
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
File: ny5XiO95WFurdhmHfTlierLl1Rk.mft (raw, json)
Hash identifier: vFpA6v/KioFk1fWIMBU3lLN2FSr+8pr7jNS4oAOHV5U=
Subject key identifier: E2:23:1B:54:05:56:34:DF:9C:F0:80:F0:5C:C8:C1:0C:41:82:57:A0
Authority key identifier: 9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19
Certificate issuer: /CN=A913A7A6/serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
Certificate serial: 0B1A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
Manifest number: 0B10
Signing time: Sat 10 Oct 2026 19:22:14 +0000
Manifest this update: Sat 10 Oct 2026 19:22:13 +0000
Manifest next update: Sat 17 Oct 2026 19:22:13 +0000
Files and hashes: 1: ny5XiO95WFurdhmHfTlierLl1Rk.crl (hash: vbb65Dl9beUz73JZm4/BcKAI8ONxyyTqMajVuhuwRaI=)
2: 4DAFC184ADC011ED897A4050C4F9AE02.roa (hash: v2saofmL0m7GfqQUIwDfIhLfQiWIxApSuK3jNuC63SE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl
rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 19:22:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2842 (0xb1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A7A6, serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
Validity
Not Before: Oct 10 19:22:13 2026 GMT
Not After : Oct 17 19:22:13 2026 GMT
Subject: CN=6aca9066-18ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:1c:23:8c:a3:04:06:6b:58:76:cb:40:ce:
1c:df:b6:53:bd:57:b9:45:df:28:f1:8e:ac:3d:7b:
b8:15:59:91:9b:26:b8:02:96:76:8a:52:3c:49:d4:
7a:dd:8d:e0:28:a1:cf:ce:5f:c5:bd:80:4d:b1:98:
f7:46:cf:1d:77:c0:4e:2b:ab:2e:ca:63:77:e4:34:
73:1c:f9:97:4f:9f:8a:3f:14:3d:55:6e:a7:04:4d:
45:9b:52:fa:75:cb:2b:43:48:c7:87:f9:c1:a9:f4:
d6:3a:41:49:44:36:6e:da:ac:c7:0b:2b:55:87:3a:
ce:01:52:f7:8e:d5:e1:33:5f:7a:f2:e5:4d:99:f7:
42:c8:46:20:0c:58:39:40:31:88:31:12:6f:80:89:
cb:61:7c:b3:ed:8b:2e:b2:36:8c:37:ae:1d:50:a2:
82:53:63:b7:20:2c:10:7c:3d:c8:b7:4e:b8:f4:2c:
67:76:5d:c7:23:ab:6a:d1:06:ff:7a:ea:c8:67:a4:
10:48:8c:ed:fc:52:35:35:be:8f:ec:a0:ba:84:06:
9a:ae:db:0b:81:4d:b4:5e:ae:a0:a1:57:af:68:74:
2c:96:9b:ac:1d:83:b8:77:c5:15:19:f1:73:af:04:
d9:a2:82:ba:ba:c4:cb:ab:23:7d:c9:8f:13:60:fc:
cb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:23:1B:54:05:56:34:DF:9C:F0:80:F0:5C:C8:C1:0C:41:82:57:A0
X509v3 Authority Key Identifier:
keyid:9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:b7:b1:f8:7a:8c:ce:32:f9:53:1c:82:24:74:42:3f:e7:34:
8c:30:ce:b6:d4:27:7a:b5:fd:51:d3:4e:13:60:fe:2d:ef:3c:
c1:5b:87:58:21:9f:e0:ec:90:6c:f9:5d:c2:ef:71:83:81:92:
a7:94:e7:bd:99:ad:46:8f:ad:aa:e4:b1:6c:0d:5e:a0:08:e3:
58:1a:a5:f2:3c:99:2f:f6:89:66:23:d4:a2:d6:fd:a0:f5:6c:
9d:ef:44:bc:c5:b0:6a:62:2a:f6:f0:e5:a4:22:fd:9d:90:49:
a6:f9:7d:9e:b8:4a:39:01:fa:9a:1c:c6:04:cb:de:f3:8c:50:
f6:4f:36:a9:96:e3:df:52:a9:a7:63:d6:34:20:05:6b:62:45:
d2:11:a0:20:66:ac:6a:3f:f2:60:58:66:50:43:c3:9f:0a:eb:
c0:28:76:b8:83:9d:1a:69:b2:39:b3:1e:c7:f2:a4:1b:99:35:
0e:d0:2a:1f:ed:24:88:f4:9d:ee:01:bf:57:aa:8f:fd:12:5f:
37:a6:51:13:c2:62:31:29:5d:21:a8:31:61:25:67:09:28:0f:
7f:3b:f8:c5:a8:57:bf:69:6a:74:77:7e:d3:21:1f:27:e1:42:
c6:7e:84:56:3c:b2:8f:51:f5:c3:53:ad:46:1b:d0:12:ca:39:
46:19:c2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:42:06 2026 by rpki-client