
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
File: fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft (raw, json)
Hash identifier: izSHphL/DlN/U2SCD8DPk6yowGBnUE/r2vsDU+22Ung=
Subject key identifier: A7:97:27:2B:21:FE:72:D4:2F:96:95:DA:63:0C:67:D4:47:C4:71:74
Authority key identifier: 7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77
Certificate issuer: /CN=A9159309/serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
Manifest number: BF
Signing time: Fri 17 Jul 2026 08:11:21 +0000
Manifest this update: Fri 17 Jul 2026 08:11:20 +0000
Manifest next update: Fri 24 Jul 2026 08:11:20 +0000
Files and hashes: 1: fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl (hash: j/zKMLVOEudjK9snjakoKnLM9L6Wo7YJ9adIsyF4md8=)
2: 21C5B04263A311F096468248C4F9AE02.roa (hash: ZAT1gq4fsyyEvWAh5Wb9WrqtHt9uUHF0Lm9+fNRhxOc=)
3: B32DFBA0613E11F0807A9A39C4F9AE02.roa (hash: znQCSmWYjAzJ99g/MnFKRiPRCuuveVvzPYPlkOv1NBM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl
rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159309, serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
Validity
Not Before: Jul 17 08:11:20 2026 GMT
Not After : Jul 24 08:11:20 2026 GMT
Subject: CN=6a59e3a9-f785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f3:4b:72:c3:ce:c2:e8:e1:2c:62:5a:c2:51:
8b:5e:c3:a5:92:e1:60:9f:ed:8b:63:19:9c:80:73:
69:45:34:6b:75:97:98:a3:55:74:a4:eb:1f:62:45:
7b:21:72:11:10:0f:f7:22:ec:f8:77:42:8d:41:29:
9a:90:88:52:89:4c:13:55:bf:45:5b:59:ec:9f:23:
15:e0:67:76:3a:09:ad:69:e8:a3:af:28:77:a2:f5:
00:72:e2:39:37:28:b6:d1:1a:6a:ed:9e:92:1f:24:
e7:82:97:bf:0d:a1:c7:61:d2:9d:c5:2c:49:09:a0:
4c:f5:ed:94:e1:3b:c0:99:fb:15:74:7c:97:f0:0c:
d2:d3:59:b7:0c:41:e4:ad:99:78:cb:7b:d5:4d:27:
61:69:d5:a3:e4:47:1e:42:24:e8:6e:e1:b5:38:07:
2a:d6:5c:48:8f:40:ae:8e:a1:ec:13:45:d4:15:fa:
c9:60:56:58:a6:d7:fd:99:f1:72:6e:c0:ab:d7:64:
ee:79:24:06:e9:c4:f1:b4:a5:69:b4:d2:32:55:19:
a3:ee:eb:df:15:5d:2a:a2:31:d5:91:e2:91:e1:21:
f3:ea:a6:b4:ff:57:c3:32:19:43:ba:2b:2e:21:08:
3e:02:d6:fd:bb:bf:cc:b6:71:a8:f8:2a:ee:e7:95:
39:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:97:27:2B:21:FE:72:D4:2F:96:95:DA:63:0C:67:D4:47:C4:71:74
X509v3 Authority Key Identifier:
keyid:7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:f2:7e:4e:83:26:7e:02:98:7e:22:d8:bd:2f:33:8c:9c:84:
91:90:3c:07:10:8f:df:f2:78:6f:43:27:66:7c:bb:fe:06:bd:
fa:37:09:84:2b:c0:5d:ff:ee:b5:2c:43:3c:5a:f0:c7:e0:8f:
e1:e0:dd:04:ef:3b:8b:93:82:8a:54:0d:b6:73:56:6c:21:4b:
58:68:56:a6:26:9b:3a:da:fb:00:04:9a:39:85:0e:9b:38:5b:
69:ff:26:ce:ca:b4:90:3d:22:d9:db:74:41:ce:bc:78:b8:1d:
d7:e2:18:e5:4c:2f:70:1a:af:93:41:bf:4f:73:de:dc:82:a9:
94:9f:96:9a:21:27:8c:c1:3f:55:68:89:5c:e8:76:1f:6e:7e:
e7:8f:6f:1d:df:75:52:c5:c5:54:6f:ff:ad:2d:f3:70:56:0d:
03:95:9c:74:87:aa:c8:82:f5:76:21:a1:3c:11:e8:46:cc:e8:
78:05:09:ed:b6:16:50:3c:b1:96:4b:0f:c7:71:4e:5f:19:8c:
37:f5:84:77:9c:55:aa:0a:b5:e1:ce:8a:00:5f:a7:d3:9f:87:
1e:7e:38:3d:01:a2:75:30:38:4a:8a:1f:bd:90:59:e4:b6:5c:
d4:7d:96:88:5f:a5:72:56:3d:73:c5:b2:64:f1:dc:90:98:47:
82:ae:06:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:32:27 2026 by rpki-client