
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
File: y-ExoIOkVjx8Q52webZLatEQGnw.mft (raw, json)
Hash identifier: jf+mH+EZhX6Zh/cIVIDfBtSjtAXn+9OkwdUmOmX2sq4=
Subject key identifier: 43:17:70:02:B0:90:18:16:02:77:3F:B0:26:C5:69:F1:D2:4B:EC:34
Authority key identifier: CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C
Certificate issuer: /CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
Certificate serial: 0966
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
Manifest number: 094C
Signing time: Mon 06 Jul 2026 20:39:07 +0000
Manifest this update: Mon 06 Jul 2026 20:39:07 +0000
Manifest next update: Mon 13 Jul 2026 20:39:07 +0000
Files and hashes: 1: y-ExoIOkVjx8Q52webZLatEQGnw.crl (hash: idg4PLx8RBD82io7q4v+rvyc4zT9rHx2ouls6DWlRdY=)
2: F043A0CCC2B411EA9BAFF054C4F9AE02.roa (hash: VNNGkBpD1q5WZ16FnB1qRceTw8NjIdUzV5+D2PvmOUk=)
3: 90D4C28CC2BA11EA8A079767C4F9AE02.roa (hash: xPzPEEzjonH18gW4iaUITzfSURpkuwZnTJJlRi6h5I4=)
4: 91B81F1EC2BA11EA8A079767C4F9AE02.roa (hash: 6Szm2QWfkOsYb1i1zd7g9FOIR4EuHLgd8D1MqV0Eyn4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl
rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 20:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2406 (0x966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EED0, serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
Validity
Not Before: Jul 6 20:39:07 2026 GMT
Not After : Jul 13 20:39:07 2026 GMT
Subject: CN=6a4c126b-3da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4b:3e:cb:b3:d4:f6:82:01:1b:a6:1a:67:52:
33:d8:f1:ef:7b:bb:a7:df:40:70:c2:f3:e4:c8:ab:
5f:93:ca:a5:c0:b9:99:61:18:99:97:5a:f5:29:aa:
67:73:02:f2:75:eb:3a:69:10:99:90:68:4d:6c:bd:
d8:12:9e:dc:94:05:ed:f4:60:c6:59:11:16:be:9a:
84:15:b1:69:24:e5:6e:4b:17:d0:12:7e:58:d9:f7:
d2:91:9f:7b:9d:47:7c:66:c0:7b:2e:5b:62:8d:b5:
87:dd:13:9f:43:a6:28:1e:92:02:58:4b:2c:a2:8a:
8c:16:12:c5:77:7f:f8:c6:d9:aa:50:b7:95:d0:83:
ff:a9:af:c5:ba:6e:24:81:88:9d:3f:56:cc:bb:00:
52:10:73:b1:42:ad:62:eb:f8:3a:6b:85:67:38:ec:
38:e0:89:fd:7a:dc:7e:73:89:fe:b5:fb:16:42:d9:
f5:4a:ca:e4:64:95:51:5a:0c:a1:e7:ca:d7:0a:9b:
82:0f:cd:ae:2f:27:bb:ec:9c:e8:56:58:8a:da:98:
30:6d:94:1d:ae:ea:bf:52:fa:fb:c4:ee:c0:41:ea:
d4:9c:f9:64:ad:29:aa:c4:ea:9c:d7:5d:cd:72:71:
44:c2:5a:03:54:cc:19:51:39:94:ec:d9:36:06:2e:
10:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:17:70:02:B0:90:18:16:02:77:3F:B0:26:C5:69:F1:D2:4B:EC:34
X509v3 Authority Key Identifier:
keyid:CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:f7:06:95:54:5a:d0:86:7a:6c:37:45:ec:24:ff:8d:5a:8a:
ce:b4:ed:ea:82:9f:20:45:5a:af:d7:37:9c:02:32:91:d4:33:
25:6e:cc:88:85:c8:41:1b:6f:78:fb:7f:f4:d9:9e:f5:46:aa:
4e:ec:d8:17:1f:6d:84:fa:f7:e0:2e:d7:c0:3f:c7:ce:fb:79:
e8:69:65:e2:07:b1:34:43:91:79:08:49:fc:74:91:b2:d9:db:
be:f9:e9:60:9a:5b:ee:af:51:32:c2:72:01:70:d3:5e:e4:55:
f7:3d:e8:b9:a1:4c:96:32:b6:53:06:db:65:01:b5:3e:8d:b5:
0d:78:84:2e:50:5f:9a:25:a0:73:70:d0:35:3f:f1:af:d4:80:
1a:a7:95:ad:c7:24:f0:fb:ba:f4:5a:81:d2:58:39:c5:10:70:
32:85:45:3a:56:12:ea:f5:01:4d:60:74:d1:23:10:0a:4e:82:
e1:0e:aa:6c:9e:5a:d8:79:40:8f:88:09:e4:43:1f:64:3c:7b:
3f:73:fe:49:ad:9e:18:59:2a:28:f8:f9:f1:69:3b:53:06:2c:
0d:a5:ac:b6:1c:23:67:c9:75:26:00:aa:c7:41:19:9a:66:8f:
d4:2a:01:97:d8:ea:46:ab:ce:c9:1a:27:fe:e9:b8:6b:41:2f:
0f:18:ea:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:45:03 2026 by rpki-client