38:37:61:a1:75:29:99:7e:f7:6c:55:
e0:7f:d4:75:c0:6a:26:ad:e6:a0:24:e7:6d:e8:6e:
b5:5e:8b:26:70:22:f1:68:61:77:b4:2a:de:66:77:
de:0f:ab:f9:38:b3:e1:eb:51:2d:3a:6a:37:ed:03:
ce:7d:e1:41:cd:a7:cb:4e:f9:71:64:56:f4:cd:e1:
f4:4e:64:d5:dd:d3:45:04:af:03:77:32:22:6e:fb:
15:16:3b:25:1f:04:05:6b:ac:77:e4:e8:6a:27:af:
b4:91:41:40:34:63:01:c7:86:58:ed:0c:44:93:cf:
f0:ea:d0:89:56:ea:92:47:8c:12:d2:58:10:47:4e:
b9:de:0d:76:94:a4:e1:ea:ed:7e:49:92:cd:7f:53:
21:64:a8:f5:7b:5f:b2:6d:46:b8:aa:76:f0:7c:d4:
14:8e:ba:fb:b7:b3:ba:8c:51:12:0e:0b:e9:27:46:
b6:95:52:26:1c:36:62:6f:83:32:24:31:9d:1b:92:
1b:f7:c1:eb:8c:3a:19:db:fa:89:d3:1e:7c:a1:f5:
e0:44:c6:91:b4:74:4e:a5:6e:79:ea:42:a1:75:ed:
03:cd:c5:f6:72:3f:33:96:6d:00:d0:e8:15:36:fb:
02:be:fa:38:48:6a:62:3a:b7:b7:60:a7:1d:a2:8e:
b2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:22:10:40:6B:44:C5:82:19:18:19:81:53:3C:C6:60:87:B4:46:84
X509v3 Authority Key Identifier:
keyid:09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:7c:e1:a8:d2:55:36:89:e9:ba:fb:0a:0b:69:c7:dd:f5:1a:
ea:8c:88:ea:8b:95:4e:bc:89:a6:59:35:75:cc:f0:ac:a4:84:
64:db:08:94:ff:66:16:20:3d:2c:d0:aa:63:eb:28:db:fa:34:
c6:9a:bf:cc:e1:a3:25:19:87:14:14:16:5c:ee:86:35:eb:f1:
1e:7c:b3:2a:6c:a7:76:77:34:f7:a0:f3:24:3c:33:49:cb:d5:
9b:49:1f:92:ef:01:60:bb:ec:e7:a0:a7:3f:d4:24:8a:9a:3b:
32:a2:0e:bd:07:86:08:e6:a6:41:bb:38:ae:9d:dc:e9:03:40:
29:9f:c1:b7:74:0c:63:5d:22:f3:1d:33:91:31:d5:27:2a:ce:
89:26:bf:d7:17:9e:8c:9e:5d:ba:06:63:92:ca:d0:96:31:12:
b6:86:68:49:c2:16:71:39:8a:b7:81:f4:c8:76:53:39:50:62:
c4:ea:69:d9:b4:0f:2a:a4:03:86:68:b4:81:ea:e3:87:db:ef:
5c:31:4b:a4:79:b1:35:4a:df:02:7f:68:1a:9a:f8:3b:f9:a4:
15:ee:55:64:d2:87:1e:97:32:18:a4:2d:98:ff:ec:b8:d3:a3:
a3:fd:79:84:6a:93:ab:49:e7:37:3b:e5:46:16:39:13:0c:1c:
f2:bd:aa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:46:42 2026 by rpki-client