
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
File: rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json)
Hash identifier: oxzJ4K/Zm+Z5T4WZOrs0hCO5oIrIJL4AZQEwvy0idGQ=
Subject key identifier: B7:36:CE:0C:55:C8:A5:0B:FE:81:3F:8B:3F:8B:CB:CF:A2:4F:71:2D
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Certificate issuer: /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial: 0248
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
Manifest number: 0236
Signing time: Sun 05 Jul 2026 03:08:45 +0000
Manifest this update: Sun 05 Jul 2026 03:08:45 +0000
Manifest next update: Sun 12 Jul 2026 03:08:45 +0000
Files and hashes: 1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: 2godH06a6lJKZJcQDQ+Stmd8W4LwGAlNewi8/dNxEgo=)
2: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NpABsuTNt3Of0zFwuT3M1C2R99zLqBty3uuQSGUzpfg=)
3: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: kgK3NjgQxpDJ05PetKW0f4eD4WtSWH7QBEKwm+5D1qk=)
4: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: tRTg+EzOsPEBd/CyA9yv6uVUIfA6399PeHgHdLPDFdI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 03:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 584 (0x248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Validity
Not Before: Jul 5 03:08:45 2026 GMT
Not After : Jul 12 03:08:45 2026 GMT
Subject: CN=6a49cabd-9754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:5a:4c:89:6d:0c:08:e6:f6:fe:59:24:30:
ef:63:c1:47:d3:d1:d0:0f:c4:29:30:90:ce:6a:cb:
0e:ec:13:0c:a9:00:27:88:8c:cd:dc:38:f7:40:a9:
6d:fb:77:42:45:b5:33:d2:ca:07:f9:84:dd:d4:16:
fc:1f:42:f1:a3:ec:2e:ae:16:79:25:1c:08:93:89:
3f:bc:26:1b:a6:11:b4:41:84:db:c3:16:64:70:4f:
30:a4:d2:25:9c:26:52:2e:e5:7b:98:46:f1:c6:5b:
6f:8c:d3:39:9d:45:e9:18:9b:45:82:59:8a:37:75:
04:e3:70:74:27:6a:f1:e1:28:de:c9:11:59:1d:d4:
3f:23:eb:56:4c:30:71:21:a8:bf:36:7f:c5:96:da:
bb:7d:29:06:2e:69:85:a8:d1:68:fd:95:2b:33:41:
df:f2:0d:3a:f1:de:45:15:33:c0:1e:d3:43:d7:5d:
16:d1:1c:b6:ff:94:13:78:7b:07:0a:55:24:0e:e7:
e0:54:34:ee:f9:7b:c7:09:ca:8c:5e:9d:6c:9d:64:
b1:31:41:f1:04:65:da:d5:24:6b:c0:4c:14:bb:39:
de:ff:14:d5:1f:d9:d7:da:77:85:ef:a1:2a:98:05:
eb:27:38:ef:93:10:ed:7a:e0:de:84:7a:5f:db:0d:
8d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:36:CE:0C:55:C8:A5:0B:FE:81:3F:8B:3F:8B:CB:CF:A2:4F:71:2D
X509v3 Authority Key Identifier:
keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:46:48:23:4f:cd:1f:94:8e:34:d4:4f:bb:6a:78:af:9f:ef:
f7:cc:f6:54:eb:bc:59:f4:ad:d9:38:4a:24:df:62:a9:c4:bf:
31:17:cd:f4:3d:84:8f:d3:b9:d8:70:68:21:1e:70:17:7a:84:
7b:66:7f:f0:2c:9d:0e:e1:36:67:5a:14:f8:e5:82:bb:9c:17:
8e:20:27:bf:cc:05:01:f7:0e:a5:eb:20:b4:d5:98:8e:31:20:
42:39:e0:c2:c9:18:fe:58:66:7c:81:33:c0:51:77:05:d9:32:
fa:d7:d7:6c:d1:55:33:e8:ce:39:bc:13:87:ef:12:88:1d:5e:
8c:b8:d1:89:89:b5:a4:f9:9e:b0:61:f0:3c:70:c7:14:8c:85:
38:6a:13:c5:b6:07:a8:47:80:e8:6c:c9:11:47:a3:bf:f4:28:
f2:cd:d4:47:c7:74:80:82:08:76:6c:46:06:24:0e:75:51:e5:
09:e5:e1:c7:af:7a:be:44:d6:a6:7b:c5:fa:50:e6:5b:5c:f1:
55:45:e7:f6:04:bb:45:ad:cb:ef:00:09:63:c0:ae:3c:b1:ee:
9e:71:fb:14:9c:1e:9a:27:03:34:ef:8d:e4:fd:d6:59:5e:3d:
29:8e:e7:a2:e2:1b:6b:a8:bc:61:b1:a7:e0:23:9f:3d:da:d5:
7e:89:56:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:22:20 2026 by rpki-client