
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
File: Yja2yVcFRCapTOamlDI45v5tH1Y.mft (raw, json)
Hash identifier: 2yUUqeeX+GvApuieGu9/8JiMhWRrDQdIMT1AZ6cu5L0=
Subject key identifier: 3F:2C:C9:BF:31:CA:EA:0D:5F:A6:55:16:DA:E9:84:94:75:53:38:B8
Authority key identifier: 62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56
Certificate issuer: /CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56
Certificate serial: 04D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
Manifest number: 04CD
Signing time: Sun 04 Oct 2026 23:49:13 +0000
Manifest this update: Sun 04 Oct 2026 23:49:13 +0000
Manifest next update: Sun 11 Oct 2026 23:49:13 +0000
Files and hashes: 1: Yja2yVcFRCapTOamlDI45v5tH1Y.crl (hash: uqru4INHWSl/PF8+z6AfN2YxUfRqyk4K2o+YvsxTfq8=)
2: 8B626F5487C911EC908CE327C4F9AE02.roa (hash: UJpA5zEw7YjHmI7sbnVaspAGcZB71kOVdtEMUuEsETo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl
rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 23:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1236 (0x4d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D655, serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56
Validity
Not Before: Oct 4 23:49:13 2026 GMT
Not After : Oct 11 23:49:13 2026 GMT
Subject: CN=6ac2e5f9-5e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:c4:3b:25:a2:2c:9c:50:b8:7d:61:0f:88:
da:98:8d:54:cc:29:43:cf:83:c7:f5:ed:cc:7e:b5:
63:55:67:3f:3f:5d:ff:e5:65:f8:9c:56:86:9f:d0:
4f:30:cc:70:3d:a1:73:9d:23:e8:00:2d:47:66:02:
5f:9d:e4:a3:e6:67:58:5b:90:49:15:2c:16:5c:19:
33:f5:9c:a7:9c:23:16:9f:ba:50:52:14:20:09:b2:
69:e5:96:ef:84:46:41:34:0f:62:06:ab:09:fa:c5:
db:4d:95:0b:0d:92:21:29:fa:90:34:b8:10:e6:cb:
0e:75:e5:ab:61:4c:d8:c8:f8:75:f6:8e:c6:3f:3e:
6c:69:9c:01:6f:6f:09:8b:ee:b8:dd:11:50:0f:56:
e1:fd:74:4d:97:a8:96:3a:8d:d0:18:7d:1f:d1:7d:
83:b4:6e:54:57:bc:ea:5b:a9:1f:d8:c4:61:66:8b:
f5:66:11:ed:e0:a1:5c:48:70:a4:41:91:1e:f0:ea:
ad:ce:ed:3e:73:ca:0b:9e:44:88:00:4e:93:3d:ed:
aa:d9:c5:fa:c1:cb:13:0d:31:51:e1:7a:8b:fb:44:
a5:a0:73:c6:e9:e8:42:a5:c9:8a:97:b6:33:2c:66:
ad:fa:9e:a1:50:8b:cf:a9:62:16:5f:f7:88:23:d5:
29:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2C:C9:BF:31:CA:EA:0D:5F:A6:55:16:DA:E9:84:94:75:53:38:B8
X509v3 Authority Key Identifier:
keyid:62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:f2:ea:af:bd:30:26:d9:ef:d0:9e:c8:a9:b8:01:72:e6:84:
a6:52:72:dc:21:54:ec:13:47:47:b5:bf:83:bc:e1:fb:59:f3:
b5:91:f2:8e:4b:16:0f:6f:4b:e6:af:05:21:50:40:c7:08:ee:
8f:5a:1e:f7:bd:e4:f2:c6:c6:0d:ae:07:57:3c:c0:e3:48:e0:
58:de:01:c9:f0:94:97:12:ba:3e:37:9f:6e:6d:c6:bf:69:c1:
57:11:8a:3c:ea:23:80:2e:43:59:c1:0b:75:55:51:06:86:17:
15:f6:17:92:76:6e:fd:b0:db:d6:13:93:c0:1d:e5:c0:bb:d4:
52:76:41:37:75:e9:b8:27:29:e4:d7:8e:e8:8e:61:f3:23:a7:
ec:97:d9:ae:81:08:ae:95:77:71:4f:30:a7:2e:af:1b:c5:09:
94:8b:74:a6:48:fc:b9:02:44:5d:1f:8e:d4:1d:f0:18:d5:ff:
74:26:ec:f2:df:1a:fe:c5:28:53:99:84:08:e3:91:41:cb:52:
39:95:9f:91:48:d0:b2:a9:9f:92:fb:51:7c:fb:6d:fb:eb:2c:
49:de:8b:4b:11:a8:1b:ce:d0:67:d6:8f:63:7a:76:80:85:0c:
13:cd:9a:fa:47:0b:59:fd:35:4f:41:62:ec:34:43:29:5f:60:
55:7d:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:12:10 2026 by rpki-client