
$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
File: yWKh77HWheqfDoW0F2aCj2oT7-U.mft (raw, json)
Hash identifier: f9YZoNCaqbNLfq5UdNaYleS12wHOvsft++1UQtZInzs=
Subject key identifier: 4C:76:83:F5:FC:C7:DD:C3:47:64:AD:A0:64:59:82:DB:91:FD:5E:75
Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5
Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5
Certificate serial: 053A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
Manifest number: 0533
Signing time: Sat 04 Jul 2026 23:52:06 +0000
Manifest this update: Sat 04 Jul 2026 23:52:06 +0000
Manifest next update: Sat 11 Jul 2026 23:52:06 +0000
Files and hashes: 1: yWKh77HWheqfDoW0F2aCj2oT7-U.crl (hash: lHU4P5+6hCSiZiseJnxzjtKoMO8G0t5GsZeaG4XoRUU=)
2: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (hash: FCX1sDJ2lcFZeK81Yi1zKSTIFWnL4W2ESjtnUZrEFH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl
rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 23:52:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1338 (0x53a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91188F4, serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5
Validity
Not Before: Jul 4 23:52:06 2026 GMT
Not After : Jul 11 23:52:06 2026 GMT
Subject: CN=6a499ca6-92d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:c2:0d:2b:4f:6f:d1:75:39:4d:f8:6a:c1:
ea:fc:46:f6:60:45:ff:64:4e:44:55:a9:fa:e5:ee:
d2:87:b5:2c:94:52:72:fc:d4:db:6e:6c:c5:c9:2a:
6e:4c:6e:bd:35:2f:19:e7:1f:13:d4:50:28:84:bd:
1d:72:67:01:37:47:ee:20:9a:08:a0:88:6e:e7:e0:
e7:a7:e8:90:ca:71:88:ef:50:17:a8:bf:98:25:4b:
e3:0c:3e:6e:ef:b8:77:da:88:08:27:9e:5a:ba:24:
b7:41:ee:c9:db:0c:17:8b:d6:4d:6c:d9:93:9a:dc:
e1:3d:96:b5:78:c8:e8:ab:f9:47:4e:1f:8f:da:a9:
64:11:0a:e6:f2:2f:2e:3a:a5:f9:bd:2c:92:d3:08:
7e:9f:e0:86:26:bc:82:80:58:36:b1:be:5d:83:70:
fb:23:0a:57:31:91:55:d6:cb:7d:4d:42:7f:a8:d3:
35:80:b5:12:31:f6:2b:cc:2f:b1:32:95:19:94:1a:
d2:49:61:62:f2:4d:41:93:d7:83:fc:79:47:e4:d9:
15:a6:f5:ee:28:9a:29:98:fb:28:9b:e8:01:e4:fa:
c4:51:2e:0a:eb:ab:4c:f2:86:7f:70:24:c3:e0:86:
5c:fa:a0:e0:1b:27:06:30:41:71:75:8c:cb:3d:d4:
35:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:76:83:F5:FC:C7:DD:C3:47:64:AD:A0:64:59:82:DB:91:FD:5E:75
X509v3 Authority Key Identifier:
keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:a9:86:ee:e5:5d:0b:e4:93:d6:54:50:dd:5d:99:ba:10:00:
74:e0:33:50:bc:a1:0c:cc:1d:7e:c2:6e:57:a1:d1:35:4c:16:
20:1a:6d:3b:d3:0b:ac:79:53:79:4b:11:a8:20:66:09:b3:ac:
86:ea:27:92:11:14:a8:b0:ca:57:05:95:a8:48:cf:31:22:ed:
5c:74:78:32:df:75:a8:f2:7c:7d:7c:55:0a:92:67:b4:85:b0:
23:9b:61:73:f3:3b:7d:4e:e7:17:9d:59:58:4c:47:11:f5:ff:
d4:d5:28:a4:d3:b8:7c:76:1a:fe:e2:83:f7:85:4b:81:04:78:
6b:aa:46:1a:50:51:3e:fa:89:fc:90:d8:fe:89:83:79:d5:80:
dd:97:c0:3d:4f:b7:0f:55:ec:bb:cb:06:b6:bc:7d:fb:14:be:
37:15:8e:9b:2e:a2:b3:6a:03:e6:9c:cf:c7:7f:93:54:04:73:
7a:87:9d:f1:0a:35:34:fe:3d:3a:20:68:6b:7d:3e:d3:18:86:
60:0b:39:03:5c:98:67:33:d6:1a:92:a9:9a:be:75:d4:3a:36:
b4:ca:1a:a9:93:df:91:32:41:75:3e:e5:ee:04:37:71:2e:4b:
dd:b7:61:b0:15:70:a3:f1:11:8f:94:d9:44:4e:d1:a1:76:a1:
2d:f1:d8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 21:31:55 2026 by rpki-client