
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
File: pYrazvnSRVOlVka1puvM6rGfL7w.mft (raw, json)
Hash identifier: A839Xqq3Bc9ZdqER0s5er5jmaZd6spzsAuT8I5Fpu68=
Subject key identifier: 11:DA:C3:E2:FB:8C:5E:A0:1E:EC:04:16:39:F8:D9:00:41:85:6F:11
Authority key identifier: A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
Certificate issuer: /CN=A9174C7A/serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
Manifest number: ED
Signing time: Thu 03 Sep 2026 06:35:03 +0000
Manifest this update: Thu 03 Sep 2026 06:35:02 +0000
Manifest next update: Thu 10 Sep 2026 06:35:02 +0000
Files and hashes: 1: pYrazvnSRVOlVka1puvM6rGfL7w.crl (hash: lWAV89k0zpIby2Rlo9lhSgqD1eIvy66BpdS6YXIWWJs=)
2: 8D052914404911F0A4BD357BC4F9AE02.roa (hash: MvcG4U91ksg21bFQHUycofyC3j8v7/vCU+cxxJzP/x8=)
3: 5B118C12986011F0A5423187C4F9AE02.roa (hash: alasAzOtWpleBKeTwTXbhQlKP6svXTD3Kr1GRXjNvNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl
rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 06:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174C7A, serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Validity
Not Before: Sep 3 06:35:02 2026 GMT
Not After : Sep 10 06:35:02 2026 GMT
Subject: CN=6a991517-8e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:ce:54:e5:5d:9e:e4:47:0d:c0:e7:da:cf:
15:a8:6c:cd:28:c4:b7:ea:81:e0:07:5e:f3:b8:02:
67:38:f1:10:22:e4:a0:5a:33:ed:05:af:4d:1e:1c:
4d:7a:96:7f:71:bc:b1:c7:3b:54:a0:08:07:e5:31:
be:1e:db:62:db:aa:1e:5c:1d:75:21:26:17:b5:01:
30:c0:80:66:c8:b7:f6:d7:33:64:cf:45:ca:d8:95:
d3:ff:64:c7:7a:cd:a9:65:53:68:ca:3c:09:c8:54:
fe:90:70:dd:f2:60:e0:2f:d5:03:ad:b8:f8:e5:42:
dd:ba:80:75:35:2f:5b:f4:53:3b:f8:75:4e:6e:bd:
85:6f:2f:4e:62:aa:92:8c:c4:61:52:bb:ef:be:e9:
93:54:3a:18:78:91:d6:d4:30:45:62:fd:4d:67:69:
0e:aa:2d:a5:f8:fb:57:87:d6:89:33:69:b7:fe:b8:
f9:3e:5a:3c:04:a5:6f:af:ce:1e:e2:b4:24:3b:2a:
d0:1a:f6:02:06:6f:38:c4:4c:05:44:65:ba:47:f0:
94:8a:82:ad:cd:db:70:74:89:99:25:89:2d:ce:ce:
5b:76:2b:2b:cf:b4:fa:c2:7c:0a:a1:20:22:f1:c5:
72:15:24:39:79:db:82:11:53:d2:a4:18:cb:10:ce:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DA:C3:E2:FB:8C:5E:A0:1E:EC:04:16:39:F8:D9:00:41:85:6F:11
X509v3 Authority Key Identifier:
keyid:A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:37:bf:50:25:78:97:33:70:14:b8:1c:7a:03:8d:c2:c8:98:
47:50:f6:44:8d:b6:6f:72:af:d2:54:68:aa:e4:41:48:62:1d:
46:f2:a0:4a:71:b5:30:dd:18:d0:5d:3d:f0:ba:d1:7d:dc:57:
1e:f0:f3:4e:e1:81:cb:c0:fc:a3:88:df:48:c2:0e:88:85:68:
16:9b:40:95:87:60:0d:a5:1e:73:e7:1a:d8:60:24:54:3e:5e:
75:0c:6b:1d:1b:19:92:2d:68:c4:9f:76:1c:6e:0c:04:85:9a:
52:88:85:b2:f3:0b:64:b8:6b:62:3c:0f:f0:22:84:ca:ac:07:
e6:29:ef:28:27:c8:7e:b7:b8:24:90:c0:c9:8b:2d:49:ea:7e:
3a:5d:ef:3c:8e:e4:85:80:ce:28:bf:48:ce:0e:b6:8f:b2:b7:
7f:34:52:b5:e7:c9:a2:f9:56:a9:7a:b1:20:97:a0:44:72:a3:
84:77:ba:14:9b:b0:40:de:c0:c2:5e:af:48:a4:08:1d:07:dd:
57:94:b2:52:ca:ea:8f:4c:55:2b:a0:16:95:af:2e:9d:af:4e:
b2:ed:9e:6a:36:ab:15:40:a5:b6:e5:ac:68:33:a8:b9:57:5f:
f5:83:df:5d:7f:c8:bf:03:c0:4c:5e:2d:2b:01:48:f2:5b:37:
81:b7:b8:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzRDN0ExMTAvBgNVBAUTKEE1OEFEQUNFRjlEMjQ1NTNBNTU2NDZCNUE2RUJDQ0VB
QjE5RjJGQkMwHhcNMjYwOTAzMDYzNTAyWhcNMjYwOTEwMDYzNTAyWjAYMRYwFAYD
VQQDEw02YTk5MTUxNy04ZTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvwbOVOVdnuRHDcDn2s8VqGzNKMS36oHgB17zuAJnOPEQIuSgWjPtBa9NHhxN
epZ/cbyxxztUoAgH5TG+Htti26oeXB11ISYXtQEwwIBmyLf21zNkz0XK2JXT/2TH
es2pZVNoyjwJyFT+kHDd8mDgL9UDrbj45ULduoB1NS9b9FM7+HVObr2Fby9OYqqS
jMRhUrvvvumTVDoYeJHW1DBFYv1NZ2kOqi2l+PtXh9aJM2m3/rj5Plo8BKVvr84e
4rQkOyrQGvYCBm84xEwFRGW6R/CUioKtzdtwdImZJYktzs5bdisrz7T6wnwKoSAi
8cVyFSQ5eduCEVPSpBjLEM5K8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBHaw+L7
jF6gHuwEFjn42QBBhW8RMB8GA1UdIwQYMBaAFKWK2s750kVTpVZGtabrzOqxny+8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEM3QS80NEYxNEFGQzQw
NDYxMUYwOUJGMEQ4NEZDNEY5QUUwMi9wWXJhenZuU1JWT2xWa2ExcHV2TTZyR2ZM
N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3BZcmF6dm5TUlZPbFZrYTFwdXZNNnJHZkw3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NEM3QS80NEYxNEFGQzQwNDYxMUYwOUJGMEQ4NEZDNEY5QUUwMi9wWXJhenZuU1JW
T2xWa2ExcHV2TTZyR2ZMN3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJDe/UCV4lzNwFLgcegONwsiYR1D2RI22b3Kv0lRoquRBSGIdRvKgSnG1MN0Y
0F098LrRfdxXHvDzTuGBy8D8o4jfSMIOiIVoFptAlYdgDaUec+ca2GAkVD5edQxr
HRsZki1oxJ92HG4MBIWaUoiFsvMLZLhrYjwP8CKEyqwH5invKCfIfre4JJDAyYst
Sep+Ol3vPI7khYDOKL9Izg62j7K3fzRStefJovlWqXqxIJegRHKjhHe6FJuwQN7A
wl6vSKQIHQfdV5SyUsrqj0xVK6AWla8una9Osu2eajarFUCltuWsaDOouVdf9YPf
XX/IvwPATF4tKwFI8ls3gbe4YQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:25:46 2026 by rpki-client