
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
File: 7Yy8VM2G8sH5LexryQnbxvpjTIE.mft (raw, json)
Hash identifier: Pa6Iv2mf+mWzt6Esb7zFn0eynB2x9xIXIW2gGKbCIXg=
Subject key identifier: C9:B1:6E:CB:E0:D8:6E:7C:00:50:F4:02:3A:04:BC:7C:30:D0:26:E4
Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81
Certificate issuer: /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
Certificate serial: 08DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
Manifest number: 08CC
Signing time: Thu 10 Sep 2026 20:25:56 +0000
Manifest this update: Thu 10 Sep 2026 20:25:55 +0000
Manifest next update: Thu 17 Sep 2026 20:25:55 +0000
Files and hashes: 1: 7Yy8VM2G8sH5LexryQnbxvpjTIE.crl (hash: 1V6QVj4goArSMBcoFwvW/zjJ+Zvk0YV48XMitoLTudA=)
2: C130A016889811EE8EB03D6EC4F9AE02.roa (hash: 7CKAHE1RnwK/9G3CYREp8rErazcPgvU0b3JJFy6BhKQ=)
3: 7ABD27E4889811EEB99AD46DC4F9AE02.roa (hash: AwaKj2bJ0MEMMJtVjo28ChJ/Km9jzVAOhn+Y3iz/dAA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl
rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 20:25:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2271 (0x8df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A3E6, serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
Validity
Not Before: Sep 10 20:25:55 2026 GMT
Not After : Sep 17 20:25:55 2026 GMT
Subject: CN=6aa31254-6bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:68:12:89:ba:d9:35:c4:8a:92:d3:4c:e5:
7e:79:13:3e:de:c9:54:83:31:91:b4:1f:90:e7:58:
3e:d2:e3:0e:74:50:92:c5:3a:1e:ae:73:cd:ce:aa:
1e:3e:74:8a:12:37:7b:6a:7e:68:da:25:b3:c3:d3:
9f:70:20:61:01:f5:c4:ca:db:0d:20:8a:fc:5d:df:
db:ab:a9:95:fc:ac:7d:04:7b:f0:1e:98:f6:01:1a:
ea:2b:6c:f9:98:31:ea:13:45:14:31:0a:f9:f8:41:
d2:4c:9d:2d:17:32:d3:15:58:8f:32:0b:05:d3:ab:
e2:b9:a0:83:83:2b:17:c0:ae:e8:c4:e3:4d:ea:4d:
e9:92:bf:03:d4:49:e3:9c:52:a1:55:3a:cd:56:f2:
a9:76:f9:c4:18:3e:dd:74:45:61:9b:13:01:ed:ea:
f4:71:42:99:9a:3c:9a:97:bd:d5:eb:c3:e3:28:d5:
b8:1c:38:59:32:25:b8:43:62:82:77:3b:15:8f:98:
97:dc:b1:e5:ea:1c:ee:63:12:1d:e5:7c:9f:14:9a:
62:ba:41:c0:a5:be:e3:be:61:1d:b4:35:b5:80:7c:
36:40:23:6d:58:e6:32:0f:23:5b:27:67:69:6e:7d:
54:db:cf:fc:08:2a:f1:b7:b1:e6:d2:03:fd:d4:a9:
4a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B1:6E:CB:E0:D8:6E:7C:00:50:F4:02:3A:04:BC:7C:30:D0:26:E4
X509v3 Authority Key Identifier:
keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:df:fd:c4:fd:ba:a3:23:89:4e:c9:25:20:81:05:e0:d7:a8:
1c:1c:8f:ee:71:ef:e2:45:f2:8e:6d:33:28:69:5d:51:d8:9b:
7e:65:00:d1:c6:23:6b:44:2d:47:d9:26:8d:98:fd:f3:0a:86:
80:3d:69:5c:03:ef:b2:29:66:44:6e:fb:f5:c7:a8:53:ea:d3:
15:1f:51:40:42:41:99:82:4e:53:3d:6d:1c:52:ba:83:4a:66:
aa:ec:78:c5:db:66:8f:47:e9:88:db:5d:61:15:0b:71:71:8b:
42:f0:81:84:54:56:68:f9:69:38:b6:21:ca:89:d2:73:01:7c:
82:89:8f:54:fd:da:4b:9c:bb:52:66:ee:ab:35:b9:35:72:d2:
51:72:ab:54:e4:d0:c9:82:7c:6f:51:c0:5f:e4:dd:0a:48:a4:
ce:3a:35:b3:f8:62:c4:a0:7b:2e:d9:ca:f0:76:f4:41:5a:e3:
17:24:59:cd:6d:d3:32:af:28:50:10:e4:21:30:14:41:f8:48:
9c:6a:64:b3:d8:6c:f9:5c:78:04:7b:6d:b1:6f:e3:c8:6e:ae:
7b:22:3d:c3:e8:2e:65:e3:e1:72:33:93:1b:e0:68:60:c0:2b:
53:6b:67:f7:d4:d2:91:da:4c:a3:42:cc:9f:f2:c6:15:35:07:
63:6f:74:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:53:18 2026 by rpki-client