
$ rpki-client -vvf rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft
File: YptQlj68agIuJ67LYTQg5A5020o.mft (raw, json)
Hash identifier: 5YOBNo9FqRTylQudGped97rMQ6vTWPeocsfPxfgiLUI=
Subject key identifier: 8D:C0:8B:06:61:73:C4:53:31:CC:08:8F:44:D2:9B:5B:CB:30:53:48
Authority key identifier: 62:9B:50:96:3E:BC:6A:02:2E:27:AE:CB:61:34:20:E4:0E:74:DB:4A
Certificate issuer: /CN=A911392E/serialNumber=629B50963EBC6A022E27AECB613420E40E74DB4A
Certificate serial: 015B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft
Manifest number: 0155
Signing time: Thu 21 May 2026 05:09:29 +0000
Manifest this update: Thu 21 May 2026 05:09:29 +0000
Manifest next update: Thu 28 May 2026 05:09:29 +0000
Files and hashes: 1: YptQlj68agIuJ67LYTQg5A5020o.crl (hash: ZBhEzva1L3hL1CF6/S3VC9rgVmtV3GcNLxkKsDqAwPo=)
2: 8E9B074050E311EF8624AC36C4F9AE02.roa (hash: DNo6LAjYKJT9hMbFIUnOrjoJbdOcs5kpnOeIkHugpwQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.crl
rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 05:09:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911392E, serialNumber=629B50963EBC6A022E27AECB613420E40E74DB4A
Validity
Not Before: May 21 05:09:29 2026 GMT
Not After : May 28 05:09:29 2026 GMT
Subject: CN=6a0e9389-e9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d0:50:43:53:6c:36:0c:e9:b4:7c:c8:d0:58:
d4:8a:76:6f:77:15:6f:14:1c:f0:42:dd:37:b4:80:
f6:4d:bd:9f:03:47:b1:f2:7e:bf:c2:a3:d6:cb:2d:
63:59:c2:71:20:10:e8:7c:92:d6:f3:fb:00:a8:07:
4d:dc:9a:08:dd:fb:4e:f1:bd:9a:25:d6:ff:ae:d0:
30:21:55:b3:73:b5:e2:27:f7:d5:65:5c:d2:2b:84:
c5:6f:a6:f5:6d:7a:0b:82:a3:77:7a:b8:91:95:c8:
a9:79:c7:6d:97:92:aa:00:9e:51:1c:d5:72:ef:5e:
6b:32:ef:65:80:ad:34:21:b8:52:0c:80:5f:c4:8d:
fd:c4:90:39:15:cc:79:a8:54:2e:33:40:93:d7:5b:
90:62:dc:76:5c:71:94:9d:dc:a9:a6:cb:83:5a:d8:
ec:06:68:9a:eb:df:7a:d1:4c:d1:8c:f9:ad:5a:9b:
bb:09:a3:e1:41:a0:d7:36:a4:3b:07:46:56:0d:03:
1d:0d:a9:ad:79:5c:e1:81:64:45:07:70:b0:d1:38:
98:a5:c2:59:c5:59:04:7a:63:d9:d8:db:fc:67:13:
37:f9:49:41:7a:f3:f7:e0:ac:f1:68:08:85:36:ae:
01:e4:5d:cc:05:f0:00:b2:c8:4e:9b:d4:0b:ec:9f:
65:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C0:8B:06:61:73:C4:53:31:CC:08:8F:44:D2:9B:5B:CB:30:53:48
X509v3 Authority Key Identifier:
keyid:62:9B:50:96:3E:BC:6A:02:2E:27:AE:CB:61:34:20:E4:0E:74:DB:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:5a:f5:ef:8e:08:6f:96:9c:aa:bd:d9:fd:63:2a:a6:78:13:
3f:ee:39:5a:1e:34:09:fe:f3:92:e9:1b:51:cb:ec:44:9f:45:
61:8d:9c:20:95:79:cb:2f:2a:81:65:ab:c8:e7:b6:b4:9c:2a:
ff:07:17:0d:5d:25:c4:3a:15:54:fe:cc:43:f9:94:6e:32:d2:
b9:08:dc:e8:1b:7e:d4:42:4f:1e:92:58:11:f9:45:38:45:d4:
2d:ca:86:28:78:ff:a4:4a:b3:2e:62:0e:a3:d2:57:8a:01:c4:
d2:58:4c:ef:d6:36:af:13:dc:7c:f5:10:d2:a3:f5:86:f1:5f:
fa:04:96:9a:3e:d5:03:46:e8:ee:69:48:47:f7:81:04:45:c4:
14:e0:d7:8a:cb:90:c4:6a:8f:1d:9a:c0:ff:b4:ae:80:25:8c:
c0:80:c8:49:4b:bb:8e:9d:b8:0b:e2:ba:51:4f:60:70:d4:32:
92:40:70:9e:b5:ae:19:6e:ac:09:dd:2a:f8:db:a1:e0:b9:55:
22:39:35:5d:58:7d:84:b5:43:a2:b2:89:20:6e:3b:a4:08:98:
df:50:af:14:cf:f4:37:3f:38:fd:50:75:f7:ad:c2:a3:c2:63:
0b:da:83:87:6e:c2:5f:92:bf:c3:ea:af:de:38:ab:e6:12:74:
d0:97:98:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:24:49 2026 by rpki-client