
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
File: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft (raw, json)
Hash identifier: e/VlA7TjPI5SdQ7WjqknXqgC5j5u8QnftvPiT8/MEI4=
Subject key identifier: 38:BD:9A:9A:AB:88:D3:08:79:D7:E1:69:4E:FA:1D:EB:2F:4E:DE:C3
Authority key identifier: 63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6
Certificate issuer: /CN=A914D0AF/serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
Manifest number: 054C
Signing time: Thu 21 May 2026 00:08:01 +0000
Manifest this update: Thu 21 May 2026 00:08:00 +0000
Manifest next update: Thu 28 May 2026 00:08:00 +0000
Files and hashes: 1: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl (hash: EpA7zIlmiwjw3fIDKr0W40iaUcE4i6gXpVdBG1fqZcY=)
2: F83346DA410211F097F43F85C4F9AE02.roa (hash: HlHozKQbiUgJEzpu3Hjn82lhGmduZGu23FAaPzM4W3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl
rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 00:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D0AF, serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6
Validity
Not Before: May 21 00:08:00 2026 GMT
Not After : May 28 00:08:00 2026 GMT
Subject: CN=6a0e4ce0-b194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:63:3b:9c:bc:4b:84:56:9a:3d:3a:9d:4d:24:
a6:df:91:e7:38:ff:76:b0:15:32:df:68:c1:f6:1b:
63:50:30:df:e4:1f:ba:b7:54:ce:c4:af:82:18:0f:
d8:49:0f:a1:18:44:03:28:5b:57:af:23:f5:b4:a5:
98:3d:14:71:ba:b9:22:55:0b:80:4d:37:7f:30:ff:
20:2c:26:a3:64:2b:ad:e7:27:7b:69:ae:a8:af:98:
04:ea:45:14:93:ad:51:a4:71:eb:5d:ed:b8:b1:ad:
58:6d:65:a9:00:79:ca:a9:90:c0:4c:79:9c:e8:39:
e5:64:24:95:8a:28:03:db:be:23:c9:78:28:11:55:
4a:bf:05:72:94:2e:6f:38:2f:6b:bb:ad:a5:c7:24:
cb:39:f7:9c:d6:e9:d4:b2:21:95:e2:85:0f:c9:71:
4d:46:fa:de:bf:8c:66:70:c0:e0:f2:72:69:bc:24:
e5:47:8f:3f:31:0f:1a:db:cd:e3:73:ae:fe:93:39:
b8:ee:70:bd:95:1b:e5:1e:21:95:92:3c:1e:93:db:
01:e4:6b:8d:bd:b6:42:e3:89:e6:04:4f:e5:3d:1f:
f1:e3:cc:7d:79:fb:e1:1a:55:20:5b:b3:42:1f:17:
cd:90:4f:de:9a:7b:14:b5:a3:6c:35:49:60:6e:5e:
06:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BD:9A:9A:AB:88:D3:08:79:D7:E1:69:4E:FA:1D:EB:2F:4E:DE:C3
X509v3 Authority Key Identifier:
keyid:63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:79:b4:e2:d3:e7:ce:0b:c2:0d:ef:30:b7:52:47:b2:5b:64:
4b:15:84:57:cc:70:bc:13:41:07:83:5f:9d:53:ab:c0:74:cb:
33:c8:e9:64:54:06:d9:32:d5:1b:03:b5:d0:7b:bf:83:5b:e5:
0a:31:71:a7:db:b3:25:dd:c5:59:5a:e1:b9:ec:e0:de:36:5e:
10:5a:51:15:c2:f1:28:89:05:4d:5f:9a:5f:0a:6f:65:c8:7e:
b4:bc:8c:7c:dd:94:ca:31:57:f4:f7:47:4e:20:dd:be:27:ab:
98:14:13:1a:86:8e:31:f6:80:70:76:23:2d:00:da:04:4b:7f:
a0:c8:7f:f3:56:19:6b:3a:50:9a:b2:35:af:9f:ad:3c:c8:ed:
70:f2:b5:b4:8f:c4:90:ac:b0:ce:4d:ab:71:1a:cd:65:7b:20:
73:b3:a0:be:b9:2f:26:2e:41:99:93:4e:7d:d8:42:48:87:27:
8d:83:4e:59:0b:62:66:99:28:18:99:59:11:f9:96:e5:ba:58:
18:b2:a9:0b:8d:50:1e:ac:fd:c5:df:93:b0:cc:43:a1:a4:85:
8a:06:17:c2:72:ec:02:77:63:2d:16:7b:a5:57:98:b0:1e:9d:
bb:ba:f6:9b:7d:35:ea:72:b4:f0:87:aa:d8:50:4e:05:b8:36:
ff:7c:26:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:54 2026 by rpki-client