
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
File: cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft (raw, json)
Hash identifier: 9cymYoXL45OIWXrSQmTjMuW1H8eZwXkUVu/Ow7my4NM=
Subject key identifier: 31:0C:A3:CF:6E:45:4F:CF:81:6E:64:F4:CB:84:3F:C9:29:24:8E:90
Authority key identifier: 71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7
Certificate issuer: /CN=A917174E/serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7
Certificate serial: 0F08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
Manifest number: 0F07
Signing time: Sun 04 Oct 2026 17:39:39 +0000
Manifest this update: Sun 04 Oct 2026 17:39:38 +0000
Manifest next update: Sun 11 Oct 2026 17:39:38 +0000
Files and hashes: 1: cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl (hash: A9hU4iu/8lb6acCTPNzDI24B7B7dg5SwMzNVv7Q5DdM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl
rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3848 (0xf08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917174E, serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7
Validity
Not Before: Oct 4 17:39:38 2026 GMT
Not After : Oct 11 17:39:38 2026 GMT
Subject: CN=6ac28f5b-3982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:56:ea:de:3d:0f:fb:9e:d4:a0:7b:8e:69:
a3:6f:fe:7d:f8:7a:01:c9:58:23:9d:03:0c:d5:4a:
a8:fd:ab:f9:d1:ce:de:96:ad:ee:eb:a6:ee:d5:23:
0b:b7:ab:c2:ab:22:48:0e:62:19:c1:90:9b:f2:d4:
4b:fe:df:e5:ea:88:88:e3:cf:a0:1c:a1:4e:67:54:
1f:68:1b:57:b9:44:45:6f:e0:c5:d8:93:bd:a2:24:
df:92:a3:72:f1:3e:ee:2a:b2:a8:ee:ce:aa:9f:38:
88:25:ab:b3:34:64:c5:b0:42:74:f0:6c:0e:75:5c:
aa:44:9a:b4:5e:d5:67:15:cb:2f:d1:81:ab:d1:96:
e5:71:ac:af:bf:26:af:00:1e:47:37:1f:13:ec:6d:
19:b3:37:9a:57:65:44:6b:dc:a0:36:b2:c8:8b:cc:
3c:01:51:27:b9:b5:f5:bc:4b:fa:ed:8e:76:35:32:
45:46:68:96:38:27:e4:a2:d7:aa:b5:1c:9c:5c:d9:
2e:74:14:ae:cc:9e:66:5c:13:12:c5:0c:ef:be:1f:
c7:b5:3d:d8:1c:d5:31:b8:20:1b:49:da:63:4b:41:
b3:c0:87:a5:09:50:1e:3a:46:6d:90:a1:7a:54:c0:
b5:00:d5:d2:61:59:d9:12:aa:d2:59:df:12:f1:61:
ec:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0C:A3:CF:6E:45:4F:CF:81:6E:64:F4:CB:84:3F:C9:29:24:8E:90
X509v3 Authority Key Identifier:
keyid:71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:49:f9:fb:c5:79:e2:f3:26:17:5b:cc:36:4c:a5:4f:fd:76:
74:2a:47:96:03:ac:13:ae:b6:95:24:10:79:29:79:67:1c:e7:
3d:35:e5:62:8b:af:88:c5:99:ec:46:68:21:0f:06:d3:d9:d1:
8e:f1:be:58:53:ce:f5:50:7c:35:58:8e:9f:d7:30:47:11:a9:
68:60:cb:ae:39:5a:35:be:ef:d6:49:bf:8f:1d:98:9e:e9:87:
62:cc:58:d7:06:4c:5e:e2:b1:4b:13:14:4e:ed:a3:7c:fc:44:
21:a2:9b:d4:a7:05:35:a9:b2:a1:83:6a:94:15:41:66:a6:4c:
53:b2:42:8c:dc:43:4e:55:71:eb:f9:6c:c1:88:fe:9a:d8:1d:
a1:15:92:f5:eb:f6:c2:f0:56:9c:36:75:1c:7d:da:76:b4:3e:
2b:d1:8b:90:cc:45:73:dc:15:10:39:b0:62:5f:6f:67:44:f5:
84:6b:3c:9c:84:7b:b2:96:5e:3a:d1:4c:98:7d:dd:6b:5d:e0:
24:2c:66:16:f4:e9:be:c0:55:e8:5c:08:d5:93:06:08:75:43:
77:50:5c:95:69:a7:c3:0e:7e:7e:c3:de:4d:7b:76:26:3f:73:
1e:cc:f2:bd:e6:e5:b6:a8:ca:cb:74:50:e6:c4:fa:fb:29:43:
0e:de:9e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:18:05 2026 by rpki-client