
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft
File: k32ZUe4fk_ysJDM7CD-dfy458Pk.mft (raw, json)
Hash identifier: APEg56Z6wp5UCuhGr0GUUEeI/DGXMksxrXM/eyV6m/U=
Subject key identifier: 39:89:8E:67:01:37:B5:1C:96:A0:BD:7C:00:43:DD:AC:A6:95:2B:3C
Authority key identifier: 93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9
Certificate issuer: /CN=A919C8C4/serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9
Certificate serial: 097E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft
Manifest number: 0973
Signing time: Fri 24 Jul 2026 20:35:50 +0000
Manifest this update: Fri 24 Jul 2026 20:35:50 +0000
Manifest next update: Fri 31 Jul 2026 20:35:50 +0000
Files and hashes: 1: k32ZUe4fk_ysJDM7CD-dfy458Pk.crl (hash: q9A7CyJ6rQr2fr++boV9X1Tba+uJ7qZoB+GimD4Yuo8=)
2: 3A30A1505D7611F1A65CDC84C1833773.roa (hash: xhAHuvmO3aSQ7a3p7cQ67FVXsueoW86sk1sPeDMX+RA=)
3: 9F5F74265D7511F18F235C80C1833773.roa (hash: 0fZccuokxMBdsDfqfz3v6IokDESdGPotG9nJBoFw7Zw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl
rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 20:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2430 (0x97e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C8C4, serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9
Validity
Not Before: Jul 24 20:35:50 2026 GMT
Not After : Jul 31 20:35:50 2026 GMT
Subject: CN=6a63cca6-7dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e9:6a:02:7e:a5:69:94:50:5a:7f:53:c5:c0:
e5:1b:ab:22:d0:96:d0:6b:1a:fc:53:45:f4:8a:6b:
c0:25:b2:38:4d:a8:3d:95:23:25:7c:1b:3a:ef:8c:
34:10:bd:ce:33:15:95:00:2d:5d:34:5a:b8:5c:d6:
d4:06:06:a4:0f:dd:f0:28:9e:fc:57:fc:07:b8:4a:
f3:c1:30:f5:ce:52:f4:09:2b:05:d3:44:36:00:c4:
9f:b4:1e:43:c7:2f:3b:7e:a4:4e:59:a9:db:f7:6c:
0a:a7:1f:43:78:58:e8:a4:e8:7a:3a:de:e8:cf:1d:
7c:c8:f5:41:37:8e:a6:f5:92:d1:26:93:e2:d8:ff:
e5:63:91:64:e7:6d:49:89:18:66:d1:86:f9:43:3a:
23:09:7d:c1:b5:11:85:95:a5:12:69:08:92:f7:84:
85:69:aa:2b:c3:59:b6:33:10:21:d3:de:87:2c:bd:
20:84:fe:37:2a:68:57:8f:85:61:c4:63:69:af:ab:
c7:73:cf:d8:0c:2f:cc:53:9a:7b:5a:35:74:c0:dd:
22:71:06:e1:58:eb:9b:4b:a4:ae:d3:e2:9d:59:11:
a2:d5:d3:cc:2b:03:ad:c8:18:a4:60:b3:e0:3c:6e:
d3:e4:3b:00:af:52:3f:38:99:b6:23:36:7f:3e:a2:
96:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:89:8E:67:01:37:B5:1C:96:A0:BD:7C:00:43:DD:AC:A6:95:2B:3C
X509v3 Authority Key Identifier:
keyid:93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:47:bd:95:ec:f1:0f:c7:d9:62:bc:96:57:f0:b7:ed:e8:52:
27:3e:ce:9c:2b:33:53:56:51:26:4c:de:70:33:3e:8f:99:50:
8e:43:d0:f3:da:15:fd:5e:79:6e:0e:61:32:41:a4:1d:c1:ce:
30:8e:4a:fb:e5:2f:67:44:59:03:ef:8d:f4:d8:c7:b8:3e:56:
33:16:aa:05:b1:c5:d2:ad:9f:2f:8e:32:e7:10:44:0d:b1:5f:
f9:e0:77:46:46:e9:dd:3b:44:c4:f6:52:01:65:74:20:63:4c:
98:bb:7c:6e:c0:e2:63:c8:f9:d0:05:e0:63:7b:fb:b3:8f:8e:
82:ad:de:d1:7c:53:be:cb:18:43:4f:ad:8e:16:31:8c:e2:23:
aa:de:fa:17:8c:ef:7c:d5:22:21:68:76:a3:0d:98:f3:7a:ea:
cd:9f:f6:d3:6a:4b:60:52:e6:d3:55:2c:e2:de:f7:b7:72:76:
92:ef:cc:19:ed:bb:2f:61:b2:77:c1:eb:de:70:0a:97:cb:b8:
de:c1:d1:e1:07:43:20:23:ea:d0:dc:01:6b:56:f8:08:67:dd:
c8:35:52:47:6e:40:2d:aa:55:1f:64:69:37:98:a9:d6:30:8a:
f5:af:49:4d:f4:7f:9d:b8:18:88:08:74:c5:da:a8:a9:1f:15:
36:a0:20:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:13:13 2026 by rpki-client