
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
File: YHa9C6TbeXpypo_v-b-1WMRDmLI.mft (raw, json)
Hash identifier: 5UTGApRNw1pPA7aBMxW2QO7yppfiAcdWqyi3x4pLsSY=
Subject key identifier: 71:E8:52:0A:BA:AD:8E:18:AB:CA:FF:24:0E:EA:D1:FB:8A:7C:9C:E6
Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
Certificate issuer: /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Certificate serial: 0503
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
Manifest number: 04D0
Signing time: Tue 21 Jul 2026 00:51:46 +0000
Manifest this update: Tue 21 Jul 2026 00:51:45 +0000
Manifest next update: Tue 28 Jul 2026 00:51:45 +0000
Files and hashes: 1: YHa9C6TbeXpypo_v-b-1WMRDmLI.crl (hash: yLmcxrf/Yk68xNmHKG9veteQ3JHC+LSzRlsWAaqMOgA=)
2: B283BDAACF7C11F084EB1044C4F9AE02.roa (hash: qM1jpngbGtLR2m4oUSpuCPTJ9nzvkY0kh4taVmX3HNk=)
3: ED1A0478799811EF8437F77EC4F9AE02.roa (hash: XqHC5rj+3s01yuYMUc/k58y/2zhhrKKsHAG9wb2CB0U=)
4: 260D3330758A11EFAE7A8A39C4F9AE02.roa (hash: 1u7MoOEqUAcZtaB8C3gY/ex2tSVz31yAb6iq9EUXHLo=)
5: 844EFBDA766C11EF8CE33A86C4F9AE02.roa (hash: 75n5q9t/oszYoszozCEXu11LQIIiL282/784Fcuo6Ew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 00:51:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1283 (0x503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162EE1, serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Validity
Not Before: Jul 21 00:51:45 2026 GMT
Not After : Jul 28 00:51:45 2026 GMT
Subject: CN=6a5ec2a2-c70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:88:11:16:c5:86:56:3d:43:a6:77:bb:5e:5e:
51:24:8f:e0:6c:37:47:04:34:37:e1:b8:97:e8:19:
11:9d:df:80:69:fd:9b:49:99:14:c6:da:31:92:8f:
c3:86:4b:6e:8d:fb:8d:6d:c7:db:89:e3:76:93:c5:
d3:48:44:49:33:ef:ba:ac:28:f2:e3:26:66:c5:29:
df:b3:09:3a:48:d9:e6:7c:1c:70:80:d3:9c:5b:23:
a7:e2:86:1f:37:c9:8f:96:1b:c4:97:80:5f:a3:a5:
22:53:1e:9f:a1:ab:42:c4:03:0e:ba:04:f9:72:b8:
1c:ea:e7:ec:bd:32:ba:90:a1:e0:b4:cb:0c:26:92:
7f:0d:2e:1e:2c:68:70:b1:f4:28:9f:4e:4d:08:9d:
1f:9c:ef:11:e8:b1:5c:fd:92:a8:f4:04:6b:60:b5:
e2:f1:76:2d:4f:57:87:7c:8e:fb:a2:c3:e8:dd:0f:
e1:9b:dc:0c:43:97:4f:bb:4a:da:54:f4:a0:cf:67:
cc:8f:f7:c5:dd:65:4c:38:55:ff:27:1c:ce:22:db:
5c:76:3a:6d:5c:ac:57:df:8b:65:48:66:ea:4c:6b:
a4:27:81:20:35:fe:16:90:c6:59:e9:b6:3a:e4:ac:
28:f8:c7:6e:41:c8:e6:33:40:e8:cb:d7:7a:c0:51:
71:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E8:52:0A:BA:AD:8E:18:AB:CA:FF:24:0E:EA:D1:FB:8A:7C:9C:E6
X509v3 Authority Key Identifier:
keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:7b:dd:09:c8:72:7a:22:86:fc:bf:ec:9a:cc:bd:0e:bc:ab:
81:c9:d3:e6:27:9e:03:62:fc:61:5e:ee:19:a3:39:34:03:8b:
57:01:9c:b8:2c:37:1a:23:dc:cd:22:c0:bc:04:93:6c:72:9b:
83:3f:b4:85:d6:41:b5:65:7d:2a:52:9c:b0:71:c4:98:00:87:
16:8c:16:a2:2c:d5:ad:22:d3:e4:77:a9:c5:2c:95:c9:28:ae:
27:d3:a6:2a:39:40:27:4f:cf:1f:21:a0:15:d8:ba:de:2b:eb:
b4:ec:24:aa:17:67:4a:5b:31:66:ac:ca:4c:3e:60:41:b6:c1:
1d:12:66:d4:11:f9:01:d1:e3:8e:19:fa:86:48:b4:ef:27:d3:
ef:11:f1:dd:c0:62:04:2f:d7:85:56:72:d1:2f:c8:1f:08:57:
ba:d5:96:72:e5:be:2b:ae:42:be:43:69:26:d0:c2:83:10:65:
5c:ca:dd:de:03:77:fd:5c:71:46:5d:ca:e3:09:bf:f2:53:03:
1c:e8:8a:3f:9b:58:a5:53:9d:ac:d9:18:d2:dd:21:b3:ee:af:
cf:a7:c0:51:31:64:3c:80:1c:19:21:9b:91:e0:d1:93:83:4b:
8e:d2:90:9b:5c:e6:bb:03:f4:fa:68:8a:5a:62:72:64:ed:e2:
5c:f9:35:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjJFRTExMTAvBgNVBAUTKDYwNzZCRDBCQTREQjc5N0E3MkE2OEZFRkY5QkZCNTU4
QzQ0Mzk4QjIwHhcNMjYwNzIxMDA1MTQ1WhcNMjYwNzI4MDA1MTQ1WjAYMRYwFAYD
VQQDEw02YTVlYzJhMi1jNzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmYgRFsWGVj1Dpne7Xl5RJI/gbDdHBDQ34biX6BkRnd+Aaf2bSZkUxtoxko/D
hktujfuNbcfbieN2k8XTSERJM++6rCjy4yZmxSnfswk6SNnmfBxwgNOcWyOn4oYf
N8mPlhvEl4Bfo6UiUx6foatCxAMOugT5crgc6ufsvTK6kKHgtMsMJpJ/DS4eLGhw
sfQon05NCJ0fnO8R6LFc/ZKo9ARrYLXi8XYtT1eHfI77osPo3Q/hm9wMQ5dPu0ra
VPSgz2fMj/fF3WVMOFX/JxzOIttcdjptXKxX34tlSGbqTGukJ4EgNf4WkMZZ6bY6
5Kwo+MduQcjmM0Doy9d6wFFx3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHHoUgq6
rY4Yq8r/JA7q0fuKfJzmMB8GA1UdIwQYMBaAFGB2vQuk23l6cqaP7/m/tVjEQ5iy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkVFMS83NTJENDJFODhG
RDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVYcHlwb192LWItMVdNUkRt
TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lIYTlDNlRiZVhweXBvX3YtYi0xV01SRG1MSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MkVFMS83NTJENDJFODhGRDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVY
cHlwb192LWItMVdNUkRtTEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFnvdCchyeiKG/L/smsy9DryrgcnT5ieeA2L8YV7uGaM5NAOLVwGcuCw3GiPc
zSLAvASTbHKbgz+0hdZBtWV9KlKcsHHEmACHFowWoizVrSLT5HepxSyVySiuJ9Om
KjlAJ0/PHyGgFdi63ivrtOwkqhdnSlsxZqzKTD5gQbbBHRJm1BH5AdHjjhn6hki0
7yfT7xHx3cBiBC/XhVZy0S/IHwhXutWWcuW+K65CvkNpJtDCgxBlXMrd3gN3/Vxx
Rl3K4wm/8lMDHOiKP5tYpVOdrNkY0t0hs+6vz6fAUTFkPIAcGSGbkeDRk4NLjtKQ
m1zmuwP0+miKWmJyZO3iXPk1ww==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:26:47 2026 by rpki-client