
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft
File: ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft (raw, json)
Hash identifier: 9UfLEI1YmQDAuKGDl6GmmOnP5vi2bz06hzyD9sVLDcQ=
Subject key identifier: 60:D9:10:B6:75:58:62:9B:A1:2C:D3:25:C9:EF:A7:E6:A8:BD:3F:C7
Authority key identifier: AF:2D:90:6E:26:4D:2A:86:0B:04:92:01:D5:0E:18:5E:F2:AD:C1:13
Certificate issuer: /CN=A91E013A/serialNumber=AF2D906E264D2A860B049201D50E185EF2ADC113
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft
Manifest number: 1E
Signing time: Fri 17 Jul 2026 10:17:12 +0000
Manifest this update: Fri 17 Jul 2026 10:17:12 +0000
Manifest next update: Fri 24 Jul 2026 10:17:12 +0000
Files and hashes: 1: ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl (hash: Xrb5s0vDfboewu2dT3j4Lt8DnXoq18rHwURbKNaPB4g=)
2: B3FF987E5B8211F19BF8DAE6A7833773.roa (hash: h4RxHhEmIQwOTsAbSmC6rMq+saFdX1zwIpm3FWaV4gQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl
rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:17:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E013A, serialNumber=AF2D906E264D2A860B049201D50E185EF2ADC113
Validity
Not Before: Jul 17 10:17:12 2026 GMT
Not After : Jul 24 10:17:12 2026 GMT
Subject: CN=6a5a0128-ae0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:70:0c:d9:73:cd:41:68:2b:db:ea:6e:e8:
02:e7:b6:55:f0:22:c0:58:02:02:c6:0a:b7:73:bf:
97:30:74:2d:81:c3:4b:df:36:48:9d:a8:22:ab:04:
2d:cf:ad:40:15:cd:e5:8b:6f:af:55:3a:43:59:1c:
3b:88:a7:89:71:30:51:fc:76:49:c5:2c:41:4c:db:
a5:2a:e4:c0:d5:ff:d7:50:e7:ee:d8:bc:a2:ae:7e:
18:2d:1c:82:3f:bc:80:33:45:ff:07:4d:15:91:88:
9c:dc:9b:ca:41:c9:c0:4d:8a:ef:67:64:83:41:9a:
16:80:58:8a:53:0e:e6:02:56:ac:73:eb:60:32:33:
70:f1:08:8f:f4:83:6a:2c:a4:9d:7c:52:4e:88:8a:
f9:cf:16:10:b0:54:3d:03:41:61:58:b7:fc:fb:d4:
da:e7:a3:f4:63:51:69:d3:06:33:37:68:8d:5c:49:
7f:59:77:ac:7a:bf:59:b2:19:35:b4:a1:a2:6f:3d:
64:a7:ad:9f:bb:28:cc:65:6e:7e:56:cf:7c:26:93:
ca:c3:12:a3:cb:6c:9d:8e:97:52:f8:bc:4c:12:4c:
13:8e:ab:83:6e:27:12:b1:ff:37:e3:92:8a:de:e7:
49:52:34:b5:85:e1:f9:93:aa:26:19:2a:f7:79:d3:
1c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D9:10:B6:75:58:62:9B:A1:2C:D3:25:C9:EF:A7:E6:A8:BD:3F:C7
X509v3 Authority Key Identifier:
keyid:AF:2D:90:6E:26:4D:2A:86:0B:04:92:01:D5:0E:18:5E:F2:AD:C1:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a1:b1:c7:99:16:ea:b7:84:ab:e1:46:ed:96:4a:73:41:29:
2e:c8:4f:7a:f4:aa:c6:d7:e6:aa:b4:30:ae:d6:82:22:55:68:
ec:e7:ba:c4:55:74:31:77:fa:54:e2:b2:f2:63:53:6d:d7:75:
a2:0f:1a:b8:8f:ec:dd:53:c5:9b:37:b9:3d:ff:d3:dc:61:81:
90:62:22:91:12:23:da:d5:47:8a:17:d6:82:41:37:6b:e9:b8:
e5:e3:ca:ac:d5:e2:92:d9:72:37:46:82:5a:9a:1f:f0:b6:a8:
ae:2a:a6:5b:01:2e:08:00:2f:2a:60:8b:1c:8a:74:28:9b:b2:
b7:c8:70:f9:1b:48:4d:4f:5f:b2:f7:22:10:c4:dc:87:6e:4f:
6d:df:8a:44:60:9d:c9:63:c4:ef:6e:42:cc:80:7a:df:eb:75:
29:d5:6f:17:c8:36:bd:91:9e:61:06:88:f5:b4:76:24:60:5a:
d4:5b:1f:74:a6:fb:51:4b:e7:df:8b:f9:c6:0e:ff:01:5b:42:
af:2a:f1:04:28:48:ab:90:36:f7:2a:06:f2:66:23:3f:86:ef:
a7:ad:d3:e7:42:45:f7:76:44:9a:cd:c6:3a:0b:76:f6:e2:08:
fe:fd:d5:ee:38:f2:75:1f:c6:c4:f6:83:64:52:0f:a0:2e:9d:
cf:31:0a:a9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MDEzQTExMC8GA1UEBRMoQUYyRDkwNkUyNjREMkE4NjBCMDQ5MjAxRDUwRTE4NUVG
MkFEQzExMzAeFw0yNjA3MTcxMDE3MTJaFw0yNjA3MjQxMDE3MTJaMBgxFjAUBgNV
BAMTDTZhNWEwMTI4LWFlMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCUenAM2XPNQWgr2+pu6ALntlXwIsBYAgLGCrdzv5cwdC2Bw0vfNkidqCKrBC3P
rUAVzeWLb69VOkNZHDuIp4lxMFH8dknFLEFM26Uq5MDV/9dQ5+7YvKKufhgtHII/
vIAzRf8HTRWRiJzcm8pBycBNiu9nZINBmhaAWIpTDuYCVqxz62AyM3DxCI/0g2os
pJ18Uk6IivnPFhCwVD0DQWFYt/z71Nrno/RjUWnTBjM3aI1cSX9Zd6x6v1myGTW0
oaJvPWSnrZ+7KMxlbn5Wz3wmk8rDEqPLbJ2Ol1L4vEwSTBOOq4NuJxKx/zfjkore
50lSNLWF4fmTqiYZKvd50xyjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYNkQtnVY
YpuhLNMlye+n5qi9P8cwHwYDVR0jBBgwFoAUry2QbiZNKoYLBJIB1Q4YXvKtwRMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwMTNBLzg0NzUyRkQyNTgx
ODExRjE4NkZBNTEzN0EzODMzNzczL3J5MlFiaVpOS29ZTEJKSUIxUTRZWHZLdHdS
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcnkyUWJpWk5Lb1lMQkpJQjFRNFlYdkt0d1JNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw
MTNBLzg0NzUyRkQyNTgxODExRjE4NkZBNTEzN0EzODMzNzczL3J5MlFiaVpOS29Z
TEJKSUIxUTRZWHZLdHdSTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAsobHHmRbqt4Sr4UbtlkpzQSkuyE969KrG1+aqtDCu1oIiVWjs57rEVXQxd/pU
4rLyY1Nt13WiDxq4j+zdU8WbN7k9/9PcYYGQYiKREiPa1UeKF9aCQTdr6bjl48qs
1eKS2XI3RoJamh/wtqiuKqZbAS4IAC8qYIscinQom7K3yHD5G0hNT1+y9yIQxNyH
bk9t34pEYJ3JY8TvbkLMgHrf63Up1W8XyDa9kZ5hBoj1tHYkYFrUWx90pvtRS+ff
i/nGDv8BW0KvKvEEKEirkDb3KgbyZiM/hu+nrdPnQkX3dkSazcY6C3b24gj+/dXu
OPJ1H8bE9oNkUg+gLp3PMQqp
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:51 2026 by rpki-client