
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
File: yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json)
Hash identifier: 3M4Ie4dNOUmaDgOsmgo7EA/+LMESuZygOSXl+XAu4QQ=
Subject key identifier: 5F:B6:80:D3:05:80:6B:93:1B:ED:C3:CA:53:99:E1:0A:35:91:5C:E2
Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40
Certificate issuer: /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
Certificate serial: 0C5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
Manifest number: 0C3F
Signing time: Fri 24 Jul 2026 19:07:48 +0000
Manifest this update: Fri 24 Jul 2026 19:07:47 +0000
Manifest next update: Fri 31 Jul 2026 19:07:47 +0000
Files and hashes: 1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: FNED7KsnBnzuYwe3ST+xNdz3B4cyysZqyjQpNuiJosY=)
2: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: iYKsxDWu3S2WTBmkPPCzWiLUj+VpiqqOdy4MbHyYgYs=)
3: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: ltYps8if0G6nvc97HNna0dOwk3QKPLcJcqz29XZNF8A=)
4: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: NNkPApcMl17Fe2ICzZKJl1AOkbO+YYiI8uoP32kJG3k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl
rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 19:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3165 (0xc5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
Validity
Not Before: Jul 24 19:07:47 2026 GMT
Not After : Jul 31 19:07:47 2026 GMT
Subject: CN=6a63b804-945b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:86:1e:19:8f:27:83:a9:57:f0:86:92:ab:
90:4a:1a:1d:77:15:78:c2:7d:e7:8c:c1:c6:3e:84:
e1:16:99:25:26:9d:90:3a:2d:4a:f3:03:29:2e:09:
e3:5d:42:ef:6e:8c:19:ed:5c:6d:0c:15:5d:db:c2:
05:51:96:e6:5e:f9:2e:01:94:f2:d1:2a:9e:70:8c:
18:f0:a1:ce:31:f8:5e:4a:a6:da:1f:9e:4f:61:18:
d5:33:fb:cb:ed:db:ce:c2:61:90:43:e1:53:18:1f:
c9:85:ce:62:f2:73:2d:62:e8:b9:d1:c0:e3:a9:ba:
f1:98:bd:54:ab:a5:af:b1:d4:80:6a:92:9e:f6:c0:
0b:f3:90:1b:c1:23:3d:5c:a7:73:d4:85:22:79:1c:
b4:cd:64:7b:84:f7:5b:c1:8e:a6:29:d6:cf:5d:3a:
06:12:5d:e8:d6:53:dd:2e:4a:37:6b:61:22:b5:00:
bf:39:7d:3f:a8:4a:8a:3b:9d:a5:9a:60:ee:44:7e:
b1:77:22:96:f4:08:80:aa:94:f0:c5:7c:84:4d:fa:
39:46:79:ec:9e:e4:76:a2:04:eb:fb:8f:c2:9d:29:
43:92:5b:87:85:e0:18:0a:eb:6e:47:b0:56:51:e6:
89:b2:bc:29:2b:84:0a:22:ab:2b:8b:2e:40:3d:2e:
b3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B6:80:D3:05:80:6B:93:1B:ED:C3:CA:53:99:E1:0A:35:91:5C:E2
X509v3 Authority Key Identifier:
keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:41:6f:ef:df:21:78:71:1d:48:43:45:ab:30:67:c6:d8:c4:
6f:bc:72:8f:1a:26:53:9a:32:a2:5e:cb:1e:07:38:37:a8:8a:
e4:16:74:eb:2e:8d:52:5a:b1:e3:e3:60:e2:df:88:fe:ee:28:
aa:f6:68:b7:5b:f8:1a:5f:3b:cc:af:70:0e:db:c9:8c:58:d3:
05:ba:fd:ca:29:ee:9c:fa:a4:ff:1b:67:ca:4c:43:a2:6a:12:
62:1d:b8:17:d4:a2:55:81:e1:4f:25:a1:94:f3:0a:5b:86:22:
78:98:7a:d7:71:c4:20:16:69:c6:a1:15:b1:fa:21:3e:e6:1c:
1c:f1:14:b7:8d:b9:65:d2:de:19:6d:58:94:dc:a9:0e:ed:84:
84:b0:38:75:b3:da:3b:b2:71:91:59:41:1e:56:e4:73:23:27:
3a:c1:47:7f:1e:c8:68:6a:b6:3e:3b:e7:f2:ae:40:04:6b:26:
8d:13:8f:1c:3d:e0:eb:8d:72:91:b2:5f:cb:e0:1c:60:f0:91:
31:31:37:8a:72:76:3e:fb:6e:f6:8a:e3:68:54:a3:f9:9b:de:
2c:06:12:93:2b:9d:00:71:6d:fc:0e:45:ad:aa:b5:15:32:75:
25:e6:ec:01:d6:41:ee:79:a3:f8:73:5b:01:52:48:cc:28:6e:
64:e8:4f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:20:16 2026 by rpki-client