
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
File: yYr7tLua6bGiej3TrVlWs07anGM.mft (raw, json)
Hash identifier: Quu8KNjccDtD4WvIYJaLc+E++Yemm1rT4uSvSgxYUXc=
Subject key identifier: 52:2B:1F:17:18:54:E1:2A:ED:13:72:A1:C6:83:88:B9:6A:98:E5:94
Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63
Certificate issuer: /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
Certificate serial: 0E64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
Manifest number: 0E49
Signing time: Wed 20 May 2026 17:47:22 +0000
Manifest this update: Wed 20 May 2026 17:47:21 +0000
Manifest next update: Wed 27 May 2026 17:47:21 +0000
Files and hashes: 1: yYr7tLua6bGiej3TrVlWs07anGM.crl (hash: MytUiBATlVufr2tCRjxVhenjG1LWoIdBkC0U+M+bqW0=)
2: 1E573054C36111E9A37AC46EC4F9AE02.roa (hash: QnTisy237EcVvBJ9011A1rJ4E+fXkfCawvsS6RPcKIw=)
3: 1D884A0AC36111E9A37AC46EC4F9AE02.roa (hash: rao4FTEGX/zW0+huzRC0qNfwXpqPe2ob+2j+XfZyiN0=)
4: 1CD82986C36111E9A37AC46EC4F9AE02.roa (hash: tk96VxBbpWdjYmc5SF84zVk0NfFSbTDNVAWRkR1LXZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl
rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:47:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3684 (0xe64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D529, serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
Validity
Not Before: May 20 17:47:21 2026 GMT
Not After : May 27 17:47:21 2026 GMT
Subject: CN=6a0df3aa-e210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a4:1b:ae:0f:cb:01:36:96:c3:5a:94:5f:41:
6c:87:df:0d:bc:8b:a8:ee:92:dc:f9:56:20:cf:18:
ee:a5:8c:19:3e:c1:52:18:19:94:ab:ee:d5:fb:2d:
39:c7:b4:a2:cd:98:4f:b7:87:9e:2b:99:b0:26:31:
8b:f3:63:a0:f3:70:ba:8c:14:58:80:4b:8b:2c:3b:
cc:47:bd:4d:55:28:fa:ca:33:ab:ce:5d:53:7d:af:
37:9b:29:ef:be:cf:67:58:c8:2b:98:1b:40:c2:94:
ca:9c:b1:ee:fd:b7:a3:00:05:38:9f:03:41:96:b8:
3c:3a:85:01:b1:79:5a:6d:f8:22:88:05:4f:61:8f:
04:b7:1c:32:ed:57:d2:56:64:ee:9c:0a:b5:c5:ca:
a4:03:90:07:f0:22:01:cc:42:25:cb:67:49:b5:ba:
d8:2a:94:9c:83:45:3a:1d:40:ff:a8:6f:22:24:c3:
17:ea:21:cf:9e:c0:cd:4b:21:33:cc:c5:b5:86:5c:
3a:85:74:be:de:0f:11:9d:1f:4d:72:be:cb:6b:22:
ba:a1:cc:ea:1d:41:15:57:78:e1:94:90:91:67:50:
08:5f:94:2a:c3:7a:04:6a:69:43:01:38:90:5d:9a:
90:24:0b:94:67:d7:9e:0c:15:82:6b:af:2a:1d:d2:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2B:1F:17:18:54:E1:2A:ED:13:72:A1:C6:83:88:B9:6A:98:E5:94
X509v3 Authority Key Identifier:
keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:88:77:90:4e:ef:8d:41:05:30:13:40:1d:f0:c1:c2:50:b6:
4b:da:a8:90:03:e4:59:65:4d:ae:4f:13:9a:67:5a:88:9a:74:
dd:6c:1f:e3:b5:fd:9e:f8:fe:74:98:d5:2a:25:66:76:52:98:
22:17:14:6e:c4:a0:88:72:69:46:24:83:90:92:69:74:90:51:
d7:58:a3:47:f3:1e:c6:7d:d2:76:ed:42:48:c5:4e:26:8f:eb:
38:c3:bb:f4:37:b6:52:5b:ee:4c:2d:94:78:39:6e:ad:c6:2f:
ac:e3:25:fb:9a:89:9c:4f:25:79:c0:27:76:5d:81:e8:5d:96:
ac:ce:fe:1f:00:b8:7f:1c:eb:b4:d5:09:c5:72:f8:a0:44:d7:
e8:89:7b:e7:12:8f:e3:f3:2e:f4:3c:f7:25:f9:55:8b:9e:cd:
d9:7f:cc:96:35:5c:a7:c0:a1:f5:a2:05:57:34:8e:70:99:ae:
12:e5:e0:52:1b:eb:31:00:05:86:37:9e:4d:de:f3:f1:8d:c7:
2f:8d:66:d3:54:eb:62:55:de:32:64:39:2b:53:0b:b1:23:fd:
c0:6e:4a:c9:1f:d0:bd:8f:2b:1d:11:cc:2a:d3:2c:20:7e:fc:
6e:a0:f0:33:0b:1f:e1:f7:07:c9:77:c3:24:69:b0:86:fc:8a:
8f:02:d5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:38 2026 by rpki-client