
$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
File: yil3R0MKG-s0C8o51iIv0mQZt9s.mft (raw, json)
Hash identifier: ExlJsdO9aAkmrDHaHI3GO6HhCbYV70Ik1rURfiVzo1Q=
Subject key identifier: 0D:23:13:5E:5C:5C:D6:D9:A6:4C:74:BF:E6:7D:24:33:5F:98:38:80
Authority key identifier: CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB
Certificate issuer: /CN=A91417B0/serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB
Certificate serial: 0120
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
Manifest number: 011B
Signing time: Fri 17 Jul 2026 07:04:56 +0000
Manifest this update: Fri 17 Jul 2026 07:04:55 +0000
Manifest next update: Fri 24 Jul 2026 07:04:55 +0000
Files and hashes: 1: yil3R0MKG-s0C8o51iIv0mQZt9s.crl (hash: VuQsd27G/2j976sBjZzKn1hqXgVgwUQDlKclpJhRq8c=)
2: 5909D86203DB11F0B7D5DD29C4F9AE02.roa (hash: tvmpk8Ite7pSp5NKIoDYEAchnf/U0Ef+pNgJmhuXtZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl
rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91417B0, serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB
Validity
Not Before: Jul 17 07:04:55 2026 GMT
Not After : Jul 24 07:04:55 2026 GMT
Subject: CN=6a59d418-d572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f6:91:1d:ce:d9:36:cf:49:ae:08:e6:43:99:
33:7e:c4:07:6c:d3:fd:06:72:c6:82:c7:01:96:25:
24:22:ae:e4:d5:ec:4f:e6:0b:4e:21:2d:cd:e0:c7:
04:16:c3:69:4e:b8:3e:60:17:e0:82:83:95:07:75:
70:48:28:8f:39:b5:5d:9f:b3:f2:db:53:aa:3a:02:
c8:76:d2:a8:ef:80:f2:ea:56:65:9d:0f:be:83:d0:
8a:62:aa:8b:a4:45:ed:35:82:08:16:9d:e3:0b:05:
60:69:e5:9b:a3:21:fb:6b:d4:f2:8b:7a:55:13:60:
5b:4d:d2:b8:01:d1:05:24:30:cd:d3:9e:f2:fc:b7:
33:a3:1f:be:87:b7:62:ec:71:9e:2f:f0:bb:26:1d:
48:a6:0e:b8:d0:f2:35:de:c7:ad:a6:ff:8d:fc:7a:
c1:a2:32:25:ce:ae:7a:30:1c:ac:a8:b2:2e:55:3c:
bd:68:f1:0c:46:af:4b:a8:43:e8:79:fc:f9:7f:6a:
24:08:a5:e4:ce:e9:ae:fc:1c:53:c6:ce:57:f8:09:
48:ae:8d:de:da:82:07:e0:71:5f:da:2b:7a:58:5a:
93:0e:cd:c7:79:07:d5:2f:58:c4:0c:0b:11:43:33:
db:ef:43:43:69:00:62:f0:2e:b7:37:1c:d8:7a:52:
3e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:23:13:5E:5C:5C:D6:D9:A6:4C:74:BF:E6:7D:24:33:5F:98:38:80
X509v3 Authority Key Identifier:
keyid:CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:07:cb:eb:4f:dc:fe:ac:d0:60:85:81:f0:98:e1:fa:38:fd:
cc:32:99:ef:39:c7:92:81:ca:89:9e:ff:35:ff:c7:d3:51:02:
53:94:45:14:ab:db:ea:b5:f4:b1:5a:f2:7b:48:d7:83:d3:f0:
21:b5:7c:2b:f4:81:0c:7a:04:8b:be:43:25:a3:8f:c6:85:df:
90:73:b0:99:ba:4a:ae:20:52:5f:3a:c9:60:d9:7c:26:1f:f5:
9f:c8:84:0b:e2:4b:81:d2:1a:b4:0c:10:88:95:2c:80:52:e8:
d6:80:32:ac:0c:da:b8:3a:3d:80:0b:ad:fc:1c:6a:80:fd:5a:
c0:1c:9f:ce:80:0c:9a:4c:b9:b3:d3:0a:f8:6e:80:95:ae:68:
e7:3f:2f:9d:78:85:d2:4c:6c:f0:b9:a6:c9:c2:ee:00:56:53:
71:bc:ed:96:a7:55:a2:24:7e:7f:15:41:5c:05:7a:0c:3f:71:
7d:a5:24:64:35:c2:f6:51:e4:de:55:ce:5a:bd:c8:d7:32:3f:
3f:71:4c:9f:d2:62:1c:0c:24:7a:00:34:c9:3d:82:55:b3:4f:
26:6d:5c:59:9d:46:c4:d6:23:5d:d9:c8:84:24:ee:1c:6d:cf:
93:20:e4:23:52:94:ed:a5:e2:09:e8:77:ff:43:82:0e:cf:83:
ab:47:f5:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDE3QjAxMTAvBgNVBAUTKENBMjk3NzQ3NDMwQTFCRUIzNDBCQ0EzOUQ2MjIyRkQy
NjQxOUI3REIwHhcNMjYwNzE3MDcwNDU1WhcNMjYwNzI0MDcwNDU1WjAYMRYwFAYD
VQQDEw02YTU5ZDQxOC1kNTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9PaRHc7ZNs9JrgjmQ5kzfsQHbNP9BnLGgscBliUkIq7k1exP5gtOIS3N4McE
FsNpTrg+YBfggoOVB3VwSCiPObVdn7Py21OqOgLIdtKo74Dy6lZlnQ++g9CKYqqL
pEXtNYIIFp3jCwVgaeWboyH7a9Tyi3pVE2BbTdK4AdEFJDDN057y/Lczox++h7di
7HGeL/C7Jh1Ipg640PI13setpv+N/HrBojIlzq56MBysqLIuVTy9aPEMRq9LqEPo
efz5f2okCKXkzumu/BxTxs5X+AlIro3e2oIH4HFf2it6WFqTDs3HeQfVL1jEDAsR
QzPb70NDaQBi8C63NxzYelI+mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA0jE15c
XNbZpkx0v+Z9JDNfmDiAMB8GA1UdIwQYMBaAFMopd0dDChvrNAvKOdYiL9JkGbfb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTdCMC9FMUFDODIxMEQ4
ODMxMUVGOTU0QTNENzBDNEY5QUUwMi95aWwzUjBNS0ctczBDOG81MWlJdjBtUVp0
OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3lpbDNSME1LRy1zMEM4bzUxaUl2MG1RWnQ5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTdCMC9FMUFDODIxMEQ4ODMxMUVGOTU0QTNENzBDNEY5QUUwMi95aWwzUjBNS0ct
czBDOG81MWlJdjBtUVp0OXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMAfL60/c/qzQYIWB8Jjh+jj9zDKZ7znHkoHKiZ7/Nf/H01ECU5RFFKvb6rX0
sVrye0jXg9PwIbV8K/SBDHoEi75DJaOPxoXfkHOwmbpKriBSXzrJYNl8Jh/1n8iE
C+JLgdIatAwQiJUsgFLo1oAyrAzauDo9gAut/BxqgP1awByfzoAMmky5s9MK+G6A
la5o5z8vnXiF0kxs8LmmycLuAFZTcbztlqdVoiR+fxVBXAV6DD9xfaUkZDXC9lHk
3lXOWr3I1zI/P3FMn9JiHAwkegA0yT2CVbNPJm1cWZ1GxNYjXdnIhCTuHG3PkyDk
I1KU7aXiCeh3/0OCDs+Dq0f1NA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:59 2026 by rpki-client