
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
File: rkcY5fMvAEoDEv64aa3LvMTu5RY.mft (raw, json)
Hash identifier: fQQjdqZBjfAcAH058a8ZDHZgmEVACRzEgIXi9PNbh8A=
Subject key identifier: B7:52:33:6D:79:CC:25:D6:E2:6F:0B:5B:0F:F7:8A:4A:A8:FF:4D:DF
Authority key identifier: AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16
Certificate issuer: /CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516
Certificate serial: 0A05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
Manifest number: 09F6
Signing time: Sat 16 May 2026 19:48:38 +0000
Manifest this update: Sat 16 May 2026 19:48:37 +0000
Manifest next update: Sat 23 May 2026 19:48:37 +0000
Files and hashes: 1: rkcY5fMvAEoDEv64aa3LvMTu5RY.crl (hash: F3HS/PIXw3VECUimi2fX7NwUZiCcNPFB0Z/go1l9QjY=)
2: DF27F546D12D11EE9F451355C4F9AE02.roa (hash: 6QMDVSthddfqb1QrZW5I4wtYqanc1b5umweIX9kimlQ=)
3: CB91083CA63511EA900DB923C4F9AE02.roa (hash: kprOxi7yOOu/qaqTDcj+Kv/ZVavP691sQgk1g/w7hYw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl
rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2565 (0xa05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C185, serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516
Validity
Not Before: May 16 19:48:37 2026 GMT
Not After : May 23 19:48:37 2026 GMT
Subject: CN=6a08ca15-e61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4a:04:ab:7f:b5:dc:05:4f:26:0a:10:0c:3b:
59:3f:b4:e9:1d:dd:5d:35:0c:6a:2d:f4:71:0c:2c:
ae:38:8b:fa:83:3c:fc:8f:89:9f:d8:8e:fa:dd:c1:
78:d6:22:7f:e8:0a:0a:06:36:4e:94:9c:12:ff:97:
57:40:50:c5:ff:8f:64:1c:67:4e:5d:17:45:21:7b:
3d:fa:12:10:4e:d0:5d:4e:b4:8e:62:30:c8:b7:a2:
32:68:1f:a3:3a:53:e2:ed:5b:6e:1b:16:e5:00:47:
9c:73:a9:70:41:4b:02:34:0f:ee:29:8e:d8:b1:ab:
e3:b3:bb:5d:6f:8e:b2:48:0b:74:68:2b:c8:26:c9:
d6:66:4a:73:73:cc:2f:26:8f:ac:5e:19:a0:4b:b7:
39:5e:1c:b2:30:c4:ba:50:61:ce:94:ac:50:64:a0:
2b:63:2f:86:96:d3:ec:06:fd:d0:25:78:97:13:f4:
57:0f:9e:8b:b2:da:a6:0e:b3:c3:dd:51:af:c6:d6:
a7:ef:db:74:9d:ad:40:73:1d:ba:7b:f0:7e:b2:b4:
19:b8:c4:74:5e:b4:0e:81:ea:b9:67:c7:bb:4a:0c:
f3:31:e1:36:6b:28:b3:7c:38:45:8f:ec:52:9b:60:
5b:98:25:73:9a:99:de:d5:62:82:53:45:a1:48:00:
db:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:52:33:6D:79:CC:25:D6:E2:6F:0B:5B:0F:F7:8A:4A:A8:FF:4D:DF
X509v3 Authority Key Identifier:
keyid:AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:c1:41:36:31:10:37:1b:0c:ec:0b:56:0d:7a:24:ef:40:1e:
b5:cb:c4:01:41:7e:6b:69:35:97:73:de:fa:8b:18:c4:1f:11:
b5:3d:8f:2b:df:4c:b8:20:34:6d:8c:d7:80:86:d7:ab:b0:5f:
7f:fe:6b:a2:87:b1:a8:94:ff:64:e6:02:72:1e:ad:4f:42:d2:
dd:6f:28:4b:f1:cd:b6:12:7b:5d:e2:a1:cb:9c:47:32:75:05:
b9:43:59:8c:54:7b:43:25:b2:45:97:54:d1:5a:73:17:d3:ec:
93:64:23:34:ad:88:15:1f:e0:29:eb:59:eb:a2:03:3d:af:a1:
b7:8e:af:39:89:c9:8c:16:c5:66:77:a1:18:20:13:12:33:77:
c9:15:6e:5e:e5:56:fe:63:a2:ae:61:15:fa:c7:58:47:2c:22:
46:53:2a:2c:d7:9b:20:24:3c:62:e5:09:bf:46:95:5f:d0:2c:
ab:5b:93:81:c3:b3:82:6d:05:b1:66:0c:40:13:04:1d:24:df:
6f:e2:16:b8:cb:7a:69:63:c6:84:c2:99:e6:34:4a:9d:c3:84:
09:d7:69:1a:ea:ea:64:6f:ed:33:96:ec:a2:e5:97:e4:8e:f1:
c6:e2:76:43:65:06:bb:7a:9a:4b:fb:5f:0a:12:9a:8e:ab:1c:
a8:e5:4f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:02:59 2026 by rpki-client