
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
File: Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft (raw, json)
Hash identifier: YKgsZ0cZa6VO1/4fS6jok/B1EGd6nQocSqNsJyu6oa0=
Subject key identifier: 85:D8:E0:1E:42:D9:11:79:52:50:CD:4B:F0:1B:E5:9A:F9:85:AA:FE
Authority key identifier: 63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81
Certificate issuer: /CN=A9118689/serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881
Certificate serial: 01B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
Manifest number: 01AF
Signing time: Thu 21 May 2026 04:05:19 +0000
Manifest this update: Thu 21 May 2026 04:05:18 +0000
Manifest next update: Thu 28 May 2026 04:05:18 +0000
Files and hashes: 1: Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl (hash: QOa0rXzfkoFLyU2phQZJ/yr6KF+JzMh0Df6p7a6AdrA=)
2: D1D880A6C4FB11EEA30ECF34C4F9AE02.roa (hash: MByRbKBm+JUM4LT1eboClzkfZWMq5pWfRvnvdbt+Df4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl
rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118689, serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881
Validity
Not Before: May 21 04:05:18 2026 GMT
Not After : May 28 04:05:18 2026 GMT
Subject: CN=6a0e847e-7b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7c:a6:0b:7e:f6:df:9e:bf:ce:ca:71:31:ce:
35:a0:bb:ff:62:38:e1:59:2e:f3:f0:e7:fb:95:67:
1e:13:58:c0:f2:a6:66:25:e4:dd:ef:e6:ad:0f:f9:
63:3b:dd:d1:1f:66:7f:60:12:2e:c7:6d:25:e4:5c:
45:21:33:80:78:dd:f4:da:dc:f9:f3:df:bc:dd:45:
61:0c:88:27:02:e1:6c:fa:e2:f4:39:d2:c5:55:33:
44:c7:ef:c2:97:0f:b7:cb:fe:50:2e:b0:43:1d:2a:
d4:f4:46:21:d5:70:97:bc:3e:08:2a:e8:31:63:c5:
cc:40:7b:c3:95:b9:9d:8a:f7:10:4c:dc:ec:3e:fe:
52:68:22:23:59:f3:40:ee:aa:4d:6b:61:d5:1c:06:
98:27:f5:ed:24:f7:15:7a:c1:f1:51:55:88:31:64:
30:c4:b3:dc:57:aa:83:2d:2b:9b:e5:f1:ef:7e:ff:
5f:17:e2:bc:99:f0:0e:de:fd:35:c2:91:e6:46:07:
eb:6e:9c:00:2e:e3:fb:83:20:d1:d5:9a:64:2a:c4:
8e:e0:89:a5:8d:fa:72:98:0b:e0:ae:f1:d9:ec:0d:
58:43:10:41:c7:27:34:7b:b0:f6:60:ac:93:7f:9c:
fc:0d:6d:30:79:a0:1c:7d:b3:f3:68:20:7f:14:15:
ad:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D8:E0:1E:42:D9:11:79:52:50:CD:4B:F0:1B:E5:9A:F9:85:AA:FE
X509v3 Authority Key Identifier:
keyid:63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:bb:f3:de:d8:b9:4f:8b:a3:68:0e:51:57:32:be:91:14:f0:
12:1b:7d:96:30:89:e0:27:9f:e4:31:42:23:05:1e:a8:8a:4d:
55:86:5b:25:08:a1:9e:82:60:62:75:df:67:ab:be:7c:d6:5c:
27:64:38:68:23:4f:85:4e:40:5e:4c:40:79:1f:c6:16:fd:8e:
2a:53:61:7c:ae:47:5f:b8:aa:9d:c6:ae:fd:0a:cf:03:c7:b6:
b9:1d:7e:01:8e:3e:bf:56:fa:0d:86:0a:43:e7:9c:af:ed:1c:
e4:bd:83:e0:1b:6c:7b:ef:08:1f:8a:ab:7a:72:33:30:53:5a:
c4:06:13:8a:92:ec:a6:ac:32:9b:5f:54:eb:80:60:12:8b:b5:
4b:51:c3:38:41:b0:e6:e4:3e:8a:ff:2b:c4:73:72:f2:87:6f:
72:39:22:2c:d3:51:98:39:1b:a3:41:02:b5:6b:65:de:a6:72:
a2:c9:75:ec:16:4a:75:dc:1f:bd:11:bb:13:63:50:46:e2:ff:
b3:33:ed:58:0d:8a:09:ec:a1:c5:9f:3b:72:05:dc:38:c0:36:
cd:0d:88:23:97:1e:12:2d:7d:41:54:01:e0:0e:35:48:df:8d:
25:d8:d2:80:0d:55:36:30:15:84:a5:e0:ec:85:1e:fd:74:10:
2d:dd:f0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:16 2026 by rpki-client