
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
File: yyk1oUeLT4tEYxANsulbBlRAZ3M.mft (raw, json)
Hash identifier: kk7T1W1PZFQyFYsO4mlGp7uk13Q3eUFgmGcmRRtFHQA=
Subject key identifier: 16:5C:38:5F:EE:F4:10:E7:1C:E3:FE:AD:0C:3A:01:BC:9A:75:9E:7D
Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
Certificate issuer: /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
Certificate serial: 01C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
Manifest number: 01B1
Signing time: Wed 09 Sep 2026 04:22:04 +0000
Manifest this update: Wed 09 Sep 2026 04:22:03 +0000
Manifest next update: Wed 16 Sep 2026 04:22:03 +0000
Files and hashes: 1: yyk1oUeLT4tEYxANsulbBlRAZ3M.crl (hash: 7xSkxp5+fF3sPDFtgM5vt+FKfOwTYGFKT3EFbL8CvfQ=)
2: 75E10ADA23E611EF92A9097CC4F9AE02.roa (hash: J8JvI737IcwyzOv4zv6SR8Qx/PymvBvHR1EoEe3p9Ms=)
3: 76601C1C23E611EF92A9097CC4F9AE02.roa (hash: IV5neT5fvrEfaGYFt5jPMxG9PaLe4Tnwc926KjM/xSo=)
4: D14D6710936711EFB8A6457CC4F9AE02.roa (hash: Qiz09qw18Q7itjGB4hEAftD52hr4YhZFhmDLsy4591Q=)
5: 680D797023E611EF8165F17BC4F9AE02.roa (hash: dAU1goqR7eXbVxXE2s6EOPd+tQKFat1qMstDa6Ugbus=)
6: 0A7FC90CEED311F096B1F0A4736F56BC.roa (hash: vzVQBVMmwkmKLF9gw2qbd+GWfUXHzR09NVFTQu0OTDQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl
rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 04:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156F14, serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
Validity
Not Before: Sep 9 04:22:03 2026 GMT
Not After : Sep 16 04:22:03 2026 GMT
Subject: CN=6aa0deec-a3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:a0:e8:ec:22:0f:86:dd:d3:3d:fa:6b:96:
54:5e:1e:bc:73:a2:c8:7a:be:94:94:8b:db:7b:e4:
f1:83:5b:dd:d4:ce:76:17:cc:e6:40:64:29:f0:05:
05:1f:d8:d8:12:28:ae:20:ad:1a:b5:3c:36:24:4e:
71:54:31:d6:48:25:84:79:8b:27:bd:41:f6:ee:8b:
4c:45:31:c6:34:10:49:13:c7:36:35:e4:08:a4:38:
7c:4d:8a:3c:fb:17:d0:fa:e0:58:50:ad:40:b1:c2:
1a:83:cc:35:38:3c:34:c6:94:ba:27:27:3f:93:0c:
1c:59:24:a7:5f:fc:6b:83:75:40:03:ec:6d:85:94:
f3:b9:31:f8:a4:b6:ec:4d:bb:8c:0c:0a:02:72:27:
85:1e:20:b1:dc:e0:f3:1d:4b:a1:6e:55:ba:36:17:
8f:d3:a5:de:0d:a7:a9:07:09:0c:03:ee:91:5c:c6:
43:ed:df:d9:92:47:8b:d8:3d:17:52:75:4f:f8:aa:
48:a7:5b:f5:8a:70:68:8c:ca:f5:1a:87:bd:bd:f4:
a3:db:53:31:8d:09:2d:2c:8b:cd:bb:1c:e9:f4:0d:
ae:48:30:54:ea:d1:25:e8:29:7e:59:92:e1:da:7c:
0f:6c:b6:ec:e6:e4:ae:39:60:31:bb:d7:6a:9a:af:
2e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5C:38:5F:EE:F4:10:E7:1C:E3:FE:AD:0C:3A:01:BC:9A:75:9E:7D
X509v3 Authority Key Identifier:
keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:59:75:39:3d:4e:0b:be:bd:5b:2e:a4:4a:2f:3d:ef:64:14:
15:43:58:18:b6:04:3c:b9:79:e7:7a:5f:f3:bf:75:9c:45:6d:
30:e1:ee:f6:c4:20:25:e9:a5:54:04:cc:62:87:05:50:8d:70:
4d:85:e9:82:7d:f8:a4:41:60:04:dd:ee:d3:3c:bc:32:cd:cd:
51:d5:66:9e:61:c8:83:92:71:37:6a:0e:23:9e:1a:7d:62:c0:
a1:cb:eb:69:ae:44:91:d4:b3:36:e0:9c:86:f9:7c:6e:71:db:
df:b7:92:68:12:e9:f2:92:9a:18:96:10:39:a9:b0:77:1d:e3:
98:11:8b:8d:39:54:3f:f0:f0:ec:e4:30:b1:f0:8c:9b:4b:66:
1e:c8:17:8e:d2:6b:3e:e2:83:52:22:f4:64:6b:bd:7f:32:12:
b3:45:2f:d9:1c:ff:0d:e0:f6:d7:61:94:db:fa:14:78:e0:46:
8c:8b:48:00:4d:08:3a:b0:30:b1:c1:8a:7c:33:58:c7:a8:f3:
46:c1:72:20:68:de:47:2c:08:fd:5f:81:6d:9b:22:8e:c8:85:
8d:93:c6:ee:a2:9f:3e:55:7a:6d:0e:d5:e1:77:d2:00:15:c5:
ae:c0:97:13:93:5e:49:3b:9b:72:e3:58:12:3f:a5:2f:88:8c:
46:61:e2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:07:29 2026 by rpki-client