
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft
File: ylWUEuKiOAIalO8nGO2wAe-W6oU.mft (raw, json)
Hash identifier: Mep3plvnEU2jFjO9CkIT7tTy7LhiyrTBh/FP5pyvQaw=
Subject key identifier: C9:70:CE:B3:76:A7:B5:29:BF:D9:69:32:3D:09:47:97:A0:F0:A5:3C
Authority key identifier: CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85
Certificate issuer: /CN=A9142BA8/serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85
Certificate serial: 04E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft
Manifest number: 04D1
Signing time: Mon 22 Jun 2026 23:52:51 +0000
Manifest this update: Mon 22 Jun 2026 23:52:51 +0000
Manifest next update: Mon 29 Jun 2026 23:52:51 +0000
Files and hashes: 1: ylWUEuKiOAIalO8nGO2wAe-W6oU.crl (hash: Mx8vMMjRpibmh9nYD96UDc8Q2TG4MVJH6uH8KaffQiU=)
2: 4A9AA792720D11EC90C07770C4F9AE02.roa (hash: 2Emw3JGFQ7wXg3MIT3o9jyC2bE1/aIQ3o97sdIea1lY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl
rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 23:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1252 (0x4e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142BA8, serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85
Validity
Not Before: Jun 22 23:52:51 2026 GMT
Not After : Jun 29 23:52:51 2026 GMT
Subject: CN=6a39cad3-fbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:3e:fb:2f:2d:f9:d1:14:fe:ce:e9:80:b2:
d2:18:08:55:cd:c4:4e:22:ef:4d:51:f5:9b:cd:94:
39:38:fa:8c:7f:02:30:50:b1:8f:d8:c2:4f:3b:62:
c9:f1:aa:df:40:d1:c9:56:60:d6:a7:b0:46:ee:fb:
ca:1d:cd:b8:a6:99:35:d3:ab:5f:0b:c9:0b:35:fd:
d9:e9:29:3d:1c:32:3e:5f:b8:cb:23:9b:64:3a:57:
92:65:93:39:c6:57:2e:3e:ac:d7:db:fa:a3:49:42:
0b:74:7a:80:e7:f8:d0:c4:a8:b5:69:ad:6d:09:cd:
06:be:66:a6:53:af:9e:f4:3a:cf:20:de:93:1f:ae:
0d:10:b4:be:f8:ee:29:43:62:b1:d9:78:7c:e5:20:
9d:8e:25:3e:86:a9:d4:26:51:32:1c:09:e9:62:ca:
86:70:52:a5:16:ea:19:d5:b9:a2:91:fb:43:f1:72:
7e:9e:94:17:c2:6c:a9:f1:b2:7d:94:6d:f6:25:eb:
79:59:a9:80:8b:d5:cd:74:57:73:ad:23:a5:b1:aa:
67:94:6d:95:70:8c:9e:71:8e:3d:06:1c:1e:6c:fa:
ea:81:fd:b2:29:8f:bc:a9:f9:a7:96:c4:1b:08:1f:
8d:a4:36:89:43:a0:1f:81:98:2d:0d:df:f5:f6:1b:
f2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:70:CE:B3:76:A7:B5:29:BF:D9:69:32:3D:09:47:97:A0:F0:A5:3C
X509v3 Authority Key Identifier:
keyid:CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e4:69:8e:62:52:27:fd:08:df:7a:e0:46:b5:4b:63:b8:b4:
37:a1:1e:04:32:61:42:d3:34:09:88:a1:f3:1b:a9:06:8e:72:
2e:4f:e8:32:40:92:bd:92:e9:70:06:39:4b:56:7b:aa:d1:1a:
39:6d:77:21:49:cf:2c:0d:76:9f:c9:03:3f:6b:8b:7a:8d:c7:
81:50:9d:70:a8:8e:34:ac:2a:97:fa:c7:9c:55:9a:1a:a1:e1:
36:4d:c3:fc:4d:d5:a5:11:c2:2f:60:ab:d5:1c:f7:bf:7d:4d:
99:bd:a0:3f:f2:7a:1f:c4:ac:0e:65:c0:30:1b:af:d8:f0:ea:
e0:9f:73:06:71:02:ea:1e:c0:d8:af:50:6c:fd:35:d2:fe:7c:
e6:5f:02:ac:54:0a:59:c1:cf:9d:1c:73:82:03:3f:34:af:87:
a0:26:b0:82:f9:e6:54:71:b0:87:ca:c1:6b:9b:dc:5e:f1:69:
bd:93:c3:35:3d:fc:71:a8:bc:92:0c:d3:be:d4:f3:61:46:36:
45:c2:49:fb:d0:d3:dd:8e:4e:a0:f3:80:ff:cb:0e:fa:cd:d5:
49:a6:62:4b:86:ee:3d:3c:55:9f:bf:69:df:7f:d9:65:61:24:
9f:c3:69:02:7c:7b:63:00:ba:a0:6b:2e:fc:4a:c9:64:dc:d1:
96:ad:29:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:28:51 2026 by rpki-client