
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
File: YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft (raw, json)
Hash identifier: a+loIrLw9d3xElzQDjj/Avi77IXpPrGS57Rrfo1qlXg=
Subject key identifier: E1:CD:15:AB:F1:FC:A0:3B:B9:BA:42:4C:E3:21:C4:35:63:12:6A:34
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Certificate issuer: /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial: 0229
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
Manifest number: 0217
Signing time: Mon 31 Aug 2026 03:51:55 +0000
Manifest this update: Mon 31 Aug 2026 03:51:54 +0000
Manifest next update: Mon 07 Sep 2026 03:51:54 +0000
Files and hashes: 1: YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl (hash: Ub0FPnTvlzEIcPxaLwjR9khIPg2kFAoPYMSK5DFNk4c=)
2: CDB51BDC739411EEB8BAE858C4F9AE02.roa (hash: FCrLiwYHO+gGxzV/UjjW2dmefunZUp5R/lmKyNKr/CI=)
3: CE24A9DE739411EEB8BAE858C4F9AE02.roa (hash: 4ahWqxQvl8elCs1UptFAhORYOkZcTrsAbGkMLik0CTE=)
4: CD34C770739411EEB8BAE858C4F9AE02.roa (hash: eVVo4i8w9S86ym4XeGvHdcL3OB0X4iTyUgG3ihZswCE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 03:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Validity
Not Before: Aug 31 03:51:54 2026 GMT
Not After : Sep 7 03:51:54 2026 GMT
Subject: CN=6a94fa5b-c0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7f:21:52:c5:07:cb:fd:4f:89:f5:05:bc:19:
e1:72:e0:2a:eb:a2:50:7c:b1:1d:da:4b:08:b3:de:
e6:22:9b:7b:90:29:a6:a9:63:33:df:47:9d:6c:86:
eb:0a:c5:e1:30:bf:69:aa:71:13:04:78:81:1d:5b:
8a:2c:db:56:aa:6e:5e:7f:2c:37:19:17:f2:2a:51:
1e:84:b8:fa:19:9c:b4:96:88:dc:8e:87:96:ee:d1:
5e:d4:0e:34:20:c3:35:ab:a6:df:33:05:d4:56:d6:
46:95:d3:0a:f2:0e:52:a2:65:6c:10:9d:7c:6e:34:
42:fd:c4:2b:52:aa:b6:ed:79:78:8c:8c:09:ee:54:
25:63:07:d5:cc:85:c8:8d:7c:03:a1:f5:f3:23:21:
a0:5f:5c:05:f1:4d:90:86:fe:39:0f:d5:90:6f:e5:
96:34:ad:99:9b:59:cb:a3:1c:56:df:93:c3:cf:c3:
09:67:70:9f:86:2b:cf:de:27:4a:42:5d:07:19:1a:
1e:47:75:18:d9:43:42:ae:bc:89:87:95:f1:a8:16:
5c:4d:1c:48:0c:98:ec:30:e2:53:82:2e:67:66:7b:
c9:08:aa:0d:4a:35:51:90:38:65:44:26:7f:10:ed:
d9:81:f3:ee:70:23:c6:f8:47:82:2f:e2:c4:50:65:
54:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CD:15:AB:F1:FC:A0:3B:B9:BA:42:4C:E3:21:C4:35:63:12:6A:34
X509v3 Authority Key Identifier:
keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:bc:31:12:0e:bb:2e:98:38:a8:b4:0e:97:06:3e:47:3e:bc:
03:08:04:57:7e:65:75:22:89:4f:8a:30:bc:fa:c8:85:7e:bf:
95:da:c7:27:03:81:ca:ff:dc:c3:b2:a9:0e:36:11:8f:12:f6:
97:c1:fc:00:b0:6d:80:ee:bc:fb:38:6a:49:bf:1b:06:ce:4b:
3b:c9:b9:2c:18:5d:66:df:bb:d5:0b:5f:24:06:4e:ca:ea:b5:
dc:07:fb:10:c5:b1:48:e6:e2:e9:57:83:ae:9b:36:c2:24:3c:
e9:bd:38:20:5d:dc:53:17:c3:3d:2b:1e:15:c3:4f:aa:a6:17:
c5:07:08:d9:3f:56:26:d8:cf:1c:06:d9:63:bb:2b:4f:42:55:
68:5e:c7:0e:3b:0f:dc:ad:e8:43:02:f7:54:c5:d8:42:98:9b:
05:86:4a:f5:6f:88:fb:eb:23:55:9c:37:f7:7a:c0:e6:1a:54:
60:8f:e0:ae:da:aa:8e:3c:5d:98:f9:d4:8e:60:92:d9:c2:ec:
48:c7:e4:24:5d:af:64:11:03:0a:f9:88:54:3c:9e:0f:0c:42:
25:48:41:f4:74:56:3e:08:e7:81:49:92:9e:f8:2c:47:f9:eb:
6c:32:3b:84:37:b7:13:ce:01:4a:29:c8:b5:d9:9e:c0:36:c9:
31:e7:54:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 13:22:51 2026 by rpki-client