
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
File: pYrazvnSRVOlVka1puvM6rGfL7w.mft (raw, json)
Hash identifier: JHvkHJ0yyavg8PhC+WtwGvffi9XUKwFFcPd+tSaL1LI=
Subject key identifier: 5A:49:E0:90:B1:6F:BC:D4:9B:8E:C3:DD:7F:3C:74:32:37:05:18:1F
Authority key identifier: A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
Certificate issuer: /CN=A9174C7A/serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Certificate serial: D6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
Manifest number: D2
Signing time: Fri 17 Jul 2026 07:54:53 +0000
Manifest this update: Fri 17 Jul 2026 07:54:52 +0000
Manifest next update: Fri 24 Jul 2026 07:54:52 +0000
Files and hashes: 1: pYrazvnSRVOlVka1puvM6rGfL7w.crl (hash: /7ACAIyDwz0y/OmOZIMJyRhNF+AN9KfRvBpSaamPryw=)
2: 5B118C12986011F0A5423187C4F9AE02.roa (hash: Nv3VGs0s4nLweSbJ3JGcdt+LncTqoSFHEUO8LJ8JE2k=)
3: 8D052914404911F0A4BD357BC4F9AE02.roa (hash: HDAJrdViuU7kZQtbBcD9tgS1zcOCf1eCW5LDFit/g6Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl
rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:54:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174C7A, serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Validity
Not Before: Jul 17 07:54:52 2026 GMT
Not After : Jul 24 07:54:52 2026 GMT
Subject: CN=6a59dfcd-31b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1d:48:2d:a4:97:b6:5b:e6:83:c3:e2:e2:92:
2e:ba:aa:54:04:20:79:ef:4f:05:1a:23:0e:05:88:
61:c2:31:7f:75:ee:4b:c8:fa:f0:6f:56:dc:87:36:
97:2b:4c:47:64:76:be:82:ff:0c:d8:19:65:61:e3:
37:dc:a5:53:d5:63:7a:f4:ac:9d:5f:bb:7b:22:24:
63:a2:f5:72:54:fc:3a:6c:ce:1e:52:2c:8e:e5:4c:
70:13:4b:bb:97:96:64:7f:b8:40:c8:ac:ca:ad:94:
91:96:79:20:14:63:97:f6:c4:f0:f1:b5:c9:81:f5:
5b:f1:5a:bb:c0:37:b1:79:74:6b:b0:e5:11:e8:e0:
f0:2b:74:58:d7:39:f4:59:c0:e2:dc:3f:d0:b0:03:
74:69:6b:fe:67:9b:82:6d:25:46:39:6b:ca:c8:1b:
79:1d:60:58:e7:4d:20:a4:96:15:0d:46:19:45:bd:
2e:ce:d3:e0:bd:d5:f2:8e:21:47:4a:a2:68:a8:9a:
65:12:1c:32:70:1f:b7:03:f8:78:e9:4e:da:37:20:
10:0b:42:b0:ba:0a:74:4e:a1:b6:04:9e:48:b6:95:
bd:6b:5c:a8:23:89:c1:0b:54:b7:a9:46:47:51:66:
b4:0d:db:35:d2:da:88:a8:3a:08:a6:d8:fb:b2:81:
45:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:49:E0:90:B1:6F:BC:D4:9B:8E:C3:DD:7F:3C:74:32:37:05:18:1F
X509v3 Authority Key Identifier:
keyid:A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e7:66:2e:c6:de:fe:c6:35:ab:a1:d2:a9:d9:80:bb:06:7b:
87:34:86:7b:42:f6:0f:7a:39:03:c7:32:c0:a3:68:e9:05:19:
f6:6d:06:05:cc:e4:a9:90:6f:8c:d8:ba:41:63:3a:14:d1:01:
af:42:7b:7d:cf:2d:91:5a:bd:e5:b7:21:d3:79:43:e5:58:63:
35:f6:a5:07:f4:a9:7b:c7:f1:3d:74:80:77:a8:84:d7:41:03:
b8:e9:f4:32:52:b3:d3:a8:78:1c:70:7c:c2:06:54:b7:b8:1d:
48:e0:17:bc:10:43:95:2f:61:3d:86:bd:af:37:af:b9:9f:47:
6c:1d:09:c6:2f:12:4b:d9:58:e7:19:5f:26:e9:b3:c3:43:2f:
27:0e:d1:79:7b:32:d4:ac:f5:60:e5:39:9b:34:04:1f:8c:22:
12:5f:0e:52:09:97:d9:21:4d:cd:cb:49:59:3f:30:32:56:db:
50:3b:d7:d9:cc:28:e9:0c:36:3b:46:93:26:bb:b6:12:55:4d:
61:94:f4:a2:59:61:82:7f:ea:90:70:5d:8d:f8:ca:30:05:28:
21:9e:a7:7a:d6:c5:d7:de:7f:fd:c0:a0:59:d5:c5:e2:2e:6b:
7a:43:ed:f5:ab:06:7f:04:51:0a:96:f8:3f:82:25:cf:8f:ff:
56:81:3d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:12 2026 by rpki-client