
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
File: YGWA927TklN9X8ollpTPkmFBfEE.mft (raw, json)
Hash identifier: Ud/kcpMbDenRSYtv7v7WUE80yOlyQOAcfLFG/INTxbM=
Subject key identifier: 13:82:7B:3A:A6:4F:D7:B8:CB:94:52:BA:15:02:07:DA:E4:49:C9:9A
Authority key identifier: 60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41
Certificate issuer: /CN=A911F1E6/serialNumber=606580F76ED392537D5FCA259694CF9261417C41
Certificate serial: 0673
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
Manifest number: 065C
Signing time: Sat 04 Apr 2026 22:30:02 +0000
Manifest this update: Sat 04 Apr 2026 22:30:01 +0000
Manifest next update: Sat 11 Apr 2026 22:30:01 +0000
Files and hashes: 1: YGWA927TklN9X8ollpTPkmFBfEE.crl (hash: nw3ZyBN/RPp/SLrOi6wCZfi1ui6onUGj/kxMYMzwQRA=)
2: 4C6FB118CDEC11EB85313B22C4F9AE02.roa (hash: oYSfn8Lw7ZTaZnCe3VDuK6B1QgB0S+Rqon8qQPIAWtk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl
rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1651 (0x673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F1E6, serialNumber=606580F76ED392537D5FCA259694CF9261417C41
Validity
Not Before: Apr 4 22:30:01 2026 GMT
Not After : Apr 11 22:30:01 2026 GMT
Subject: CN=69d190ea-81d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e2:fd:f8:ff:90:d4:ae:c5:e5:43:54:81:1a:
d7:70:04:b0:05:49:fa:a8:9b:e4:4f:ed:03:24:4c:
76:6b:1f:8a:b9:fd:3e:f0:5d:eb:dd:79:fa:e8:92:
04:87:d7:39:3a:01:59:50:b2:94:8e:fd:ec:97:f4:
0c:04:60:d9:3c:c3:5f:96:b5:c7:0b:42:7b:34:0c:
49:04:1b:44:7a:26:cc:82:aa:a4:37:9e:2d:66:2c:
68:3a:39:b2:fe:58:71:ad:c3:45:92:37:28:bf:c5:
86:2b:f5:e9:8b:a3:43:3d:15:66:22:b9:7e:37:ad:
d7:a8:a9:30:03:19:90:59:c6:ab:3e:25:f8:ce:2c:
50:9c:9c:cf:64:47:ab:83:50:b4:3f:d3:cd:1e:4a:
59:ec:6a:c4:df:a3:50:cc:cb:15:61:25:cd:45:26:
0e:ef:0c:18:ad:1b:10:e7:20:51:7f:34:b0:cc:1a:
99:a6:40:c2:8e:38:ac:36:dc:9a:71:44:1d:91:83:
32:aa:b4:d9:b5:ba:af:b9:3d:cb:5b:c8:bb:13:c7:
87:ab:75:28:c6:16:90:66:ce:63:b9:0e:04:67:60:
fe:e4:27:95:30:58:54:d7:9e:d7:47:94:c3:f3:8c:
9c:13:db:c0:53:0d:ca:0d:f9:6c:db:30:47:0f:41:
f3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:82:7B:3A:A6:4F:D7:B8:CB:94:52:BA:15:02:07:DA:E4:49:C9:9A
X509v3 Authority Key Identifier:
keyid:60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:09:16:ad:0b:0c:04:a3:5b:bf:ee:01:f4:b5:cf:18:59:a9:
15:1b:1e:04:1f:83:78:e8:a7:e9:35:f4:3e:6b:25:1c:51:77:
07:1f:d0:17:de:89:ee:f8:03:6d:03:70:db:d9:af:77:29:91:
1f:80:3e:c6:f7:1f:a2:c0:e1:7e:59:68:e9:ad:64:ce:94:ef:
45:5b:30:cd:c4:b3:e3:67:82:63:dc:09:d1:42:2a:99:0a:c3:
00:e4:09:a4:d3:1d:9a:29:89:57:a0:c4:01:c4:c7:68:71:09:
fa:68:6a:0f:95:9b:31:15:9f:b6:85:ce:61:8b:56:7d:ac:d8:
a1:9f:2d:c6:94:32:bc:b9:b6:2a:51:1b:4b:0d:05:6b:48:9e:
9e:9a:d3:6d:fd:e6:aa:41:6e:71:24:0f:83:14:9b:e9:ab:ca:
74:7e:0c:90:d1:89:44:a0:e4:9c:58:cf:f4:1c:82:5c:91:fe:
12:c3:eb:05:8f:d8:c4:e8:59:6d:4f:cd:e3:76:d9:92:dd:39:
3f:2e:77:82:50:76:98:b9:8b:8d:83:95:43:4d:1a:59:30:68:
d4:f8:52:c9:c9:02:1a:af:16:75:89:09:97:5c:41:fb:ea:1e:
5c:a2:d8:ec:26:8a:c7:7b:16:7e:32:6a:a0:94:de:80:87:fc:
ef:ff:a3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 12:43:49 2026 by rpki-client