
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
File: cRYXAC2fDJ62W07dYfehyR_NuD4.mft (raw, json)
Hash identifier: zuyN6OrlGe1IUR+MmeLUlDcrQ+PTjKRsEng5fee34Qs=
Subject key identifier: DA:57:65:9B:6E:D1:0C:3D:CD:B2:C3:66:10:60:E4:A0:6C:16:BE:B3
Authority key identifier: 71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E
Certificate issuer: /CN=A919C6E7/serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E
Certificate serial: 0185
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
Manifest number: 017B
Signing time: Wed 19 Aug 2026 05:18:11 +0000
Manifest this update: Wed 19 Aug 2026 05:18:10 +0000
Manifest next update: Wed 26 Aug 2026 05:18:10 +0000
Files and hashes: 1: cRYXAC2fDJ62W07dYfehyR_NuD4.crl (hash: NqOUqxiQavxX88NZnacmriF6Xr5TWMyKqYmsRAMqw9Q=)
2: D93EF164ABF311F0BBF66516C4F9AE02.roa (hash: VuA/EDxNN0tQRMyk9i3DgPoA/8Jh+78o9QnDk32xTks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl
rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 05:18:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C6E7, serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E
Validity
Not Before: Aug 19 05:18:10 2026 GMT
Not After : Aug 26 05:18:10 2026 GMT
Subject: CN=6a853c93-0423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ba:85:35:16:af:0c:ca:d2:99:88:50:0d:05:
bb:f8:a6:f3:43:64:8a:a6:99:d0:3f:a3:a7:22:07:
b6:b5:9f:51:29:71:2c:0e:f8:8a:f6:1c:7c:f9:23:
b0:b9:96:71:d1:ba:04:f7:05:55:b2:bc:3c:39:cd:
32:36:9f:85:ea:3d:a8:8b:53:fc:35:fb:da:86:d2:
42:52:d0:76:10:64:76:f9:35:a6:e6:d0:09:a8:bc:
ad:67:19:68:c1:94:37:8c:3a:df:14:fc:fd:fe:76:
ce:10:8c:c2:34:2d:14:22:67:73:04:ce:04:a2:92:
38:b3:f6:a8:b8:2d:1a:43:7e:f8:8e:7f:38:ff:f3:
b2:75:ea:3a:af:94:4b:64:c7:48:13:cc:24:04:08:
5e:30:76:ab:1e:80:45:77:8b:98:a5:f7:b1:9d:87:
2a:a7:2c:31:67:27:ae:ec:b4:d7:92:2c:6c:3e:fb:
b0:3f:3d:f6:92:24:ba:58:c3:6a:6a:c9:0f:a4:dc:
c6:1c:43:ab:22:13:4c:54:aa:c7:08:73:f1:cd:36:
27:de:2e:ea:e2:dd:f7:d1:9c:16:99:17:17:6f:bd:
de:6a:e5:99:b5:4b:5f:c1:13:ad:5b:fe:a7:f1:67:
a0:8a:39:67:69:94:c2:54:d5:d5:e2:48:ba:9b:68:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:57:65:9B:6E:D1:0C:3D:CD:B2:C3:66:10:60:E4:A0:6C:16:BE:B3
X509v3 Authority Key Identifier:
keyid:71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:ec:0e:81:ae:30:d8:53:6b:ad:61:e5:63:57:4b:92:aa:b8:
2e:f9:84:b1:6d:3c:7c:dc:60:9c:5c:e9:70:2b:2f:ca:64:07:
f8:33:00:51:33:59:b8:3b:6d:2b:3a:6a:d9:ef:ef:2f:16:55:
6c:19:03:24:2d:7c:0a:99:a9:13:15:6c:90:97:66:ef:22:11:
b6:89:06:9f:71:ac:6f:29:00:0f:58:77:d6:4c:cb:e2:fb:90:
ff:d8:33:12:f2:da:03:e9:4a:1b:f5:91:aa:86:c2:8d:49:fd:
07:31:7b:fb:15:80:d1:04:9d:f3:2d:7f:50:98:e5:a0:0d:3a:
ba:e6:32:b7:14:f5:10:93:21:25:1e:3b:61:79:af:af:a8:cb:
fa:f7:4c:35:f7:38:92:05:5e:e2:58:be:ec:2c:66:56:4f:bb:
0b:7d:e6:06:b1:1c:bf:22:53:cf:77:38:0a:9e:31:8f:e0:10:
65:8c:3b:59:d9:ff:e7:5c:9d:ca:1d:0e:f0:9d:66:c7:7e:e7:
12:d7:54:c0:5f:ce:0b:0d:cd:f6:76:9f:fa:0a:e9:6f:e6:4b:
35:9f:11:ce:8e:ca:cb:18:26:73:94:ee:84:46:7f:13:56:21:
97:d4:96:a0:81:fb:2f:a6:7e:c8:a2:36:8f:bf:78:d8:53:55:
f2:56:50:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:24 2026 by rpki-client