
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft
File: RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft (raw, json)
Hash identifier: CkUDk326D7fuVCpg7TLKS6AS3BgdahsturUjfOStItY=
Subject key identifier: 9E:E1:16:E5:D9:2E:B8:72:A4:C2:1C:E1:0D:F2:D9:1E:7F:F7:F0:49
Authority key identifier: 45:8C:DD:CA:3E:8F:B6:4C:9D:1A:23:49:25:28:BA:77:7F:CD:D2:34
Certificate issuer: /CN=A9174589/serialNumber=458CDDCA3E8FB64C9D1A23492528BA777FCDD234
Certificate serial: 0221
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft
Manifest number: 0211
Signing time: Tue 23 Jun 2026 03:18:26 +0000
Manifest this update: Tue 23 Jun 2026 03:18:25 +0000
Manifest next update: Tue 30 Jun 2026 03:18:25 +0000
Files and hashes: 1: RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl (hash: vvXUhL46ttRDi3AWQlGx+Twd+a3eX+Gi3sAn4XRXEh0=)
2: 5D4FB6AA9AB711EE86E1D058C4F9AE02.roa (hash: seH3uLVyenLg2bSXDJ2MdCspTAAmDFjab4salTa2p94=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl
rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 03:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174589, serialNumber=458CDDCA3E8FB64C9D1A23492528BA777FCDD234
Validity
Not Before: Jun 23 03:18:25 2026 GMT
Not After : Jun 30 03:18:25 2026 GMT
Subject: CN=6a39fb02-1186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:d4:61:5a:14:f1:c2:54:47:19:68:ed:82:
e1:b0:80:83:65:d5:e1:ac:63:96:f3:1a:1c:bb:93:
f0:b2:8f:51:28:8f:c4:ae:ac:97:c6:e9:20:ac:db:
e0:1a:20:b3:b3:ad:d8:15:c0:9b:7f:89:a2:c1:ee:
cd:01:27:76:1c:9e:9f:65:94:6d:26:03:0c:c9:a3:
5d:6d:63:72:b6:ff:28:f3:41:1a:e1:4c:c2:31:c5:
59:60:4d:40:5a:b1:2a:cc:0d:76:7f:38:6a:70:c7:
50:d0:48:55:c1:26:16:c0:c6:28:89:9b:da:d8:3a:
f0:f5:70:a4:f8:bf:91:71:ad:5b:4f:04:03:0f:ee:
10:f1:00:dc:e2:3d:52:08:2f:c1:25:ad:a9:40:c6:
16:a2:aa:77:a8:39:15:bb:a5:99:87:c7:ee:a5:c4:
98:c6:6b:11:17:36:cd:cd:56:3f:20:9a:7a:0c:a6:
c1:29:3e:27:59:7e:05:a7:af:be:0e:a7:1b:4a:72:
26:b5:2b:70:00:4e:84:d7:45:7b:ad:e6:10:63:79:
4b:5f:be:23:11:b4:41:82:90:b2:fa:60:f5:6a:4d:
a5:a5:75:d0:e7:f4:4f:6d:83:b1:f1:62:79:d4:ee:
45:0c:ae:65:af:e3:91:68:35:0b:f0:80:7a:71:a9:
4e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E1:16:E5:D9:2E:B8:72:A4:C2:1C:E1:0D:F2:D9:1E:7F:F7:F0:49
X509v3 Authority Key Identifier:
keyid:45:8C:DD:CA:3E:8F:B6:4C:9D:1A:23:49:25:28:BA:77:7F:CD:D2:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:77:1d:f4:09:33:26:b6:2f:b2:a2:4f:06:45:85:50:28:a2:
97:52:bb:2b:9d:d5:98:f4:32:27:94:3e:bc:15:74:3d:3d:f4:
7f:33:70:ed:88:23:ab:51:31:66:86:f4:6e:3e:01:68:f5:99:
0e:90:30:1c:da:48:da:6e:5c:a1:df:9d:77:6d:cd:03:47:c0:
9f:f3:97:93:9e:65:18:8f:4a:e1:54:86:47:cd:be:ea:2d:29:
69:52:45:1f:22:d9:fc:30:88:83:b0:be:d6:0c:83:83:79:52:
67:25:2d:5b:96:90:a9:75:7c:a2:a9:14:71:a8:88:b0:5b:6d:
a9:4c:21:c5:c3:12:a3:15:7a:55:11:ba:d8:5b:68:f2:a2:f1:
26:8e:5c:67:3b:e3:97:69:30:01:8f:a6:26:5c:f5:3c:71:06:
c2:5f:ba:4b:c5:af:d9:3b:b0:28:8f:91:6e:04:2a:7b:b8:bc:
7d:3b:72:39:fe:07:2e:f1:8f:72:f3:80:81:82:71:2e:73:b1:
8e:a3:f9:f8:28:5e:5d:84:53:9e:ec:ad:30:b9:e9:df:85:3e:
66:d0:06:74:e2:c6:30:78:81:e4:7e:0b:5d:fa:8e:2c:46:2d:
36:f9:dc:c2:1e:4d:ef:3a:5c:6e:dd:82:a5:21:95:eb:99:3d:
9d:89:c3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:07 2026 by rpki-client