
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
File: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft (raw, json)
Hash identifier: g9zrZaTOb93SEYZC+aeuAh493JYS8e831KjCGfQ1WVU=
Subject key identifier: 9B:AA:EE:D2:86:0D:E0:7C:92:F7:83:41:84:45:66:84:6E:81:33:84
Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
Certificate issuer: /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Certificate serial: 0860
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
Manifest number: 0843
Signing time: Tue 26 May 2026 21:05:33 +0000
Manifest this update: Tue 26 May 2026 21:05:32 +0000
Manifest next update: Tue 02 Jun 2026 21:05:32 +0000
Files and hashes: 1: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl (hash: nzyHlLO1AwSOfmMm50VdY5C614Uxhj6x8uvOVODE4cs=)
2: 7A299148000311F191DFD8AE3C6F56BC.roa (hash: CFc84riH2MB87zU/DpJZ0VZbTskfpT/fcnC+lNYeR50=)
3: 8D0DD6C2690811EFAC6DE109C4F9AE02.roa (hash: XxTxvEaSE5hUqY+FgqA+JjfK7ug+VG+l0z5zQK56p5k=)
4: 7AAA8154000311F191DFD8AE3C6F56BC.roa (hash: x6G+iXovRti/BntEfhaZ6wM5ntzRbJdW9j8h7+t6XG0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 02 Jun 2026 21:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2144 (0x860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130395, serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Validity
Not Before: May 26 21:05:32 2026 GMT
Not After : Jun 2 21:05:32 2026 GMT
Subject: CN=6a160b1d-4b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:64:2c:d0:7a:e2:82:5b:a5:f5:bf:0a:8d:00:
0c:ed:be:9f:f2:de:e2:99:c4:61:1e:95:83:79:cd:
07:a3:63:fa:07:43:f8:c3:5e:76:e6:f3:6d:d7:9e:
01:7d:9e:5f:42:19:4a:db:7a:58:d9:34:80:9a:0d:
9e:cc:eb:c2:77:dd:af:72:56:f9:4c:05:61:8c:5e:
3c:e8:a6:46:86:db:14:cd:2a:36:b8:be:f7:0c:bb:
5c:1b:77:b0:e0:19:e5:40:f0:a5:3d:07:ba:45:8b:
80:9e:61:f0:5c:1e:d8:5d:0f:59:e9:a6:60:9b:69:
55:75:f8:7d:68:30:77:e3:d7:53:d9:45:0b:24:ce:
32:c5:c2:57:cd:b3:96:03:69:99:97:1a:b6:26:69:
13:76:74:40:38:e9:33:60:43:de:c9:03:6a:51:35:
b8:21:df:5f:a8:b4:25:e5:a0:0e:c8:9b:11:6c:0d:
ef:fe:b1:0e:97:9b:51:1a:35:dc:30:78:51:a8:98:
62:e9:f5:9d:d9:6f:13:67:08:a0:b1:76:44:ff:5a:
c2:be:db:54:0b:c5:c7:e3:50:fb:5a:e3:11:98:71:
c1:5e:e2:aa:ae:41:e5:f6:4b:0b:0f:22:ec:c1:58:
20:7e:67:fc:e1:d4:d1:98:01:63:1e:e6:3e:ac:e0:
4b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AA:EE:D2:86:0D:E0:7C:92:F7:83:41:84:45:66:84:6E:81:33:84
X509v3 Authority Key Identifier:
keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:7b:8a:67:67:d1:12:a6:38:e6:78:f6:70:9e:2c:14:36:ce:
6b:ab:70:2b:5e:28:98:f5:bd:24:f3:f4:2a:f9:8a:f0:6e:e1:
07:32:85:5c:1b:b1:3d:7f:94:6c:7a:a2:95:25:96:6b:fb:21:
8d:bc:83:5b:9c:78:ca:48:55:73:47:f3:f1:b5:23:a1:44:dd:
44:8e:d0:6d:26:51:46:22:a1:fe:c4:a1:bf:cd:ac:31:18:5b:
b8:72:35:02:c9:8d:9b:34:2f:c7:3c:85:bb:60:3e:b9:83:c2:
14:7e:54:81:93:0a:1d:4f:55:19:fc:53:4f:fb:9c:8e:a5:4a:
15:1f:2f:a1:f5:db:9c:ff:36:37:62:59:d1:33:f6:ce:bb:ce:
ee:58:56:5f:46:24:17:23:df:40:50:d1:1d:8d:3f:02:69:66:
54:b4:49:0d:8d:b0:f8:ed:eb:4a:03:ed:bb:10:28:73:d8:bc:
6c:30:f1:4d:4e:8b:49:7a:63:bd:1f:8d:09:9a:f9:47:91:25:
72:26:9f:1c:4e:fc:b8:dd:df:5f:7f:0a:34:ca:f1:38:51:f8:
6a:98:aa:ad:6d:6d:10:60:a5:9f:31:02:7e:8f:88:47:95:6b:
68:eb:38:a7:81:9c:aa:b1:c5:be:ca:c0:f5:df:73:8c:94:8c:
81:0a:d5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 05:52:23 2026 by rpki-client