
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft
File: yhlef9JZjYWjbJnsSBs1dMBuOxc.mft (raw, json)
Hash identifier: hCo4FYK3QMsV6H5mmHGv9AVMxKUFx7/bWaUicTKFlhs=
Subject key identifier: 26:CC:B8:47:AB:F6:B5:61:A5:6E:23:A2:D8:72:2F:AE:E8:27:D1:F5
Authority key identifier: CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17
Certificate issuer: /CN=A919DA63/serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17
Certificate serial: 08A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft
Manifest number: 089C
Signing time: Sat 04 Apr 2026 20:18:46 +0000
Manifest this update: Sat 04 Apr 2026 20:18:45 +0000
Manifest next update: Sat 11 Apr 2026 20:18:45 +0000
Files and hashes: 1: yhlef9JZjYWjbJnsSBs1dMBuOxc.crl (hash: +KITbuVvTZeQ66hhMeNRpVdgSNmQSP7x1gWj6rk0hb8=)
2: B65C355AE1E411EAAD5D8545C4F9AE02.roa (hash: a0ikFcPtz4uKTdxcDLlrrrB8ZBAu38Rn0L19Tx4gd1Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl
rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:18:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2212 (0x8a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DA63, serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17
Validity
Not Before: Apr 4 20:18:45 2026 GMT
Not After : Apr 11 20:18:45 2026 GMT
Subject: CN=69d17226-291a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1d:10:ec:8c:ff:f1:f5:fa:1d:f0:fe:70:4a:
70:da:3b:1c:72:2c:22:99:07:c5:1d:c4:56:47:57:
cf:86:8d:81:1a:76:3c:13:33:1c:6a:bc:b2:fd:49:
d3:35:6a:8c:87:62:ed:75:f5:95:5a:40:d0:0a:ec:
4d:52:00:32:be:8d:6b:e2:38:d0:54:d2:32:1d:0f:
ca:7e:6d:d2:6c:58:1c:a8:73:22:95:62:b6:a6:91:
b9:d9:8a:94:30:ad:d4:23:51:94:40:7e:20:2f:7f:
f8:1f:0d:0e:56:41:56:8a:1a:f6:ac:f8:3c:39:a5:
c5:aa:24:94:3b:cb:71:c8:90:07:1f:16:a2:85:ab:
29:c1:10:9b:63:c1:dd:10:d1:3f:37:cd:43:39:a8:
41:3a:e9:30:ae:6e:86:36:50:5d:03:fb:3c:f3:28:
30:36:9b:f8:d9:f5:7c:6f:77:47:f6:19:ce:80:b3:
2a:e5:34:27:10:c3:c6:b4:dc:3f:9f:1d:b6:88:6a:
18:76:6d:ed:02:01:96:33:41:8e:1a:1a:38:dd:8b:
c0:79:8e:c6:b6:8e:0c:5f:dc:b7:2d:c9:bf:2d:48:
4b:1d:53:a6:5c:d2:ab:86:0d:95:f3:f5:39:5b:f5:
fe:5b:96:86:41:8c:32:a9:b9:47:8a:54:b8:ac:86:
2c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CC:B8:47:AB:F6:B5:61:A5:6E:23:A2:D8:72:2F:AE:E8:27:D1:F5
X509v3 Authority Key Identifier:
keyid:CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:4b:06:84:43:59:8a:45:f7:88:d8:be:01:e9:b3:19:05:c8:
7c:41:05:4e:93:1d:be:a4:4c:f3:4a:6c:c3:9d:df:09:7f:44:
e2:72:1e:2b:70:cc:b5:10:63:17:d5:9f:64:5c:3a:f7:85:77:
85:e8:7f:fb:c4:f3:c7:61:61:fe:d1:2d:ee:9f:08:4e:f7:75:
6b:8a:eb:b0:20:9e:c7:80:e9:72:1a:4f:07:0b:9d:de:ed:dc:
7e:ab:9a:ff:23:b3:38:00:e3:a9:71:59:f5:45:00:0e:af:60:
fd:ab:9f:8b:57:ff:dc:30:84:1c:8f:21:9e:75:fa:16:86:82:
2f:b3:60:f6:02:9e:ec:33:b6:29:76:36:e9:43:99:fa:55:1e:
cf:85:60:3d:7d:15:94:36:ec:bb:6e:8c:87:94:f8:3b:4a:26:
47:51:5f:ad:7f:3b:88:a3:d4:b4:f5:b1:b2:e8:9a:2f:8f:56:
f2:30:ae:b3:4d:8f:cf:d0:2f:0a:ab:18:ca:80:35:fb:55:ee:
23:3c:0c:a5:df:14:68:7f:d1:d8:93:ee:f0:e7:bd:2c:b1:12:
57:60:46:c8:c8:88:b2:16:3d:05:4f:3b:a1:dc:c6:7b:d8:13:
c1:dc:de:54:50:17:6c:a3:5e:78:92:78:bb:01:68:c7:e6:3a:
e6:a1:20:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:44:15 2026 by rpki-client