
$ rpki-client -vvf rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft
File: yZhQyMiGp__kXfG6HWUCy1pl63A.mft (raw, json)
Hash identifier: hUwVb3a/0B8zgzqR8bkK9h/lJ74DeVi0b8Fn2F9weN4=
Subject key identifier: 74:C1:43:58:7E:D9:B2:59:FF:42:95:11:88:5B:B1:96:AE:2F:55:15
Authority key identifier: C9:98:50:C8:C8:86:A7:FF:E4:5D:F1:BA:1D:65:02:CB:5A:65:EB:70
Certificate issuer: /CN=A917049A/serialNumber=C99850C8C886A7FFE45DF1BA1D6502CB5A65EB70
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft
Manifest number: 38
Signing time: Tue 19 May 2026 08:29:09 +0000
Manifest this update: Tue 19 May 2026 08:29:09 +0000
Manifest next update: Tue 26 May 2026 08:29:09 +0000
Files and hashes: 1: yZhQyMiGp__kXfG6HWUCy1pl63A.crl (hash: UGZafFpHosXQFbGjAWl7MQNMc+IYsO/2doF8vI4p96g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.crl
rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917049A, serialNumber=C99850C8C886A7FFE45DF1BA1D6502CB5A65EB70
Validity
Not Before: May 19 08:29:09 2026 GMT
Not After : May 26 08:29:09 2026 GMT
Subject: CN=6a0c1f55-88aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:2b:62:e8:c4:c4:e3:d5:64:2a:ac:4f:ce:
ff:2f:4f:96:a8:f0:fa:83:51:ec:a3:f7:e7:60:51:
49:3c:b2:43:6a:a4:01:c2:fd:0d:e6:f0:6e:66:6a:
86:bd:e4:e3:e7:aa:1d:5f:b4:2c:ab:a4:43:4a:7e:
c9:09:19:c6:1e:0f:fe:e9:7c:4b:6b:4b:a8:14:39:
c1:c5:64:89:ea:8d:0e:bb:90:81:9e:e6:3d:2d:93:
23:64:3a:e6:60:5a:a5:5e:e4:7b:fb:3b:e0:55:86:
ac:ee:f7:e4:f7:72:c6:d9:f0:2e:40:bd:2c:a9:57:
de:eb:46:a1:73:10:9d:02:14:23:a7:8b:73:ad:f3:
f0:65:7a:14:bf:09:12:eb:b0:af:25:6e:fd:1a:ac:
55:37:3c:09:78:a1:23:f7:1c:a7:6f:b0:32:d5:4c:
47:d0:02:0b:49:30:50:14:c7:ca:7c:f0:ff:51:dc:
a9:c3:ee:3a:74:9f:6f:cf:7f:fb:13:8f:d9:6b:fd:
c8:e8:d8:4c:f3:e3:30:a5:18:b8:4a:8b:8e:5b:6c:
4e:62:83:f9:6b:0e:5b:73:76:3f:17:66:d6:42:90:
a0:b5:9a:d9:43:e5:8b:75:fc:ec:62:f4:0f:05:fb:
8f:37:90:a9:7b:61:29:f1:fa:32:56:a8:da:ea:3e:
2a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C1:43:58:7E:D9:B2:59:FF:42:95:11:88:5B:B1:96:AE:2F:55:15
X509v3 Authority Key Identifier:
keyid:C9:98:50:C8:C8:86:A7:FF:E4:5D:F1:BA:1D:65:02:CB:5A:65:EB:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:e8:2f:09:02:65:69:16:5f:ca:40:f3:fc:12:12:0d:5b:58:
1a:55:89:54:6a:e9:10:c9:79:b2:c7:e3:c0:63:c8:61:7f:1b:
b8:71:7f:4d:16:ad:07:e6:a8:fd:52:52:72:e3:8a:19:d2:4a:
25:68:05:fe:33:bf:77:27:f9:15:e9:5c:7f:94:bc:39:79:44:
03:aa:0d:97:03:bd:0e:c6:9b:87:be:4c:24:58:85:dc:97:54:
18:5b:6f:63:2c:c4:5f:65:5e:fe:a1:05:8a:5c:20:55:e6:52:
af:73:4b:02:5d:0e:3c:58:4c:d1:71:c8:7d:91:40:89:c4:6e:
7c:bb:2f:45:c9:50:0e:62:3b:24:c7:0b:1e:6a:ac:23:eb:df:
50:df:18:26:ba:28:f9:10:4c:12:01:71:97:08:c5:7d:51:41:
da:06:fe:ce:12:1e:90:51:4f:f6:16:99:f2:0d:63:f7:fb:83:
5c:57:3a:c4:e5:72:6c:e8:73:45:1a:f2:e2:e2:fd:e8:a0:71:
b7:54:d0:87:f1:7e:3e:81:a3:9d:3a:bf:65:50:ab:fa:00:29:
80:75:ad:93:99:9e:d3:e0:e4:23:a9:18:3b:5f:ef:80:46:86:
e0:31:95:d3:c0:8c:82:4a:93:3e:f9:00:c8:2d:2b:41:81:82:
eb:25:89:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:24 2026 by rpki-client