
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
File: pYrazvnSRVOlVka1puvM6rGfL7w.mft (raw, json)
Hash identifier: F/VsZR/mbw8LF2bxbI9oIVwKwopIWAaGg4okuni9KJo=
Subject key identifier: 64:AA:B6:56:85:74:44:71:1A:5D:1C:C5:A3:72:3A:27:12:0E:6B:89
Authority key identifier: A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
Certificate issuer: /CN=A9174C7A/serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Certificate serial: 94
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
Manifest number: 90
Signing time: Sat 07 Mar 2026 06:44:56 +0000
Manifest this update: Sat 07 Mar 2026 06:44:56 +0000
Manifest next update: Sat 14 Mar 2026 06:44:56 +0000
Files and hashes: 1: pYrazvnSRVOlVka1puvM6rGfL7w.crl (hash: jQB5X5q2EICu4se8DBhRLlVvmuztRpOqBjYLQh2wJ8M=)
2: 8D052914404911F0A4BD357BC4F9AE02.roa (hash: HDAJrdViuU7kZQtbBcD9tgS1zcOCf1eCW5LDFit/g6Y=)
3: 5B118C12986011F0A5423187C4F9AE02.roa (hash: Nv3VGs0s4nLweSbJ3JGcdt+LncTqoSFHEUO8LJ8JE2k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl
rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 06:44:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174C7A, serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Validity
Not Before: Mar 7 06:44:56 2026 GMT
Not After : Mar 14 06:44:56 2026 GMT
Subject: CN=69abc968-a8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:7d:df:39:b4:35:33:ff:c7:3f:f6:81:c3:
d5:3c:e3:bd:05:74:3f:18:ef:db:2b:83:17:db:c2:
2a:c3:b5:c5:2d:e4:75:2e:d6:f8:42:6d:0d:0b:95:
6e:2d:65:bc:72:03:c4:0d:da:da:0f:1f:7a:f9:ca:
1d:7c:99:b7:ba:e7:33:74:a2:7f:1d:a8:2a:c0:d1:
70:6e:80:a6:39:6f:5b:6e:76:46:37:b2:09:99:d7:
e8:4f:c0:51:45:aa:46:4e:d1:8a:d4:96:c1:ce:dd:
b4:9b:96:fa:48:34:9b:5a:df:eb:d9:74:db:65:8f:
7b:14:d0:20:f3:56:a3:ee:47:4d:91:d7:2e:f6:a0:
03:af:29:26:df:25:9b:96:33:f0:0a:b0:ba:88:69:
5f:c2:b6:1d:fa:b1:eb:64:05:10:6d:6c:bc:7f:f6:
e0:f0:67:4c:8f:4f:10:79:0a:03:13:2c:6e:4f:ea:
72:00:40:ff:47:c8:d0:8a:9c:71:21:a9:cf:ce:cb:
ac:88:fe:28:7c:b0:6f:99:15:ae:0a:29:1c:20:9d:
7b:cb:92:db:d5:6b:cc:d9:0a:a4:82:c7:84:91:c2:
ca:fe:5e:f3:fc:df:c6:92:5d:78:23:02:c7:b0:ee:
a6:2f:ce:fe:f2:41:8c:7c:e8:eb:c3:50:5a:18:b4:
26:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AA:B6:56:85:74:44:71:1A:5D:1C:C5:A3:72:3A:27:12:0E:6B:89
X509v3 Authority Key Identifier:
keyid:A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:a3:65:da:ff:e8:b9:ed:31:7b:80:9a:c5:ae:c6:95:32:1b:
cf:d9:85:38:c4:0c:f7:d0:cc:2b:fb:10:70:a9:5b:27:63:f2:
7e:6b:0e:63:34:6b:e5:29:bf:19:81:3c:ef:36:5f:50:9c:e0:
19:5f:f3:d1:2c:a9:1b:4b:5b:82:49:bd:da:96:87:25:0e:86:
fa:f3:1d:14:0d:fc:43:cc:28:22:08:d0:b4:fa:be:45:b3:98:
1b:ed:7c:4c:83:b8:59:e6:b4:16:b7:ba:ff:3e:80:64:44:55:
1f:b0:77:9c:8d:cf:98:9c:9a:ee:d8:79:aa:5e:c8:1b:4f:d3:
7f:f7:e5:0c:1b:c4:e6:97:62:c4:63:77:94:33:ca:91:6e:ac:
f1:33:82:06:eb:db:f3:2d:aa:0f:7f:8a:9e:30:bf:43:fd:46:
73:ab:60:f1:07:75:19:89:f6:fd:2e:71:e3:b4:d8:8d:86:4e:
9f:d2:25:9b:2e:ae:40:f0:56:e5:30:25:75:b0:61:ee:34:86:
2c:a9:36:a7:ce:cf:a8:42:2c:74:2e:3d:0d:e5:d6:5a:d2:7d:
9a:fc:4e:95:f5:c7:79:be:5f:3b:b1:d3:2e:55:cd:b7:56:30:
c0:a3:10:2e:35:cb:d5:6d:55:87:1b:46:fd:bf:6a:2f:14:12:
38:81:ef:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 20:50:14 2026 by rpki-client