
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
File: YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft (raw, json)
Hash identifier: nSevolMi3YYjj2pTkqX3BWFTkyL2E1KXP5vMFgz+InU=
Subject key identifier: 24:12:C6:F8:A2:D4:CA:5E:E1:93:6F:B9:06:3D:4C:22:E0:03:2C:B3
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Certificate issuer: /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial: 0242
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
Manifest number: 0230
Signing time: Mon 19 Oct 2026 03:14:12 +0000
Manifest this update: Mon 19 Oct 2026 03:14:12 +0000
Manifest next update: Mon 26 Oct 2026 03:14:12 +0000
Files and hashes: 1: YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl (hash: H00e1r8YrLs/uKI1o6n+3xgt/bnOoc8mbM4Ev10uamE=)
2: CDB51BDC739411EEB8BAE858C4F9AE02.roa (hash: FCrLiwYHO+gGxzV/UjjW2dmefunZUp5R/lmKyNKr/CI=)
3: CD34C770739411EEB8BAE858C4F9AE02.roa (hash: eVVo4i8w9S86ym4XeGvHdcL3OB0X4iTyUgG3ihZswCE=)
4: CE24A9DE739411EEB8BAE858C4F9AE02.roa (hash: 4ahWqxQvl8elCs1UptFAhORYOkZcTrsAbGkMLik0CTE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 03:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Validity
Not Before: Oct 19 03:14:12 2026 GMT
Not After : Oct 26 03:14:12 2026 GMT
Subject: CN=6ad58b04-1090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:5d:a5:51:98:5b:d8:bb:0b:77:c2:9e:63:
23:c3:78:9d:61:df:80:4a:1c:60:e0:86:81:c6:25:
33:70:f0:39:d1:76:24:8b:ce:e7:f3:b5:b2:5f:f5:
f7:96:8b:f6:b2:70:4f:ed:ba:6f:76:16:ff:fc:4c:
3a:a7:1a:59:76:7a:6e:a0:f0:c4:df:eb:ef:b0:96:
c6:fe:f2:1f:88:ab:d7:85:b3:05:4d:64:2c:1a:51:
5c:e9:a5:12:7e:a4:b0:3c:fc:b4:67:5b:6d:0f:99:
45:41:85:b9:33:3d:fe:c2:e0:ca:d2:85:1e:e6:4b:
ae:22:70:59:97:ef:ea:03:39:cc:bf:24:fe:98:d1:
65:2a:1c:09:bf:1a:37:ec:20:bd:36:70:e8:69:0e:
5d:9d:23:e6:7e:1f:26:f6:27:20:ae:76:3e:dc:a6:
61:e5:d3:73:e1:25:0e:49:8a:1d:06:23:b5:2b:eb:
b6:18:9f:8b:ec:94:79:32:45:2b:8f:08:0b:04:56:
32:06:9f:b7:ac:d8:b3:16:08:3f:6a:46:ea:b1:93:
d8:0c:eb:46:d4:29:37:6b:68:20:9c:ca:19:7f:66:
37:91:54:88:11:e6:8f:ac:17:96:e5:2b:7d:36:e7:
ad:db:61:3e:97:6e:38:f3:a3:c3:32:e2:fa:22:f8:
ec:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:12:C6:F8:A2:D4:CA:5E:E1:93:6F:B9:06:3D:4C:22:E0:03:2C:B3
X509v3 Authority Key Identifier:
keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:63:e9:dc:de:e5:77:48:52:43:5a:a6:5a:af:8f:15:11:6f:
81:7e:7d:1e:34:cd:68:96:07:d7:5f:42:22:f8:1d:d2:08:0f:
27:bc:ae:14:9b:64:60:d3:6a:06:a5:ea:ea:02:ce:9a:f2:e5:
b6:4f:38:16:f1:c5:9e:50:b3:95:56:e4:bc:d5:67:f4:a5:bb:
2a:3a:0c:04:fe:fc:55:7d:37:2a:1b:00:0c:99:c2:19:06:e4:
f8:a4:07:d1:03:a0:f1:1a:af:06:15:86:2c:0f:ce:66:0d:77:
55:07:20:de:da:be:1f:e0:5b:84:91:61:07:45:0b:4a:f9:a1:
8d:ee:b1:99:57:b2:47:35:8e:7f:63:32:99:aa:8f:ce:dd:6f:
2a:2e:eb:4c:cd:2f:e3:0b:46:9a:37:ab:5b:91:79:66:24:f8:
15:e5:a1:ba:90:63:c0:3b:88:18:38:d1:d4:d7:aa:85:b4:30:
ea:ea:4b:7c:d1:48:a7:c8:26:40:7e:14:4c:bc:e3:b6:b5:65:
b4:47:aa:56:56:a1:f6:e5:e6:1e:da:ca:c2:e8:11:d8:82:c6:
7a:aa:eb:50:3e:04:6e:15:8c:50:82:76:7e:e1:44:0b:6b:56:
7c:fd:3f:72:5c:70:fa:11:fd:82:5b:2a:8c:9a:24:f6:3f:ea:
f6:cb:63:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjY5OTYxMTAvBgNVBAUTKDYyODNCRTlCMzFEMjkwMzZCOTY3QkZGN0I3RTcxQkFE
RDUyOUE2NEUwHhcNMjYxMDE5MDMxNDEyWhcNMjYxMDI2MDMxNDEyWjAYMRYwFAYD
VQQDEw02YWQ1OGIwNC0xMDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAunVdpVGYW9i7C3fCnmMjw3idYd+AShxg4IaBxiUzcPA50XYki87n87WyX/X3
lov2snBP7bpvdhb//Ew6pxpZdnpuoPDE3+vvsJbG/vIfiKvXhbMFTWQsGlFc6aUS
fqSwPPy0Z1ttD5lFQYW5Mz3+wuDK0oUe5kuuInBZl+/qAznMvyT+mNFlKhwJvxo3
7CC9NnDoaQ5dnSPmfh8m9icgrnY+3KZh5dNz4SUOSYodBiO1K+u2GJ+L7JR5MkUr
jwgLBFYyBp+3rNizFgg/akbqsZPYDOtG1Ck3a2ggnMoZf2Y3kVSIEeaPrBeW5St9
Nuet22E+l24486PDMuL6IvjspQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCQSxvii
1Mpe4ZNvuQY9TCLgAyyzMB8GA1UdIwQYMBaAFGKDvpsx0pA2uWe/97fnG63VKaZO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk5Ni8xMjMxRkM2ODcz
OTQxMUVFQTE3MDM4NERDNEY5QUUwMi9Zb08tbXpIU2tEYTVaN18zdC1jYnJkVXBw
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lvTy1tekhTa0RhNVo3XzN0LWNicmRVcHBrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Njk5Ni8xMjMxRkM2ODczOTQxMUVFQTE3MDM4NERDNEY5QUUwMi9Zb08tbXpIU2tE
YTVaN18zdC1jYnJkVXBwazQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMmPp3N7ld0hSQ1qmWq+PFRFvgX59HjTNaJYH119CIvgd0ggPJ7yuFJtkYNNq
BqXq6gLOmvLltk84FvHFnlCzlVbkvNVn9KW7KjoMBP78VX03KhsADJnCGQbk+KQH
0QOg8RqvBhWGLA/OZg13VQcg3tq+H+BbhJFhB0ULSvmhje6xmVeyRzWOf2MymaqP
zt1vKi7rTM0v4wtGmjerW5F5ZiT4FeWhupBjwDuIGDjR1NeqhbQw6upLfNFIp8gm
QH4UTLzjtrVltEeqVlah9uXmHtrKwugR2ILGeqrrUD4EbhWMUIJ2fuFEC2tWfP0/
clxw+hH9glsqjJok9j/q9stjjg==
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:26:58 2026 by rpki-client