
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
File: y-ExoIOkVjx8Q52webZLatEQGnw.mft (raw, json)
Hash identifier: +fff7VityX/Q/BpVU6MGJD6PkjO5IyTDqgnFLM6Yz/o=
Subject key identifier: 14:66:AF:FA:81:F4:33:5E:12:EC:94:DC:A4:B3:38:D0:79:9F:C7:53
Authority key identifier: CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C
Certificate issuer: /CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
Certificate serial: 094E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
Manifest number: 0934
Signing time: Wed 20 May 2026 20:15:05 +0000
Manifest this update: Wed 20 May 2026 20:15:05 +0000
Manifest next update: Wed 27 May 2026 20:15:05 +0000
Files and hashes: 1: y-ExoIOkVjx8Q52webZLatEQGnw.crl (hash: APweuU/OVOFcQw1n8JQCLe+pczaKesoPyhSZwAulL98=)
2: F043A0CCC2B411EA9BAFF054C4F9AE02.roa (hash: VNNGkBpD1q5WZ16FnB1qRceTw8NjIdUzV5+D2PvmOUk=)
3: 91B81F1EC2BA11EA8A079767C4F9AE02.roa (hash: 6Szm2QWfkOsYb1i1zd7g9FOIR4EuHLgd8D1MqV0Eyn4=)
4: 90D4C28CC2BA11EA8A079767C4F9AE02.roa (hash: xPzPEEzjonH18gW4iaUITzfSURpkuwZnTJJlRi6h5I4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl
rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2382 (0x94e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EED0, serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
Validity
Not Before: May 20 20:15:05 2026 GMT
Not After : May 27 20:15:05 2026 GMT
Subject: CN=6a0e1649-2e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:60:64:6a:a0:59:ba:23:1d:6e:08:53:34:
17:d8:3c:e9:30:29:7c:3c:94:57:ae:36:a7:21:1c:
b5:46:d3:f2:cc:01:c6:1a:55:83:62:de:76:b2:e8:
97:28:54:e9:04:5f:f8:64:3f:1e:ba:28:7a:44:86:
29:1f:7a:9f:dc:f2:09:9b:b1:5c:ca:b4:55:c1:bd:
0a:da:f9:04:7b:38:08:35:3b:76:50:80:93:1d:09:
58:71:28:89:fa:0e:44:ed:19:60:b7:81:3c:8e:80:
a2:1f:d9:b8:53:60:e9:6c:71:04:c0:07:71:0a:c8:
4e:49:ec:af:eb:f2:b6:56:52:4c:38:c5:b0:7e:d9:
52:11:4d:aa:0c:46:23:0b:d0:26:90:93:d9:34:f9:
cf:94:b7:6d:e8:49:6d:f9:dd:84:1b:c4:45:49:68:
7d:82:53:70:e5:2d:e9:b5:30:ba:47:2a:17:de:e0:
37:77:12:a7:bb:62:8a:ff:19:60:77:f0:88:b7:e6:
56:e2:b9:75:9c:2d:95:74:6e:c4:e5:d9:3a:01:fc:
58:7e:04:8b:60:28:de:fe:56:07:e0:04:af:13:49:
b7:b9:4e:07:06:fe:02:54:49:b4:ea:94:46:49:7d:
a6:d5:f3:30:91:5c:38:a4:a8:86:ff:f1:5c:8c:4a:
dc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:66:AF:FA:81:F4:33:5E:12:EC:94:DC:A4:B3:38:D0:79:9F:C7:53
X509v3 Authority Key Identifier:
keyid:CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f9:e3:66:2d:73:97:b0:b5:1b:54:05:d2:f8:f1:d9:8f:90:
74:52:be:88:8d:00:dd:06:fd:91:c1:cf:87:e5:c3:ce:9b:f8:
fb:00:d6:bf:40:ce:5e:3a:c7:0b:b3:60:1f:5c:23:0a:65:6a:
cf:84:69:44:16:84:07:64:38:71:4b:45:1f:fb:98:19:f0:77:
3d:47:68:b6:ef:b8:7f:05:b0:b5:09:2b:46:4d:24:47:19:61:
1a:72:9d:19:2b:a1:4c:40:54:9c:ad:ce:e3:04:ec:7d:b8:5f:
56:6c:c9:b6:a1:da:96:7b:26:81:d3:e0:ce:88:71:f3:9c:93:
72:4a:32:9b:a5:98:27:a0:8c:db:65:a9:44:d1:b0:bd:11:ff:
02:a8:95:6e:6f:77:1f:1b:62:19:fe:44:a0:ee:49:e5:7b:eb:
65:4d:2b:80:94:e8:31:40:eb:37:47:9c:54:be:89:36:14:81:
60:d3:6e:22:b5:91:8e:73:02:69:a6:03:6d:31:6e:8d:4f:89:
be:5c:c2:31:68:38:ce:d9:37:a5:f2:0a:93:4b:ce:a4:e2:f5:
c8:da:60:83:e1:a0:27:c2:da:44:59:46:2a:1c:8b:00:0c:e2:
cb:18:f2:fe:dd:8b:38:46:0e:2e:8d:bd:94:38:c4:10:0c:38:
99:2a:6d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:09 2026 by rpki-client