
$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
File: ry1FO-u_318ptjrBZ1THjRsPy4g.mft (raw, json)
Hash identifier: eXa/dn95PNK/emG7vW+lUqVsmLdmcabbE25bRgazjTI=
Subject key identifier: 90:18:76:7A:11:C4:75:BA:AA:EA:A0:D9:FE:90:80:83:81:FA:0A:AA
Authority key identifier: AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88
Certificate issuer: /CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88
Certificate serial: 0D29
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
Manifest number: 0D1D
Signing time: Thu 16 Jul 2026 18:17:03 +0000
Manifest this update: Thu 16 Jul 2026 18:17:03 +0000
Manifest next update: Thu 23 Jul 2026 18:17:03 +0000
Files and hashes: 1: ry1FO-u_318ptjrBZ1THjRsPy4g.crl (hash: yPNgdZzEWNIZbBk71JEg67ydztoSmoSaRD/XamZ5FnE=)
2: 157A1BFC59EE11EBA398AA0AC4F9AE02.roa (hash: Rdzf+qY0rc3ljoOiOxZKwXFF+npaW6qfoR/HzxroHsY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl
rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 18:17:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3369 (0xd29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91557BA, serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88
Validity
Not Before: Jul 16 18:17:03 2026 GMT
Not After : Jul 23 18:17:03 2026 GMT
Subject: CN=6a59201f-9c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bd:cc:7b:b6:c2:db:59:10:3e:98:e2:8b:d1:
45:39:95:da:75:39:ab:f6:04:eb:23:e1:03:78:13:
01:bf:9f:da:d6:77:60:92:4f:93:18:dc:e2:1b:8d:
9a:4a:06:98:0e:4b:1f:62:e0:89:c3:0c:c4:bd:90:
64:5b:de:37:e5:e0:96:5e:5a:19:64:79:33:ce:ce:
53:ca:d6:ff:9e:d1:ed:a4:fb:1b:a9:81:3e:c2:a7:
67:82:5c:2d:04:d8:a8:21:ba:ce:45:de:6d:60:27:
39:b8:fc:ac:71:db:d6:b5:50:6e:14:28:78:7f:2a:
32:e8:3e:26:f1:3c:d7:b7:b2:24:d2:fd:25:f2:e2:
e1:f5:98:0b:8c:68:e3:02:08:56:b2:ef:ff:7c:87:
52:be:08:ef:f2:d5:e7:2e:f5:08:d2:2f:6a:a8:a2:
29:39:ef:07:c0:1c:62:08:a8:bf:33:b7:49:50:88:
ce:eb:38:fe:1e:8c:a9:6c:39:e7:5c:2b:85:91:92:
30:ae:1e:ed:3c:05:63:d9:06:a1:0e:d2:35:71:30:
e5:43:c2:d2:65:23:98:bf:ad:fe:ed:c5:e3:9a:cf:
ea:5b:1d:20:d3:7f:e3:96:38:d5:13:07:c8:bc:ec:
7c:94:86:0b:70:be:2f:0c:8b:7b:60:95:b2:45:c6:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:18:76:7A:11:C4:75:BA:AA:EA:A0:D9:FE:90:80:83:81:FA:0A:AA
X509v3 Authority Key Identifier:
keyid:AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:c6:2a:6e:e8:22:55:93:6f:77:87:e8:ff:08:ee:38:69:b6:
54:57:ca:e9:63:8d:21:db:91:c1:4e:44:5a:51:a7:09:5b:ab:
03:b1:33:d1:fd:bb:6e:4e:d5:07:37:fd:a7:be:9a:5c:b2:6b:
0c:0b:14:3f:77:2f:25:1b:94:e3:8b:ad:09:7a:3f:26:7d:27:
00:f3:a4:81:d3:a1:a4:07:af:66:27:b8:78:22:93:8a:40:ed:
62:bd:3b:bd:ab:4d:99:8c:7f:f5:ae:8d:87:5a:d0:9c:ae:60:
a8:86:5a:46:30:8e:83:c5:b9:95:86:fc:96:87:d3:c7:4a:ae:
79:14:17:39:e0:0f:0f:72:fe:e7:9e:2c:48:41:5b:2d:e2:ca:
10:58:9b:14:b9:4a:30:66:0d:2b:0f:9b:b3:d0:2a:31:cd:ac:
2d:39:2f:3b:c3:8a:be:d8:d6:90:54:fe:c6:f6:8f:8c:83:79:
ef:a0:b7:01:1b:5a:d0:f6:10:98:40:a5:93:e5:3e:7b:d3:0c:
38:32:13:6c:c2:b9:0d:9b:f2:8e:d4:2c:c0:da:72:7d:fb:a0:
e6:91:45:d0:25:5c:45:a7:68:65:ae:37:1e:4a:f6:a1:59:c0:
75:48:ea:1b:74:f0:65:49:2d:33:65:f0:f2:b7:69:2c:a7:4f:
61:af:ca:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:27:15 2026 by rpki-client