
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/rYRGnC7Pu9ySonyb88f3Ok2lMHI.mft
File: rYRGnC7Pu9ySonyb88f3Ok2lMHI.mft (raw, json)
Hash identifier: JeVdo6yG5eEZZZKG7wcHnMkAw7/pwtMtTOGG2loTpz0=
Subject key identifier: CF:C7:72:FE:65:E6:BC:3B:9C:41:50:57:47:B5:DA:0D:05:25:E1:5C
Authority key identifier: AD:84:46:9C:2E:CF:BB:DC:92:A2:7C:9B:F3:C7:F7:3A:4D:A5:30:72
Certificate issuer: /CN=A918E84C/serialNumber=AD84469C2ECFBBDC92A27C9BF3C7F73A4DA53072
Certificate serial: 16
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYRGnC7Pu9ySonyb88f3Ok2lMHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/rYRGnC7Pu9ySonyb88f3Ok2lMHI.mft
Manifest number: 15
Signing time: Sat 17 Oct 2026 09:48:21 +0000
Manifest this update: Sat 17 Oct 2026 09:48:20 +0000
Manifest next update: Sat 24 Oct 2026 09:48:20 +0000
Files and hashes: 1: rYRGnC7Pu9ySonyb88f3Ok2lMHI.crl (hash: FOk/PGPo0TfuEpv3mgz9ZYDkm8vUgST6UtHgcvvLmQs=)
2: D6B9385EACC011F19308CC8D6511F970.roa (hash: u+DXYVjLCll7ilsoFengKrajZwvFgK6HVRL/3pZYwJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/rYRGnC7Pu9ySonyb88f3Ok2lMHI.crl
rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/rYRGnC7Pu9ySonyb88f3Ok2lMHI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYRGnC7Pu9ySonyb88f3Ok2lMHI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 09:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E84C, serialNumber=AD84469C2ECFBBDC92A27C9BF3C7F73A4DA53072
Validity
Not Before: Oct 17 09:48:20 2026 GMT
Not After : Oct 24 09:48:20 2026 GMT
Subject: CN=6ad34465-f319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:98:18:f0:20:1d:1c:a0:07:f8:07:e9:68:91:
0f:0a:fa:fc:bf:5b:e5:7f:df:97:00:bd:bf:0d:19:
a1:44:ed:ec:ce:be:9d:cc:c5:c4:46:e7:1b:eb:98:
35:e7:61:d4:23:63:c1:6e:06:fd:03:c1:d6:66:cf:
a8:19:ae:2d:d9:d1:52:c5:4c:ee:f3:f4:35:6d:b1:
76:42:34:84:14:72:e4:f9:37:8c:a1:2e:ca:2e:57:
c6:cd:07:88:99:73:25:e5:64:ff:56:96:18:04:e0:
3a:4d:b4:2f:17:1c:b1:6b:43:a6:4b:f8:c4:9c:4c:
f0:89:c2:d0:d1:25:50:d0:8d:dd:46:51:cb:cc:62:
e0:a1:c0:8f:86:c9:ab:7e:ab:01:e3:8c:68:04:c8:
b3:3a:dd:1e:10:6c:00:43:05:93:aa:aa:2f:45:b7:
a2:2d:5b:54:c7:7e:cd:f2:5d:61:b6:ea:fc:e3:6e:
7c:2b:dc:ed:82:86:30:79:5c:24:bc:cf:ea:68:a0:
65:09:40:41:c9:9b:c2:0c:82:76:70:e1:7b:e0:8d:
83:5d:0e:a0:46:ca:87:d5:ef:1e:85:37:4b:a0:5f:
b7:28:98:a3:2a:a1:cb:a8:8c:6e:92:c1:5c:7d:4c:
6a:95:1d:d9:05:cb:4a:b6:3c:28:27:c2:f4:5c:b0:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C7:72:FE:65:E6:BC:3B:9C:41:50:57:47:B5:DA:0D:05:25:E1:5C
X509v3 Authority Key Identifier:
keyid:AD:84:46:9C:2E:CF:BB:DC:92:A2:7C:9B:F3:C7:F7:3A:4D:A5:30:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/rYRGnC7Pu9ySonyb88f3Ok2lMHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYRGnC7Pu9ySonyb88f3Ok2lMHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/rYRGnC7Pu9ySonyb88f3Ok2lMHI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:20:6c:71:fe:01:3c:ad:af:a5:d7:aa:89:d4:53:a2:b6:72:
86:7b:d8:16:74:0c:17:67:90:54:77:bd:40:45:28:1d:35:28:
4c:6d:75:86:2e:36:1a:83:25:29:77:ef:7f:99:9a:a7:07:5c:
68:53:89:47:2c:e8:1b:70:53:a1:a7:c9:16:15:5f:ac:24:a4:
ee:15:f1:3b:b2:59:f3:d2:4e:77:ea:ad:c3:0a:8f:42:e6:1e:
db:c3:7c:5b:ff:a7:08:09:10:f3:dc:40:0a:74:1a:2a:33:1c:
45:91:45:f6:72:57:48:15:6a:76:f1:af:c6:58:e9:ca:32:5d:
3f:44:37:28:3f:a7:28:0e:86:ad:50:6b:68:80:7d:63:9e:9f:
ef:5d:32:39:67:cb:94:b3:31:0b:ed:b3:41:ee:3d:40:0e:7d:
a9:f3:71:1c:23:c9:4d:93:4d:32:4b:68:73:4f:18:56:65:57:
bf:24:58:03:b2:26:d3:15:86:d5:9a:d3:9c:ba:b5:2f:2a:cc:
15:9b:5d:86:f5:86:ae:14:2b:55:a8:9c:eb:4d:5a:66:14:15:
43:a1:39:fa:02:d4:81:93:b0:d2:0a:69:6b:38:63:40:b7:42:
2a:15:0a:b3:c9:5d:44:c2:0f:9a:b7:5b:67:8f:cd:52:a5:92:
72:1d:b9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:56:14 2026 by rpki-client