
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
File: pYrazvnSRVOlVka1puvM6rGfL7w.mft (raw, json)
Hash identifier: Y+LcJ8nAGbRAv0m1MKKX55y3XYqDhSFDsBaj88pCnho=
Subject key identifier: 4C:CE:83:5A:73:94:46:AF:F8:90:FF:6F:57:11:06:FD:4F:B5:DF:09
Authority key identifier: A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
Certificate issuer: /CN=A9174C7A/serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Certificate serial: BA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
Manifest number: B6
Signing time: Thu 21 May 2026 07:08:24 +0000
Manifest this update: Thu 21 May 2026 07:08:23 +0000
Manifest next update: Thu 28 May 2026 07:08:23 +0000
Files and hashes: 1: pYrazvnSRVOlVka1puvM6rGfL7w.crl (hash: uZY0h5lnqzttmMXKBjBJWdzUe54S4XhCriN67O7OBGI=)
2: 8D052914404911F0A4BD357BC4F9AE02.roa (hash: HDAJrdViuU7kZQtbBcD9tgS1zcOCf1eCW5LDFit/g6Y=)
3: 5B118C12986011F0A5423187C4F9AE02.roa (hash: Nv3VGs0s4nLweSbJ3JGcdt+LncTqoSFHEUO8LJ8JE2k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl
rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174C7A, serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Validity
Not Before: May 21 07:08:23 2026 GMT
Not After : May 28 07:08:23 2026 GMT
Subject: CN=6a0eaf68-a41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1d:7c:39:7a:f5:cf:c4:6d:26:37:5d:92:2a:
ba:cc:b4:d0:39:35:a6:d0:25:e5:99:9d:f8:0a:f0:
09:78:a1:1e:11:9f:e2:e3:93:28:c5:43:d2:43:e5:
b3:11:0b:61:8c:45:54:59:71:74:97:17:0c:b6:da:
68:95:40:05:b1:77:77:8f:57:00:23:a8:28:94:83:
16:68:4d:a6:c4:9b:10:f5:7a:f9:cc:1d:d3:a5:58:
f3:84:3e:2c:4e:fc:d8:4f:ed:fb:c6:f3:46:83:8e:
12:9f:61:6d:78:32:47:43:d2:7f:cd:23:fe:36:3a:
88:4f:27:52:4c:f9:3d:c3:b3:bc:e1:6e:68:3b:1d:
cc:7f:e0:78:13:3e:53:62:14:19:4a:c8:9d:99:b2:
c5:04:5f:1b:7d:10:dd:dc:5b:43:90:09:aa:30:58:
0d:bb:b3:cb:f4:b1:5d:ac:34:7a:34:b1:37:19:b9:
a4:24:b9:83:8f:71:3a:34:1f:ba:66:00:b9:ea:56:
69:62:24:d2:49:13:aa:6b:3e:9a:09:67:49:db:ea:
e6:08:3d:ee:d2:44:98:1a:19:fc:e4:b2:60:1d:41:
1b:f2:f6:eb:87:39:83:64:b9:3b:cf:0d:68:62:a5:
4c:11:5f:9a:d8:a3:db:31:21:36:22:2c:48:ee:f5:
63:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CE:83:5A:73:94:46:AF:F8:90:FF:6F:57:11:06:FD:4F:B5:DF:09
X509v3 Authority Key Identifier:
keyid:A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bc:df:2e:68:2b:c3:8a:a4:cd:aa:f8:e6:4c:21:07:4c:40:
21:78:5b:1d:e6:87:53:10:52:93:62:a3:e1:e3:cd:ca:3b:6d:
56:4b:dc:ef:94:0b:74:83:6d:bd:4e:5a:5a:81:be:09:35:1d:
5c:31:55:d0:f4:9a:d1:52:15:23:fe:be:4a:c7:76:37:c3:07:
99:96:33:e2:6b:e8:17:db:8f:dd:09:19:5c:02:d5:13:99:4a:
15:06:7e:05:5c:88:12:df:fe:51:f8:7b:3f:ec:ec:b7:45:76:
0a:f2:ff:c4:be:a1:14:03:35:42:ea:9a:47:88:7b:2a:dd:c5:
9c:15:ad:7c:35:8c:35:30:93:20:cd:27:c0:ba:b7:04:aa:93:
ae:d9:3d:67:cb:85:65:65:a9:99:e6:2f:b9:11:80:0b:73:e4:
6c:9d:63:2f:b2:0f:9b:d5:1b:74:36:19:cc:31:20:5a:b0:09:
5c:75:db:35:7a:32:8a:cf:20:53:ad:a4:32:c1:92:e6:23:c6:
c2:44:d2:0c:02:3e:65:45:db:c6:b9:5f:18:52:79:d1:b5:71:
13:20:80:cc:68:f9:5f:59:65:96:05:77:83:e4:c5:48:75:84:
18:68:95:5f:fc:44:b9:bb:ca:92:d7:14:a6:9e:68:00:8e:80:
01:93:bd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 13:24:19 2026 by rpki-client