
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json)
Hash identifier: F4iZudCyvQ/U+fkmaIXwrPs9tY7bmptf1jLvy74mwRs=
Subject key identifier: BB:5A:CA:38:32:9D:B7:F1:4D:77:C1:CF:83:FA:23:A4:FB:5F:53:44
Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Certificate serial: 0527
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
Manifest number: 0517
Signing time: Mon 22 Jun 2026 23:44:03 +0000
Manifest this update: Mon 22 Jun 2026 23:44:03 +0000
Manifest next update: Mon 29 Jun 2026 23:44:03 +0000
Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: 4PaCyQOF30g2W/z3BI283MsNQprx2bwgbvFNkO9Je/M=)
2: FDFFD0D8FFFC11F0BE7B89863A6F56BC.roa (hash: ctyWpGsIE5EQesNkt+cSgGgPoPwdQaksbBOUuFK3Fho=)
3: 9CA1FC26FA7A11F0A1FE82F24D6F56BC.roa (hash: D7TWn4uVI/L44bR9jZY7LmPRQC44gxFuipaLGEVANoA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 23:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1319 (0x527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Validity
Not Before: Jun 22 23:44:03 2026 GMT
Not After : Jun 29 23:44:03 2026 GMT
Subject: CN=6a39c8c3-1e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:40:9e:71:be:a2:03:25:ad:11:0b:63:9e:
aa:4d:b4:59:84:be:90:fc:ba:1d:4e:31:64:13:09:
d0:de:92:36:24:29:16:9f:90:e5:01:f0:1d:da:2a:
91:b0:9e:bf:42:f2:c9:26:59:16:10:22:74:8c:7a:
d2:11:4e:34:a3:30:09:15:93:51:a0:64:f7:f6:b6:
db:2c:09:0a:a9:11:d5:90:7b:d2:89:68:17:62:ab:
8f:09:25:e2:0e:c6:ee:c5:2f:57:7e:77:e8:6f:8b:
79:0e:ab:d8:79:bd:85:de:5e:b8:55:31:ee:55:25:
00:cd:35:41:97:dd:ad:33:8f:18:19:5c:e7:a9:16:
b8:28:58:6a:c9:9d:51:8e:7a:9c:8e:fa:05:db:b1:
36:b9:86:bf:0b:0d:84:8e:7a:4a:60:7e:65:96:e9:
d0:d3:13:3f:5d:1e:c0:06:62:12:ee:b6:0a:35:b4:
5a:16:4b:1b:ef:22:89:6b:00:0d:e2:f3:13:39:dd:
91:91:22:2b:14:06:35:9c:e5:3f:9d:da:d8:f2:14:
36:9f:da:9a:94:5d:d3:74:ca:06:f8:9f:50:1d:59:
17:db:1f:20:a8:91:36:df:8a:95:8e:20:03:5e:d9:
a1:db:32:57:b7:e1:c0:e9:05:4f:2f:64:66:87:2f:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5A:CA:38:32:9D:B7:F1:4D:77:C1:CF:83:FA:23:A4:FB:5F:53:44
X509v3 Authority Key Identifier:
keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:1f:eb:ce:c5:8b:96:ce:78:95:81:6c:1a:4b:90:95:dc:69:
b4:a6:c5:10:28:bf:c2:0d:12:67:8b:45:4d:46:08:8e:b5:34:
b6:22:46:c4:87:f5:cb:d8:51:10:8a:f5:4a:2c:fb:eb:42:df:
4a:9a:55:95:48:90:56:d4:d5:8f:dd:34:fa:7c:de:99:06:af:
ab:e8:18:c1:81:47:91:39:b3:89:9d:e6:81:66:ba:90:f1:ea:
ac:ee:63:2d:a8:f5:a5:3b:5d:a0:eb:2a:93:4f:5c:7e:35:6b:
68:7e:d4:b7:c2:db:b8:54:c1:34:f5:f7:d5:cf:c9:73:f1:67:
8a:77:0f:c0:53:e9:4a:21:5d:c9:94:55:fe:ae:b5:09:9f:23:
cf:f8:95:e6:01:fe:c1:f9:53:f6:43:af:4c:98:06:a9:a7:1d:
8f:18:84:bf:e0:89:66:59:82:f9:af:fd:5d:4a:c4:0e:fe:d5:
8e:c3:e1:ad:45:80:0a:9e:a2:90:ac:07:35:0c:bb:0c:49:82:
8d:0a:45:b2:90:b6:9d:9a:95:50:c9:55:c9:77:f9:08:d7:f2:
ed:3b:12:bf:cf:f5:76:80:ec:e6:02:3a:f6:58:44:56:ec:49:
aa:be:19:22:df:21:35:2d:12:c2:e8:b3:ed:df:19:21:d4:1c:
7e:2e:66:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:08 2026 by rpki-client