
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.mft
File: RyCit4x4I5km_e5zRKNoDaDYBx0.mft (raw, json)
Hash identifier: Q6yHNR5tIRbk6dbmAXVfH8+FfWQyKVyW8Fy9JLT8/8Q=
Subject key identifier: 27:73:7F:CB:92:F6:1D:48:89:EA:6C:3D:A6:46:DD:AC:73:42:9A:89
Authority key identifier: 47:20:A2:B7:8C:78:23:99:26:FD:EE:73:44:A3:68:0D:A0:D8:07:1D
Certificate issuer: /CN=A91972DF/serialNumber=4720A2B78C78239926FDEE7344A3680DA0D8071D
Certificate serial: 017C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RyCit4x4I5km_e5zRKNoDaDYBx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.mft
Manifest number: 0168
Signing time: Wed 09 Sep 2026 05:08:59 +0000
Manifest this update: Wed 09 Sep 2026 05:08:59 +0000
Manifest next update: Wed 16 Sep 2026 05:08:59 +0000
Files and hashes: 1: RyCit4x4I5km_e5zRKNoDaDYBx0.crl (hash: 7wXoxAXOTVjXTTu9t1q49qazDoJ2HUq2crwIJAELipM=)
2: D2D7B762995611EFADA5D754C4F9AE02.roa (hash: uC7UgU3WUyp6lo8+x5BnzjYje46EFX3E65V33NxoTHM=)
3: 003589503F8311F0AA4DF254C4F9AE02.roa (hash: DKnLp31Pt39zKxYHan0L0UpjSQtw5gIheDfF7NmRFzQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.crl
rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RyCit4x4I5km_e5zRKNoDaDYBx0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 05:08:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91972DF, serialNumber=4720A2B78C78239926FDEE7344A3680DA0D8071D
Validity
Not Before: Sep 9 05:08:59 2026 GMT
Not After : Sep 16 05:08:59 2026 GMT
Subject: CN=6aa0e9eb-aa39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:54:8e:86:33:ab:94:8f:cb:ce:52:71:a8:40:
0c:65:70:c0:2b:fb:42:94:99:a8:89:40:b5:80:7e:
68:ac:4c:98:a5:93:5e:2e:55:64:36:77:14:01:99:
86:2f:15:8e:be:6f:e1:92:d7:fa:e2:cf:5a:60:79:
37:a7:32:69:be:b5:00:ad:5c:d3:ba:a5:42:2c:fc:
5c:31:69:4a:4f:4b:ae:3b:26:9a:77:de:52:23:d8:
d5:03:4a:c9:5d:6d:1a:96:58:46:d3:d1:0e:6e:29:
a2:4d:1f:e3:9f:89:d8:ab:8a:af:43:f2:b8:1c:33:
7f:77:64:8a:fb:c7:98:c2:65:a9:20:2b:fb:04:3a:
03:91:09:77:67:0d:a5:74:ed:d6:4d:00:5c:80:c2:
56:83:a6:8e:ec:7c:6c:ca:18:19:a7:5b:f8:a0:ba:
ab:d6:ac:63:c2:ad:d3:e1:35:d3:7f:b3:8d:67:9b:
63:3f:1c:b5:37:ee:dd:4b:e0:a6:7c:74:d9:07:91:
93:64:8c:18:8a:28:d4:05:9c:4f:cd:77:55:ec:0b:
95:d8:a1:d3:01:d0:f4:b8:93:72:02:a8:29:4e:d2:
08:fd:88:52:b8:53:ea:82:60:38:02:94:19:43:b5:
38:cc:e1:38:a8:e0:3e:90:61:81:ef:9d:7e:2b:07:
c7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:73:7F:CB:92:F6:1D:48:89:EA:6C:3D:A6:46:DD:AC:73:42:9A:89
X509v3 Authority Key Identifier:
keyid:47:20:A2:B7:8C:78:23:99:26:FD:EE:73:44:A3:68:0D:A0:D8:07:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RyCit4x4I5km_e5zRKNoDaDYBx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
de:29:86:9b:9a:89:be:4a:b2:97:a3:66:af:9c:8c:1a:74:02:
60:f2:6f:3a:3b:df:92:2a:21:d0:b1:97:ec:96:c1:85:08:72:
83:8a:bc:53:84:ba:ca:8b:de:d1:e7:8a:17:74:b0:c6:79:b6:
03:21:57:21:d2:7e:b7:8e:ab:d1:38:93:a7:f6:46:91:2c:be:
f6:b7:8c:e2:b4:40:f3:9a:c0:30:87:0f:7e:da:c9:57:01:16:
ab:e6:d4:cc:da:b9:e3:d6:69:01:51:f7:09:35:2e:ed:57:65:
df:4d:9b:86:07:65:2a:28:b4:eb:ea:ee:fb:e2:43:58:44:4a:
77:a3:f3:70:e8:d8:9c:ce:6b:80:70:cd:90:a1:b9:9e:59:62:
8f:18:d2:9b:2b:86:8d:a4:49:55:44:a3:74:ae:46:47:c9:a5:
99:a6:07:5d:1b:d6:c1:0c:a0:07:52:da:77:f1:35:0b:71:63:
c6:4a:cb:b8:8e:aa:95:46:ba:fe:c0:d0:1c:40:65:cf:51:2c:
43:19:23:5b:9a:3a:8c:75:df:e5:bc:c7:08:fd:0c:dc:87:62:
2c:3c:14:55:6a:eb:57:85:61:2a:a7:b6:bb:21:77:19:d5:8e:
c3:1e:89:33:62:86:5b:04:67:72:95:76:54:c9:0a:87:03:c9:
de:5d:f4:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTcyREYxMTAvBgNVBAUTKDQ3MjBBMkI3OEM3ODIzOTkyNkZERUU3MzQ0QTM2ODBE
QTBEODA3MUQwHhcNMjYwOTA5MDUwODU5WhcNMjYwOTE2MDUwODU5WjAYMRYwFAYD
VQQDEw02YWEwZTllYi1hYTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1lSOhjOrlI/LzlJxqEAMZXDAK/tClJmoiUC1gH5orEyYpZNeLlVkNncUAZmG
LxWOvm/hktf64s9aYHk3pzJpvrUArVzTuqVCLPxcMWlKT0uuOyaad95SI9jVA0rJ
XW0allhG09EObimiTR/jn4nYq4qvQ/K4HDN/d2SK+8eYwmWpICv7BDoDkQl3Zw2l
dO3WTQBcgMJWg6aO7HxsyhgZp1v4oLqr1qxjwq3T4TXTf7ONZ5tjPxy1N+7dS+Cm
fHTZB5GTZIwYiijUBZxPzXdV7AuV2KHTAdD0uJNyAqgpTtII/YhSuFPqgmA4ApQZ
Q7U4zOE4qOA+kGGB751+KwfHYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCdzf8uS
9h1IiepsPaZG3axzQpqJMB8GA1UdIwQYMBaAFEcgoreMeCOZJv3uc0SjaA2g2Acd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJERi8yN0UzRURBNDk4
MzMxMUVGODMxODlBNTdDNEY5QUUwMi9SeUNpdDR4NEk1a21fZTV6UktOb0RhRFlC
eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1J5Q2l0NHg0STVrbV9lNXpSS05vRGFEWUJ4MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzJERi8yN0UzRURBNDk4MzMxMUVGODMxODlBNTdDNEY5QUUwMi9SeUNpdDR4NEk1
a21fZTV6UktOb0RhRFlCeDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA3imGm5qJvkqyl6Nmr5yMGnQCYPJvOjvfkioh0LGX7JbBhQhyg4q8U4S6yove
0eeKF3Swxnm2AyFXIdJ+t46r0TiTp/ZGkSy+9reM4rRA85rAMIcPftrJVwEWq+bU
zNq549ZpAVH3CTUu7Vdl302bhgdlKii06+ru++JDWERKd6PzcOjYnM5rgHDNkKG5
nllijxjSmyuGjaRJVUSjdK5GR8mlmaYHXRvWwQygB1Lad/E1C3FjxkrLuI6qlUa6
/sDQHEBlz1EsQxkjW5o6jHXf5bzHCP0M3IdiLDwUVWrrV4VhKqe2uyF3GdWOwx6J
M2KGWwRncpV2VMkKhwPJ3l30NA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 08:15:23 2026 by rpki-client