
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
File: yyk1oUeLT4tEYxANsulbBlRAZ3M.mft (raw, json)
Hash identifier: whhbZrcjEgux40u81wF+xzaPevQ3ygaqFZdhsvSCDW8=
Subject key identifier: 68:B3:B4:5F:B3:76:3B:F4:80:DC:6F:82:E8:4D:F4:FE:55:BE:78:95
Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
Certificate issuer: /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
Certificate serial: 01AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
Manifest number: 0199
Signing time: Sat 25 Jul 2026 05:48:10 +0000
Manifest this update: Sat 25 Jul 2026 05:48:10 +0000
Manifest next update: Sat 01 Aug 2026 05:48:10 +0000
Files and hashes: 1: yyk1oUeLT4tEYxANsulbBlRAZ3M.crl (hash: RJZTARLZMOIVtUXxlVs8RZaHLwwr+CqejHVEsjxmu0c=)
2: 0A7FC90CEED311F096B1F0A4736F56BC.roa (hash: vzVQBVMmwkmKLF9gw2qbd+GWfUXHzR09NVFTQu0OTDQ=)
3: D14D6710936711EFB8A6457CC4F9AE02.roa (hash: Qiz09qw18Q7itjGB4hEAftD52hr4YhZFhmDLsy4591Q=)
4: 75E10ADA23E611EF92A9097CC4F9AE02.roa (hash: J8JvI737IcwyzOv4zv6SR8Qx/PymvBvHR1EoEe3p9Ms=)
5: 76601C1C23E611EF92A9097CC4F9AE02.roa (hash: IV5neT5fvrEfaGYFt5jPMxG9PaLe4Tnwc926KjM/xSo=)
6: 680D797023E611EF8165F17BC4F9AE02.roa (hash: dAU1goqR7eXbVxXE2s6EOPd+tQKFat1qMstDa6Ugbus=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl
rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Aug 2026 05:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156F14, serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
Validity
Not Before: Jul 25 05:48:10 2026 GMT
Not After : Aug 1 05:48:10 2026 GMT
Subject: CN=6a644e1a-a906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:28:6e:bb:a8:7b:66:e6:87:d7:83:c8:85:9e:
e4:d6:8e:1e:81:4e:20:e3:09:de:b5:a6:c0:8a:08:
5b:3f:5c:29:e5:f1:e8:a0:c1:8e:53:ab:51:96:67:
ff:c1:01:40:16:36:7a:6c:51:5f:ef:0d:40:47:3e:
ea:99:be:cd:e7:2d:cd:e5:c0:cf:03:eb:e7:06:38:
f9:1a:77:4e:81:c5:b9:41:8a:57:17:93:44:bf:d9:
24:91:6b:fa:d5:70:1e:f6:9d:c2:e2:94:47:2a:6a:
79:5a:ee:1a:60:fb:bc:28:2f:75:2c:0a:6a:61:07:
6a:65:65:04:a6:75:89:8a:2b:8a:23:f5:a0:ef:b0:
7f:e9:82:f2:52:ba:6b:d1:6b:71:7a:1b:b7:68:14:
fa:2c:58:85:4c:70:4f:54:45:52:d3:94:a8:f8:e6:
76:b6:aa:de:83:af:9e:ea:c1:fa:60:ed:b7:14:2b:
8d:d7:90:c1:ac:52:43:f6:fc:aa:b4:1b:fa:08:85:
15:11:83:50:98:15:a8:bf:7d:b2:f8:ca:39:30:04:
f3:80:0b:55:63:81:8f:38:95:ec:20:78:1d:8f:a0:
64:b3:5b:aa:dc:8d:90:4a:c5:4e:8c:51:ba:ab:52:
d0:32:ec:0b:ea:0e:7d:e1:f1:93:4b:8e:4f:5c:8e:
b7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B3:B4:5F:B3:76:3B:F4:80:DC:6F:82:E8:4D:F4:FE:55:BE:78:95
X509v3 Authority Key Identifier:
keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:92:05:2d:eb:6e:b8:e7:cc:79:77:28:56:88:c3:54:cf:36:
60:ed:28:91:6b:1c:b8:a8:be:56:27:06:39:95:27:eb:1b:c5:
bd:6c:35:9b:29:78:c6:8c:7b:ea:7c:2a:d5:c7:39:76:4c:0b:
56:3f:17:fa:26:00:ff:46:c7:81:59:b5:dd:3a:eb:8a:18:09:
57:cb:80:09:13:0b:42:1d:9d:b4:61:82:5a:d7:ca:c0:31:e8:
99:b7:1c:6c:70:71:b4:77:7d:27:6a:7d:87:17:35:62:80:a3:
8e:fb:c0:81:88:85:8b:1c:c2:5c:4d:29:d9:27:08:72:81:ac:
08:ae:3f:14:54:a4:5a:f0:d2:8a:cc:cb:62:00:71:7f:37:67:
ec:4f:c0:c1:15:b9:67:fb:3e:fe:7c:c7:3f:5c:9c:4a:29:fb:
6d:ad:3d:a4:6f:35:bf:d5:2f:3d:af:59:f0:07:4b:56:9d:a3:
e3:a7:35:e7:31:d5:bd:82:0f:97:d9:c6:d2:62:e9:95:89:18:
ec:7e:e4:4e:26:c7:69:c7:cf:09:42:06:c1:fb:70:5d:29:f1:
11:48:9a:7d:9b:00:94:88:4c:ee:1c:29:8f:93:05:6d:a9:a5:
9c:9f:46:13:0e:4a:4e:c6:a8:76:a3:7c:e6:a9:9f:9a:70:51:
a1:7e:99:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTZGMTQxMTAvBgNVBAUTKENCMjkzNUExNDc4QjRGOEI0NDYzMTAwREIyRTk1QjA2
NTQ0MDY3NzMwHhcNMjYwNzI1MDU0ODEwWhcNMjYwODAxMDU0ODEwWjAYMRYwFAYD
VQQDEw02YTY0NGUxYS1hOTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0yhuu6h7ZuaH14PIhZ7k1o4egU4g4wnetabAighbP1wp5fHooMGOU6tRlmf/
wQFAFjZ6bFFf7w1ARz7qmb7N5y3N5cDPA+vnBjj5GndOgcW5QYpXF5NEv9kkkWv6
1XAe9p3C4pRHKmp5Wu4aYPu8KC91LApqYQdqZWUEpnWJiiuKI/Wg77B/6YLyUrpr
0Wtxehu3aBT6LFiFTHBPVEVS05So+OZ2tqreg6+e6sH6YO23FCuN15DBrFJD9vyq
tBv6CIUVEYNQmBWov32y+Mo5MATzgAtVY4GPOJXsIHgdj6Bks1uq3I2QSsVOjFG6
q1LQMuwL6g594fGTS45PXI63rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGiztF+z
djv0gNxvguhN9P5VvniVMB8GA1UdIwQYMBaAFMspNaFHi0+LRGMQDbLpWwZUQGdz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkYxNC8zRjEyODg2MjFG
REIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0dEVZeEFOc3VsYkJsUkFa
M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3l5azFvVWVMVDR0RVl4QU5zdWxiQmxSQVozTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NkYxNC8zRjEyODg2MjFGREIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0
dEVZeEFOc3VsYkJsUkFaM00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlZIFLetuuOfMeXcoVojDVM82YO0okWscuKi+VicGOZUn6xvFvWw1myl4xox7
6nwq1cc5dkwLVj8X+iYA/0bHgVm13TrrihgJV8uACRMLQh2dtGGCWtfKwDHombcc
bHBxtHd9J2p9hxc1YoCjjvvAgYiFixzCXE0p2ScIcoGsCK4/FFSkWvDSiszLYgBx
fzdn7E/AwRW5Z/s+/nzHP1ycSin7ba09pG81v9UvPa9Z8AdLVp2j46c15zHVvYIP
l9nG0mLplYkY7H7kTibHacfPCUIGwftwXSnxEUiafZsAlIhM7hwpj5MFbamlnJ9G
Ew5KTsaodqN85qmfmnBRoX6Zuw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 00:54:01 2026 by rpki-client