
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft
File: ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft (raw, json)
Hash identifier: U4rwWjKKvUh4FKJNkRQep9hY8217R5pD+mlnO5yRzFU=
Subject key identifier: 07:B8:B5:C1:D0:0E:8C:31:4D:FA:58:77:82:B3:B4:A2:BD:EF:38:26
Authority key identifier: AF:2D:90:6E:26:4D:2A:86:0B:04:92:01:D5:0E:18:5E:F2:AD:C1:13
Certificate issuer: /CN=A91E013A/serialNumber=AF2D906E264D2A860B049201D50E185EF2ADC113
Certificate serial: 39
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft
Manifest number: 37
Signing time: Thu 03 Sep 2026 08:51:38 +0000
Manifest this update: Thu 03 Sep 2026 08:51:37 +0000
Manifest next update: Thu 10 Sep 2026 08:51:37 +0000
Files and hashes: 1: ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl (hash: kbbHZudAdAZgI5CU1Mk7dJrHva3B5uYp+C4EoMnxDTo=)
2: B3FF987E5B8211F19BF8DAE6A7833773.roa (hash: h4RxHhEmIQwOTsAbSmC6rMq+saFdX1zwIpm3FWaV4gQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl
rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:51:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E013A, serialNumber=AF2D906E264D2A860B049201D50E185EF2ADC113
Validity
Not Before: Sep 3 08:51:37 2026 GMT
Not After : Sep 10 08:51:37 2026 GMT
Subject: CN=6a99351a-61e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5e:86:a5:7d:61:56:39:99:7a:0f:30:76:ab:
e9:09:f5:5f:18:48:d9:f9:0c:23:83:eb:e0:83:2d:
d9:b5:d9:af:fe:d1:7f:0d:a9:64:10:e9:4d:ce:02:
ff:47:d0:6b:91:b8:06:2d:00:ed:f4:c1:01:4a:9f:
5e:b4:05:1f:76:07:3d:f1:54:a6:3a:a3:f4:3b:c8:
5d:bf:aa:b1:b3:70:b1:60:2f:12:58:93:2f:5f:11:
df:d1:d1:7c:9b:81:13:5f:40:96:83:83:19:b7:c2:
83:8b:7e:fb:f1:e7:52:ed:c9:ff:f6:e9:63:cd:9c:
32:4b:ed:e1:dc:04:ad:26:d1:cf:4a:78:f3:81:fd:
6a:36:43:db:e0:62:55:c1:bb:15:a7:e2:e1:bb:07:
31:05:7f:2d:5a:cf:87:ab:fc:8f:29:ef:05:8b:9f:
2c:cd:ea:b2:2a:84:fa:73:fe:a7:a0:d8:a4:4d:5d:
74:23:a3:1e:4d:c0:eb:92:88:6c:cf:07:2d:6d:89:
a2:e2:1e:bf:f6:95:9e:81:c3:b2:f3:3d:ca:11:32:
90:b9:29:2e:21:80:79:d4:87:a2:f5:cb:9c:ea:68:
12:cb:69:c8:00:e7:8a:1b:a0:0a:b9:e8:1e:fb:06:
a3:54:20:dd:2c:0e:d8:80:46:ae:d4:33:5f:ce:7d:
a1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B8:B5:C1:D0:0E:8C:31:4D:FA:58:77:82:B3:B4:A2:BD:EF:38:26
X509v3 Authority Key Identifier:
keyid:AF:2D:90:6E:26:4D:2A:86:0B:04:92:01:D5:0E:18:5E:F2:AD:C1:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1d:eb:46:6d:68:cc:ff:ee:53:06:89:af:79:45:23:92:d1:
9d:24:c9:a1:0d:0f:ba:e7:41:0f:6d:3a:fa:b3:f6:f9:8c:70:
0b:0a:3d:07:bc:1e:6a:8e:13:57:e8:66:78:98:3e:af:14:05:
23:c2:eb:04:b0:43:f3:0e:70:ef:ae:49:08:84:ab:e3:02:7a:
68:3c:b2:2c:ac:1d:95:67:6f:34:17:59:3a:1d:e3:5e:8b:e8:
0e:f5:c6:56:d2:a3:7b:82:e6:20:96:97:e7:72:1f:c7:6a:2f:
9e:92:8e:7a:88:0e:1a:23:0d:9d:59:e0:e3:3e:39:28:a3:42:
9f:cc:f2:60:e7:1d:e9:5f:0c:b3:62:3b:7b:6e:b8:cf:b0:6f:
f3:c4:72:e6:e7:4f:b2:1d:1d:0b:0c:51:72:11:14:e6:e4:dd:
30:a5:ac:c7:31:1e:c4:80:c3:8f:ed:66:f9:a4:46:0b:86:cb:
58:92:33:65:b8:f6:5c:66:fe:64:5f:cf:90:40:54:5b:34:3c:
de:fe:45:36:dc:b3:8b:a6:5b:00:28:34:5f:98:ff:47:da:12:
d7:9e:39:27:d3:0f:15:01:23:b1:a6:17:4c:ab:58:0c:3d:cc:
f5:74:c6:87:82:2c:d3:d1:50:ec:21:87:21:da:70:18:a8:f0:
ed:c1:b4:b8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MDEzQTExMC8GA1UEBRMoQUYyRDkwNkUyNjREMkE4NjBCMDQ5MjAxRDUwRTE4NUVG
MkFEQzExMzAeFw0yNjA5MDMwODUxMzdaFw0yNjA5MTAwODUxMzdaMBgxFjAUBgNV
BAMTDTZhOTkzNTFhLTYxZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCYXoalfWFWOZl6DzB2q+kJ9V8YSNn5DCOD6+CDLdm12a/+0X8NqWQQ6U3OAv9H
0GuRuAYtAO30wQFKn160BR92Bz3xVKY6o/Q7yF2/qrGzcLFgLxJYky9fEd/R0Xyb
gRNfQJaDgxm3woOLfvvx51Ltyf/26WPNnDJL7eHcBK0m0c9KePOB/Wo2Q9vgYlXB
uxWn4uG7BzEFfy1az4er/I8p7wWLnyzN6rIqhPpz/qeg2KRNXXQjox5NwOuSiGzP
By1tiaLiHr/2lZ6Bw7LzPcoRMpC5KS4hgHnUh6L1y5zqaBLLacgA54oboAq56B77
BqNUIN0sDtiARq7UM1/OfaGjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUB7i1wdAO
jDFN+lh3grO0or3vOCYwHwYDVR0jBBgwFoAUry2QbiZNKoYLBJIB1Q4YXvKtwRMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwMTNBLzg0NzUyRkQyNTgx
ODExRjE4NkZBNTEzN0EzODMzNzczL3J5MlFiaVpOS29ZTEJKSUIxUTRZWHZLdHdS
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcnkyUWJpWk5Lb1lMQkpJQjFRNFlYdkt0d1JNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw
MTNBLzg0NzUyRkQyNTgxODExRjE4NkZBNTEzN0EzODMzNzczL3J5MlFiaVpOS29Z
TEJKSUIxUTRZWHZLdHdSTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA8HetGbWjM/+5TBomveUUjktGdJMmhDQ+650EPbTr6s/b5jHALCj0HvB5qjhNX
6GZ4mD6vFAUjwusEsEPzDnDvrkkIhKvjAnpoPLIsrB2VZ280F1k6HeNei+gO9cZW
0qN7guYglpfnch/Hai+eko56iA4aIw2dWeDjPjkoo0KfzPJg5x3pXwyzYjt7brjP
sG/zxHLm50+yHR0LDFFyERTm5N0wpazHMR7EgMOP7Wb5pEYLhstYkjNluPZcZv5k
X8+QQFRbNDze/kU23LOLplsAKDRfmP9H2hLXnjkn0w8VASOxphdMq1gMPcz1dMaH
gizT0VDsIYch2nAYqPDtwbS4
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:38:24 2026 by rpki-client