
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
File: yozvXh2MPaWsm67lsZbvBmCaOVk.mft (raw, json)
Hash identifier: NF5aREhSi+h4QLPJZUR8XN16KMiMU/9d4tYoS88h8M0=
Subject key identifier: 77:2B:33:91:3C:59:B4:D7:33:99:C3:B0:8F:AB:7F:8A:49:E7:E0:5B
Authority key identifier: CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59
Certificate issuer: /CN=A911B5BA/serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959
Certificate serial: 0BF2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
Manifest number: 0BE9
Signing time: Mon 22 Jun 2026 18:53:12 +0000
Manifest this update: Mon 22 Jun 2026 18:53:12 +0000
Manifest next update: Mon 29 Jun 2026 18:53:12 +0000
Files and hashes: 1: yozvXh2MPaWsm67lsZbvBmCaOVk.crl (hash: ELE62h5xP8P8Gi0f6a86MBe1zCnBdUA6/KOCA8vUoPc=)
2: 410BAD2095F011EFA9137C67C4F9AE02.roa (hash: nsk1UqBSMxXhAmerfIUuT9a9NoDkCJE2EAsvPLMgex8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl
rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 18:53:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3058 (0xbf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5BA, serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959
Validity
Not Before: Jun 22 18:53:12 2026 GMT
Not After : Jun 29 18:53:12 2026 GMT
Subject: CN=6a398498-c8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:42:a6:d7:46:83:86:dc:b5:8a:8d:6e:10:
b1:26:27:ff:b7:65:5c:db:46:ab:75:a7:80:9e:66:
45:3f:95:68:89:35:61:5d:f6:be:b3:59:10:0f:f2:
d0:f7:96:5d:bd:b8:9c:38:78:49:25:45:a4:b7:8c:
d4:58:5b:6f:ef:3d:5d:53:2d:fc:96:d1:99:4c:01:
2f:bb:ee:3a:f2:84:8f:6c:ee:6a:3e:f8:6c:a8:4c:
63:d3:af:18:d3:bb:33:ff:6c:b4:02:04:c3:32:35:
1d:d6:fd:fc:ce:31:58:a7:99:82:94:1e:eb:02:5c:
8b:92:51:34:aa:6f:69:ed:f6:46:8f:29:8d:fa:ec:
d6:84:54:96:1e:80:38:3b:b7:21:ff:c8:68:fe:e8:
28:9f:09:6b:fb:6f:d8:0e:74:10:2d:ff:d4:a3:34:
80:92:67:cc:51:ce:5f:f4:2f:2d:a3:73:29:97:33:
ae:af:f1:47:b3:68:04:ab:83:54:2f:4e:f6:eb:79:
98:90:96:e3:0a:78:28:7f:1b:5d:14:f4:04:10:e7:
ad:79:ff:eb:c7:f7:63:01:1e:c4:6c:ff:43:ff:6f:
54:8d:51:b3:a7:8c:b6:0f:5c:56:5c:5a:85:b4:51:
84:1e:ff:d9:ff:17:db:d9:6f:7c:9a:93:4e:66:5c:
a8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2B:33:91:3C:59:B4:D7:33:99:C3:B0:8F:AB:7F:8A:49:E7:E0:5B
X509v3 Authority Key Identifier:
keyid:CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:67:20:42:a1:80:83:2a:47:fe:42:36:07:d0:41:55:cd:35:
69:b1:06:3d:58:d0:17:ef:33:43:5c:01:71:92:51:d8:b5:e4:
93:c3:8e:a1:bd:a3:b6:8e:23:f8:d6:a6:17:3f:21:76:5d:4d:
a9:9a:58:34:f8:f3:8e:ed:ff:6c:f1:14:42:48:aa:59:a0:86:
83:5a:d1:9b:43:e2:fe:15:65:12:0c:2b:55:2e:53:20:43:98:
71:27:7b:9e:bf:ee:57:c5:f4:74:17:2c:ee:2e:8f:b9:0d:82:
9b:cb:d9:a8:11:70:28:b3:5d:b4:8c:0c:2b:61:a4:90:86:46:
13:1f:a8:71:0c:7b:5d:33:00:f7:aa:7c:1d:df:ef:55:7c:f8:
06:35:c9:ac:25:d3:86:b6:93:13:a8:4a:45:6f:a0:06:c7:4c:
c2:80:0e:5b:34:2e:b9:aa:f4:6c:fd:77:a2:0e:80:cd:c5:e7:
25:2f:6d:35:21:32:9b:f8:b7:2d:46:f9:14:a7:43:96:9e:e9:
eb:3f:d5:f0:ef:67:6d:60:67:ac:4d:db:01:8a:c3:09:01:46:
c6:a4:32:2a:bc:36:c4:af:56:bd:e8:70:89:62:27:c9:e8:57:
3a:f1:0a:6e:86:a2:a8:59:7d:6c:1e:28:b3:6a:f7:cf:b0:da:
34:2f:61:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:14:11 2026 by rpki-client