
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.mft
File: YoElNRN3xZBrhJugUmeYfheuLeQ.mft (raw, json)
Hash identifier: azkVwN0OO4YjmaeUnZbU4DhAdCh93ntEh7OvRBv+jsE=
Subject key identifier: 7B:4E:8E:BB:A3:BA:87:7C:D9:85:53:3C:F7:21:54:EE:35:3D:D0:5F
Authority key identifier: 62:81:25:35:13:77:C5:90:6B:84:9B:A0:52:67:98:7E:17:AE:2D:E4
Certificate issuer: /CN=A914E801/serialNumber=628125351377C5906B849BA05267987E17AE2DE4
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoElNRN3xZBrhJugUmeYfheuLeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.mft
Manifest number: 10
Signing time: Tue 19 May 2026 08:56:42 +0000
Manifest this update: Tue 19 May 2026 08:56:42 +0000
Manifest next update: Tue 26 May 2026 08:56:42 +0000
Files and hashes: 1: YoElNRN3xZBrhJugUmeYfheuLeQ.crl (hash: Nbpl5kltFvKL26z9rPFnEE6O/SwaM6uPOHP3DIWWlNA=)
2: 6FCDD2583E2A11F1A3496A87B6833773.roa (hash: Ai2MwF3dSzKIObesI/BV2cneUL9Hmjliymu4mkNTO8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.crl
rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoElNRN3xZBrhJugUmeYfheuLeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E801, serialNumber=628125351377C5906B849BA05267987E17AE2DE4
Validity
Not Before: May 19 08:56:42 2026 GMT
Not After : May 26 08:56:42 2026 GMT
Subject: CN=6a0c25ca-dbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:23:9b:bb:59:49:3c:f6:cf:11:a6:11:12:8d:
77:e4:8d:ec:33:ac:8f:5a:bc:7f:46:6a:f7:7d:21:
e5:5d:0a:d2:da:c6:40:3d:2d:27:bb:c0:fd:16:91:
95:af:e5:c0:72:c6:c6:fc:3a:b1:15:20:e4:81:be:
66:a5:af:61:50:cc:e1:f1:01:05:20:99:e2:ac:48:
c4:8f:09:9a:c5:23:20:62:d7:bf:a8:e4:62:12:b5:
79:a0:e6:c0:51:f9:0d:46:d4:db:72:ee:4d:f7:e1:
69:6d:15:37:40:ba:02:e6:0a:5c:f5:61:8c:7b:19:
d9:d0:11:88:4a:2b:8a:04:37:97:4d:76:3e:94:1a:
3b:2e:81:ad:c4:af:bc:a9:99:88:9d:d3:02:b6:72:
55:25:4f:4c:86:06:a5:7e:20:ab:90:e3:d4:4a:b0:
31:5f:77:83:69:6a:95:3f:37:cc:23:99:23:20:b0:
33:97:27:42:f4:b3:44:1f:3a:1c:2e:d0:a6:82:5e:
45:eb:60:71:b1:47:ad:e0:a5:ce:4e:72:0a:52:37:
a3:0e:8d:e0:a6:35:e7:eb:98:dc:c2:f2:c8:95:38:
e5:7b:4a:69:7b:49:9e:1f:7b:e1:43:d7:8a:8d:fc:
48:d0:fd:b0:f7:27:87:fa:5f:65:52:f7:91:09:47:
62:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4E:8E:BB:A3:BA:87:7C:D9:85:53:3C:F7:21:54:EE:35:3D:D0:5F
X509v3 Authority Key Identifier:
keyid:62:81:25:35:13:77:C5:90:6B:84:9B:A0:52:67:98:7E:17:AE:2D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoElNRN3xZBrhJugUmeYfheuLeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:42:d1:a7:41:c2:6e:8c:eb:e9:45:bb:b4:1a:1b:fe:44:5d:
ba:93:18:44:a2:e5:d9:4a:61:4f:d1:4d:a6:d0:45:60:47:52:
e6:52:12:de:30:a5:b5:d2:27:7d:8f:68:a8:72:dc:00:c6:01:
00:d3:34:e1:a9:7c:3e:1e:92:0b:a7:43:a7:0f:43:53:ef:ba:
52:6e:ac:89:f3:ba:c7:04:a8:6e:8c:60:73:7a:2a:8a:80:ea:
28:92:6d:23:db:ed:a2:ed:e0:be:72:33:cf:c8:48:7f:7a:17:
cc:fc:8f:45:e4:f7:95:b5:bc:33:86:d6:ee:db:38:51:d7:11:
07:f8:a3:73:19:c1:15:db:df:c9:09:c1:cb:94:9d:29:df:d1:
70:3c:7b:44:8e:26:cd:92:7c:e4:d4:b3:18:82:e0:73:41:70:
f8:83:a3:0d:44:19:7f:f2:e6:f8:55:34:25:bf:f3:f3:a9:5b:
fd:8a:98:cd:4c:e6:50:46:48:ec:5f:ad:31:10:8e:22:a8:3c:
29:c4:d7:77:e4:02:8b:53:84:67:8d:71:65:e5:47:de:a3:c8:
52:c2:68:f0:2b:a5:d8:bd:63:3a:c9:42:ff:76:86:83:92:29:
53:95:35:2a:f6:2a:df:8a:21:10:59:a1:95:83:ca:8b:d7:1c:
ed:1e:3f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:28 2026 by rpki-client