
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft
File: Y4g-TKLI593aw5h-SE_R1nLZOUk.mft (raw, json)
Hash identifier: YeWANpTpxVGOCvY1e1NZ/cE/l/O7ruKn+LG59onURyA=
Subject key identifier: 9A:29:19:D3:C9:F3:20:DD:DF:27:40:42:50:15:CB:67:36:5D:83:19
Authority key identifier: 63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49
Certificate issuer: /CN=A913E4AA/serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949
Certificate serial: 0CEE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft
Manifest number: 0CDF
Signing time: Fri 10 Jul 2026 18:40:54 +0000
Manifest this update: Fri 10 Jul 2026 18:40:54 +0000
Manifest next update: Fri 17 Jul 2026 18:40:54 +0000
Files and hashes: 1: Y4g-TKLI593aw5h-SE_R1nLZOUk.crl (hash: VJSc+lAM+6O/J2H9y3uYHOxroqieLy9Rf75zvf25Ru0=)
2: 3C48E7BECA0E11F0B519EA6AC4F9AE02.roa (hash: BJhR7XO5jBVX7pJopEIukYOW4YF8aEvCYgvTMv/w/5E=)
3: DF7C7778A97711F0A76BF369C4F9AE02.roa (hash: BQ60yu99DWJ9CNKy9x/LydxX4YGxdVFeZGopEZ5WrOo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl
rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Jul 2026 18:40:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3310 (0xcee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E4AA, serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949
Validity
Not Before: Jul 10 18:40:54 2026 GMT
Not After : Jul 17 18:40:54 2026 GMT
Subject: CN=6a513cb6-c087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:7f:65:44:0f:1f:e1:2f:48:28:5e:98:da:
af:72:18:ea:2b:21:11:1e:74:15:f2:da:f8:ee:9d:
96:d8:18:22:a8:cc:f4:fa:a4:85:3f:2b:9a:f0:93:
b1:80:23:c3:7a:0a:e1:3a:a6:44:a7:9f:8f:ba:9c:
2c:21:06:81:37:4c:7d:16:0b:26:68:10:5b:3f:c4:
99:24:25:c6:c4:b2:1c:db:38:df:cc:a5:09:28:71:
c1:89:ef:90:47:65:33:94:f7:11:dc:e2:33:0f:06:
e8:f1:30:5b:be:66:d5:73:c0:b6:35:f4:df:82:ab:
60:45:90:20:79:79:9f:c0:b7:e3:c5:53:00:e5:b7:
87:f3:f4:c7:2b:79:9b:93:e1:12:05:ff:db:d3:7c:
1d:1c:1a:34:df:31:ab:e7:0b:09:81:d4:a7:c5:c6:
86:4d:f8:b0:67:d0:8a:75:0d:71:80:84:cd:2c:ae:
77:7d:c4:9c:31:81:5c:1e:7a:ba:88:6a:d8:4d:97:
39:6b:80:3b:73:4b:8d:6b:06:f5:71:81:cf:37:ba:
75:c8:73:92:0b:c4:2a:ac:67:98:7a:9c:14:05:a9:
df:d3:e4:03:a2:e9:f9:38:b4:0a:0c:f6:26:17:3f:
76:35:dd:ea:c1:8b:19:2a:95:83:69:ca:91:fb:70:
40:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:29:19:D3:C9:F3:20:DD:DF:27:40:42:50:15:CB:67:36:5D:83:19
X509v3 Authority Key Identifier:
keyid:63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:c7:95:7e:ba:d5:bc:b2:f5:b8:35:ec:c9:7d:eb:9e:f9:84:
fe:eb:d9:3c:9c:46:7a:f6:7a:92:a4:5b:f5:5c:19:34:1a:1c:
7f:58:bd:5b:2c:14:2f:fe:77:47:36:44:85:09:f1:fc:0b:a4:
fe:05:d7:bf:4b:d3:1b:8a:50:00:2e:63:bf:69:a4:27:d3:65:
d9:0f:aa:4e:b3:a4:95:16:67:06:de:2c:15:3a:69:34:7a:e6:
cb:7d:77:53:7c:2a:ec:b5:ae:72:41:ec:ff:17:4d:2a:a3:27:
28:f3:f0:0f:44:7d:3c:44:bb:7d:b4:9c:a3:53:6c:eb:03:75:
0b:1d:28:16:38:83:a5:b5:59:2c:ce:99:82:9e:08:97:ea:db:
e3:29:85:70:64:69:c3:7b:b3:ae:aa:56:36:f8:9c:a6:dc:4d:
e0:14:8f:f8:2e:22:39:30:58:ac:15:51:5c:01:7c:3a:8b:f0:
f5:06:96:c0:59:9b:dc:0d:d4:a1:30:75:6e:42:7c:9c:27:da:
29:1b:72:6f:8a:27:60:b7:d2:62:27:bf:4f:9a:b5:f7:68:97:
21:d9:d5:0d:b3:fa:eb:c6:e0:f5:23:85:7b:55:fb:d2:aa:48:
d8:1f:95:66:42:0b:cb:74:47:ed:0f:e8:58:3e:6a:ff:de:53:
4e:31:c0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 07:45:42 2026 by rpki-client