
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
File: yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft (raw, json)
Hash identifier: NPUXOxy6DQuX/LoYxRJ9eDckFTL3+Th8M1ZcLCtXtqg=
Subject key identifier: 2E:75:D9:B9:57:CC:89:0E:A7:90:BF:3B:2C:D9:67:A7:4C:AE:2E:14
Authority key identifier: CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1
Certificate issuer: /CN=A913814E/serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
Certificate serial: 02D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
Manifest number: 02CB
Signing time: Tue 01 Sep 2026 01:16:45 +0000
Manifest this update: Tue 01 Sep 2026 01:16:44 +0000
Manifest next update: Tue 08 Sep 2026 01:16:44 +0000
Files and hashes: 1: yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl (hash: I1dIDNYyiQ7NBzXHbg6I9whkMzQOYHzZRnq3O9K46Kw=)
2: D479653E5F2911EDB481A53EC4F9AE02.roa (hash: cBSNwUp1ty95RJVAcjn2qIdEHHmRG0/43TIWKpupexs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl
rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Sep 2026 01:16:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 721 (0x2d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913814E, serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
Validity
Not Before: Sep 1 01:16:44 2026 GMT
Not After : Sep 8 01:16:44 2026 GMT
Subject: CN=6a96277c-7f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:95:dd:63:da:71:6f:fe:1c:a1:69:f4:51:
b4:04:42:ea:51:df:6b:3a:df:8b:e9:63:94:4a:3c:
00:13:78:26:d9:76:50:34:fc:39:68:1d:30:b9:16:
2d:7e:ac:a3:4e:9d:55:2c:a8:10:e3:95:73:0f:59:
f5:85:5b:9c:b8:e4:03:28:6a:df:3d:ae:44:9e:d1:
0a:d1:2f:8b:6f:0d:e6:8f:6c:63:c4:e6:9e:f2:6e:
2c:42:8d:17:cc:19:90:c0:3f:0e:ea:61:a5:d4:b4:
a2:1d:a9:37:18:f5:c1:04:79:b9:84:6f:4a:63:98:
7c:f8:ac:48:bd:25:4b:c8:33:c9:ee:fe:2e:06:f6:
85:d9:c4:5f:23:dc:ae:a0:3c:f5:a4:6f:0b:75:9b:
cb:e0:bb:83:86:db:06:1a:5e:87:53:5f:92:2b:95:
27:37:83:79:65:12:8b:90:01:53:f1:a5:2f:68:30:
fa:42:8b:5f:8b:dd:70:71:d0:4b:c7:df:74:f4:6d:
40:55:04:e4:55:b3:8d:ba:b0:a7:97:82:37:d3:af:
86:f3:62:e4:bc:55:92:0f:56:79:a8:d7:0d:ac:1e:
9f:f4:7d:42:97:1e:33:ab:32:b1:f2:44:8a:d7:3d:
6e:0d:a2:a8:41:37:00:8e:87:1d:72:20:39:fe:26:
6e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:75:D9:B9:57:CC:89:0E:A7:90:BF:3B:2C:D9:67:A7:4C:AE:2E:14
X509v3 Authority Key Identifier:
keyid:CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:1f:ab:b7:75:c0:71:6f:69:7f:81:1d:81:50:05:ef:93:70:
b7:27:e7:71:62:5a:91:cd:98:a6:13:6c:20:9e:ff:fd:78:6c:
13:83:44:4d:76:f9:88:60:7b:ed:f4:85:39:60:32:1b:eb:91:
d3:ae:19:66:89:e4:8b:1c:5a:1a:e7:41:ab:bd:4b:09:98:59:
14:44:66:3f:04:0e:96:d9:a2:37:f5:31:6e:22:60:19:51:d3:
9f:dd:da:b7:5f:0c:e6:0f:94:9e:9d:54:68:8e:f2:03:2c:c9:
07:7d:24:9f:2b:5e:ea:dd:50:ba:87:e0:e6:9b:bc:02:4d:60:
cd:5d:7a:df:34:b7:8f:b0:0e:89:95:8b:5e:f7:e9:02:95:26:
3e:be:06:68:69:cb:64:d0:10:ba:3a:5d:95:ea:c2:0d:b9:61:
05:4f:e0:3f:52:90:7c:51:17:f7:46:85:31:bd:43:29:c7:d3:
50:fa:07:a1:bb:4b:6a:b6:cb:47:27:c9:b6:d1:38:36:d8:fd:
fe:19:bd:63:8d:a3:d6:0a:57:59:3f:97:b3:e3:2d:7f:87:3a:
de:34:a0:55:06:5d:35:e4:55:87:86:26:e3:74:a3:fe:3d:f3:
8b:27:8a:e8:ab:e9:53:83:df:3f:72:86:9b:4f:53:d1:85:47:
c8:e5:dd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:48:12 2026 by rpki-client