
$ rpki-client -vvf rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
File: SHy2MxcaDd84rLtq0e2K5pZVhgo.mft (raw, json)
Hash identifier: 7WNLtVGna/SJzETleXaFBHDMfXPTBit+/mpnHciawks=
Subject key identifier: BC:D4:30:DE:07:77:9B:29:AF:53:A7:83:48:10:D4:7D:01:97:75:1F
Authority key identifier: 48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A
Certificate issuer: /CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A
Certificate serial: 0286
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
Manifest number: 0280
Signing time: Wed 19 Aug 2026 02:26:53 +0000
Manifest this update: Wed 19 Aug 2026 02:26:52 +0000
Manifest next update: Wed 26 Aug 2026 02:26:52 +0000
Files and hashes: 1: SHy2MxcaDd84rLtq0e2K5pZVhgo.crl (hash: RAm+jv/PTEpkNJDPMkB12Df9C2eqdQMvzq2R8VceWFI=)
2: 96540A72CD0E11ED9A9CAE58C4F9AE02.roa (hash: VUhX4V+uuAXCvJJx8gbFvjg2DTFUtnIh9VNRCqvzwQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl
rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 646 (0x286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916899E, serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A
Validity
Not Before: Aug 19 02:26:52 2026 GMT
Not After : Aug 26 02:26:52 2026 GMT
Subject: CN=6a85146d-65c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:aa:7b:62:24:3d:7f:c7:44:19:8e:41:0c:
e5:92:f7:e3:06:e8:cc:88:95:00:45:18:88:be:41:
f3:da:d8:67:e2:aa:25:92:2c:70:b8:28:c2:da:7c:
89:7a:b1:4f:1b:bb:59:d7:66:e0:45:c5:4c:22:c2:
50:f0:b7:28:5a:a3:fd:53:87:e2:53:e7:83:b4:ec:
70:fc:9d:ec:23:07:bc:e7:48:d4:14:60:40:af:65:
3a:c1:6c:cf:a0:e1:68:01:ca:1e:65:52:28:11:96:
a7:29:e1:a5:fb:aa:34:84:0c:01:75:f0:c5:6c:b7:
0f:1a:46:14:67:3a:3c:4e:7e:a1:43:c7:d1:21:27:
4c:60:d8:4a:54:9b:44:5c:ad:f4:c3:fe:3e:01:15:
7a:70:e0:94:2f:f8:bb:19:c2:a9:44:4d:b6:e5:e6:
60:5f:fa:71:e3:3c:00:db:23:ea:88:75:1d:aa:54:
90:22:89:94:e8:89:94:ec:34:51:39:cc:39:f3:a3:
98:0c:8e:6d:84:c7:c5:75:fa:12:b4:72:3f:54:6c:
ef:a3:b8:8b:d6:93:93:18:cd:4d:2f:19:5a:05:93:
d9:cb:d0:5b:a6:52:ac:44:db:5e:dd:23:06:98:c6:
cb:74:0d:71:19:70:df:fb:e8:08:21:dc:62:f8:07:
3b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D4:30:DE:07:77:9B:29:AF:53:A7:83:48:10:D4:7D:01:97:75:1F
X509v3 Authority Key Identifier:
keyid:48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:51:2c:68:db:ce:d9:7f:02:22:ab:3c:07:00:eb:d9:80:55:
28:14:80:36:1b:b2:2a:4a:cf:51:7d:b3:3d:a4:49:48:c8:3a:
01:a9:c7:ce:2e:3f:f9:28:a8:39:3c:05:69:f9:ea:0f:c9:1d:
f7:2a:96:2f:e8:ec:2a:8b:f5:33:99:bd:8e:ff:e5:e2:fd:18:
53:15:8c:65:64:f0:60:9d:75:4f:26:0a:09:0a:c5:df:dc:cd:
ad:49:92:09:58:1a:28:de:8e:57:05:0b:0a:c7:bf:30:f7:ad:
0f:0d:2e:91:a8:c1:50:e2:3f:b5:0c:96:02:1a:4e:02:d3:fa:
01:3a:99:92:ff:7d:19:e6:0c:29:6d:1a:02:3d:83:d0:69:8d:
de:36:d1:c8:c1:0f:8c:5d:e6:f9:16:07:9f:a0:02:40:6b:da:
1b:ec:07:a2:37:eb:30:e4:0e:fd:ca:73:bb:5c:ab:4f:75:60:
7b:63:39:50:35:d3:07:9e:f3:90:e0:e8:fe:d3:8d:38:72:34:
c3:28:65:ac:94:c3:04:c3:0a:ee:67:a4:ca:24:2d:e3:ee:c0:
3a:8c:ba:84:a1:df:92:83:26:44:cf:c5:07:0f:00:ac:25:b5:
e3:46:57:db:8e:32:c1:29:0e:60:8b:22:05:05:b1:b3:01:8c:
1e:19:65:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:56 2026 by rpki-client