
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
File: YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json)
Hash identifier: I+PZE2l5zWJw51oiZKT62h2hEs5FeVF733uGZ9Codlw=
Subject key identifier: 04:66:AC:5D:76:00:17:A5:74:2F:01:ED:7C:06:F5:37:A7:12:63:52
Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Certificate serial: 057D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
Manifest number: 0564
Signing time: Wed 20 May 2026 23:28:55 +0000
Manifest this update: Wed 20 May 2026 23:28:54 +0000
Manifest next update: Wed 27 May 2026 23:28:54 +0000
Files and hashes: 1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: gWQOJk3yw7nFMv/42AWmTzy5Lu5JuzPSP2SfgZH1UBo=)
2: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: 79TNb9upWSGm9yBDGngscbHy7jvkh/bVgSJa7W+FYrI=)
3: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: MCVYIDVOykTmNbo90DABkV8onNjQjPmA4NHqWOQwZM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl
rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1405 (0x57d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Validity
Not Before: May 20 23:28:54 2026 GMT
Not After : May 27 23:28:54 2026 GMT
Subject: CN=6a0e43b6-3c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:dd:42:6f:18:e8:2b:f3:88:10:bd:0a:4b:
2c:a5:02:30:15:f0:2a:5d:18:b0:f1:42:0f:18:46:
93:3c:73:2b:77:8f:9b:44:5c:2f:f8:5d:70:09:43:
a7:b9:33:b9:e2:8c:75:ea:af:68:53:12:53:30:2a:
e7:9f:35:c4:a6:2c:c4:51:9f:19:eb:d2:ae:7b:0c:
2f:0a:3d:59:51:2e:13:67:57:11:2a:16:58:4f:35:
9f:0f:5b:6c:5f:a0:08:b9:91:75:85:6b:7e:52:0b:
4f:0c:72:6c:97:7d:5d:ba:85:cb:17:c4:69:b4:77:
32:6a:5d:39:65:91:9d:60:81:ac:c6:1f:ef:01:3f:
b4:36:57:4f:46:a5:1d:1e:ab:ef:fb:ca:84:5f:78:
78:ad:8e:54:a6:a7:c4:59:a9:30:58:e1:9c:db:f7:
6b:b7:36:06:52:13:cc:98:db:32:f6:f5:57:25:bc:
ab:bb:11:c7:fa:bc:57:95:33:2e:8c:ac:4e:6b:0e:
30:00:78:db:f7:29:1d:6e:32:75:e3:47:cf:c9:07:
2c:cb:c7:d7:26:d3:2d:89:bf:4b:73:42:8e:7a:42:
e3:7c:6c:d5:43:c3:77:9f:28:7f:4e:1d:26:e6:d6:
f4:8b:a3:22:1f:9f:e0:8e:63:36:a7:e1:59:56:6f:
34:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:66:AC:5D:76:00:17:A5:74:2F:01:ED:7C:06:F5:37:A7:12:63:52
X509v3 Authority Key Identifier:
keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:52:99:07:24:ba:ea:a3:90:be:fa:2b:ae:a6:76:d0:0e:04:
f9:f0:e7:9d:5d:01:6e:1e:64:f9:59:51:00:be:80:f6:f8:43:
ce:40:12:c4:50:5c:8b:c0:5c:f4:77:34:22:2d:7e:57:87:e8:
84:e3:ef:35:7b:08:d1:a8:63:3a:9b:3d:35:62:83:e5:33:55:
60:64:a2:dd:3a:0f:8e:ef:e4:57:78:5b:76:4e:93:f5:7f:49:
23:f4:dc:50:7a:ae:cf:59:ec:81:f0:95:81:65:29:85:2d:02:
f1:c5:3b:b7:46:c1:18:83:3d:56:86:e7:c0:f9:7d:c9:22:82:
d3:c8:b1:48:d4:52:66:bc:f0:27:59:e7:06:51:61:11:aa:49:
f8:c2:98:82:40:78:8a:52:8d:2f:18:0a:d4:ad:8f:7f:b4:3d:
c8:df:fb:0d:a7:1e:89:d0:0d:aa:1f:df:37:17:a1:f6:1b:32:
41:d6:c8:75:d4:6e:2f:21:5c:8e:d1:53:d3:c4:9a:4c:92:73:
9c:b5:42:04:b9:81:68:f2:2e:e6:e5:48:b7:5d:4f:4f:72:7a:
1e:66:81:2b:9e:05:a7:33:20:77:be:3a:d7:1c:7b:25:cd:cb:
81:ff:29:ec:7b:f6:55:c1:9f:82:92:e3:22:fa:ce:df:de:85:
d0:c1:f6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:34 2026 by rpki-client