
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft
File: kY5yieKMGkkiojy1Zb2CG34gphE.mft (raw, json)
Hash identifier: dwhZCxEF/Gou0UOulDcMD0jwk5/ZnQbYvdcIr/2Gcqc=
Subject key identifier: 5E:54:31:9D:DC:25:5C:7C:49:21:E1:3E:EE:57:03:F1:F5:8B:66:52
Authority key identifier: 91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11
Certificate issuer: /CN=A9171B1A/serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611
Certificate serial: 0D91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft
Manifest number: 0D7F
Signing time: Tue 18 Aug 2026 18:11:14 +0000
Manifest this update: Tue 18 Aug 2026 18:11:14 +0000
Manifest next update: Tue 25 Aug 2026 18:11:14 +0000
Files and hashes: 1: kY5yieKMGkkiojy1Zb2CG34gphE.crl (hash: t3UnUWY1qTU0nTm9a71LDRWji1yTvvCQ9+FPA0CDa6c=)
2: 6E3B1338F41211E9AAF5924EC4F9AE02.roa (hash: X8sSkThLSb4fvyIS1pC23KDUjsj3Bu29OZPUHsBaV1A=)
3: 6D9433B0F41211E9AAF5924EC4F9AE02.roa (hash: Aw64/YmY/GSEcpV9lRNLIVB3nggqqcAVaMWqQLrAoig=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl
rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:11:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3473 (0xd91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171B1A, serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611
Validity
Not Before: Aug 18 18:11:14 2026 GMT
Not After : Aug 25 18:11:14 2026 GMT
Subject: CN=6a84a042-002b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:4b:24:c0:2f:7f:fc:ce:c3:c7:6f:5b:98:
1a:7b:f6:46:17:da:f8:9d:59:0c:0d:e9:cf:17:29:
7e:ce:60:de:05:9b:13:34:de:8d:bc:79:6b:25:66:
e7:e6:b0:06:7f:cc:55:23:5c:75:e3:b5:76:25:f2:
99:aa:0f:54:7b:1c:fb:eb:1c:7b:55:b7:3f:0f:cc:
81:fa:be:e4:b3:48:1e:02:45:1f:ed:45:f6:96:57:
83:6f:04:e4:c1:4e:15:fe:46:0b:c9:c5:c7:08:6d:
f7:f4:7b:10:e8:c1:e3:e6:b2:69:84:b6:f1:61:87:
de:ab:05:a1:e4:c7:48:2e:42:80:6f:4c:5c:17:ca:
77:81:0f:1c:11:8a:f8:ac:4e:01:30:4e:68:c2:35:
73:d3:17:b9:43:24:09:1b:ff:f1:a6:37:6d:f8:9f:
ed:9d:95:4f:10:45:b8:f7:9f:05:f9:b4:48:1b:09:
79:ea:aa:07:47:6c:5c:41:e5:54:15:1d:80:6a:e3:
01:ea:7e:2b:ae:30:24:64:2c:cd:ae:25:b7:34:db:
62:a0:5e:a5:c8:ab:e1:77:23:10:7c:b7:8f:ec:f1:
59:c9:db:59:8a:6c:18:7c:bc:dc:ad:dc:c5:a0:f3:
01:0d:d5:8c:8b:ce:20:9a:d7:e4:dd:14:8b:0f:44:
58:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:54:31:9D:DC:25:5C:7C:49:21:E1:3E:EE:57:03:F1:F5:8B:66:52
X509v3 Authority Key Identifier:
keyid:91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b2:f5:e6:8f:61:46:fc:c7:e7:18:06:eb:45:4b:a4:3d:94:
76:af:0d:0a:e0:71:56:08:aa:d4:36:c9:45:e0:c6:70:52:52:
05:1f:2f:1b:2a:ad:72:5a:d8:04:9e:f7:24:20:dd:25:44:8c:
61:41:ff:7d:a3:e3:13:17:58:d5:18:03:92:08:87:d4:49:bd:
93:e5:19:46:f7:6d:29:67:9b:d2:15:c2:34:88:38:4b:19:f0:
fa:27:da:bc:d4:c8:f2:3d:97:bd:3e:07:20:c9:6b:0b:8e:99:
f4:b6:25:50:7a:64:bd:e1:c2:2e:ca:99:5c:8a:87:85:dc:a7:
a4:96:8a:51:91:48:c4:f1:75:eb:c4:5f:e6:fa:bb:20:fa:e1:
89:c1:b1:e6:ec:99:02:02:19:f9:3c:69:4f:c8:35:64:ff:cf:
14:cc:5c:7f:b1:de:0a:90:22:24:c4:91:34:7b:c3:05:1d:57:
e4:1b:b8:c7:f1:69:76:ff:da:54:21:2c:17:48:49:4b:ee:1d:
67:b6:10:15:e4:86:b1:7e:ba:57:7d:e3:d6:45:0a:81:35:c3:
de:da:2d:9d:be:2a:c2:62:c2:86:81:1b:19:8d:f1:9b:e5:a5:
db:1a:85:5d:76:36:28:76:8b:10:81:e2:af:30:85:33:4d:db:
2c:84:37:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:03 2026 by rpki-client