
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
File: YsQYLAA-_Po43a9O-QT7BP5bVko.mft (raw, json)
Hash identifier: zfmZLscrsp73SzpdgcZnx98FAIdkgmngWhu3D2twubw=
Subject key identifier: C6:97:41:E1:07:82:12:22:1B:13:8C:D2:D0:72:3D:CF:A3:48:1F:91
Authority key identifier: 62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A
Certificate issuer: /CN=A917CE22/serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A
Certificate serial: 08B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
Manifest number: 0889
Signing time: Fri 02 Oct 2026 21:08:45 +0000
Manifest this update: Fri 02 Oct 2026 21:08:44 +0000
Manifest next update: Fri 09 Oct 2026 21:08:44 +0000
Files and hashes: 1: YsQYLAA-_Po43a9O-QT7BP5bVko.crl (hash: rMCNDQ5gjysrb2IdFtRXe0NRyyg9zD7DzgMPFXAjKeE=)
2: 24311E00963F11F1A090EC316A11F970.roa (hash: l2rcv0HSQlVYyr85ROaGDaPUC259tv2OzWgdl8mnirQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl
rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 21:08:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2229 (0x8b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CE22, serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A
Validity
Not Before: Oct 2 21:08:44 2026 GMT
Not After : Oct 9 21:08:44 2026 GMT
Subject: CN=6ac01d5c-8d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:84:fe:8e:52:e5:2b:e2:f6:74:11:17:e4:
40:e5:13:e5:59:58:3c:29:d3:2f:28:02:28:49:71:
12:25:81:b1:fe:09:45:d2:24:37:3a:32:b4:82:7a:
89:50:55:92:f8:b4:0a:b2:46:01:3d:13:3e:06:94:
89:a4:10:a9:5f:e1:a6:57:8b:c5:d7:62:b6:91:c4:
fc:f6:55:72:bf:72:e8:d2:9d:1e:1c:0f:40:1c:af:
99:5b:f6:e4:63:76:5d:1d:04:db:62:d0:be:69:76:
19:2d:fd:8d:ea:75:f0:4c:0a:1a:be:67:3a:a2:5e:
69:3b:bd:3f:89:2a:2b:69:03:a4:31:82:ab:fc:61:
aa:f9:1c:23:cb:f5:19:d9:b2:06:2d:5c:7b:06:67:
be:56:48:6e:7f:7a:67:5d:8f:b8:a7:03:1b:e1:66:
f5:99:6f:94:c9:ed:13:80:f8:34:36:85:db:4c:23:
f2:71:1e:c4:cf:0f:72:b6:44:6e:0d:44:be:23:d4:
3c:2e:a8:2f:ba:08:84:9c:93:b1:0c:73:0d:58:ac:
22:f1:ab:96:12:28:70:df:92:a9:dd:c2:fa:35:9c:
55:6e:a6:61:bc:0d:fc:5f:b2:3e:a6:5f:ec:86:0f:
4a:b7:ac:ba:1e:af:49:0a:85:27:a4:22:e0:3a:b1:
2f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:97:41:E1:07:82:12:22:1B:13:8C:D2:D0:72:3D:CF:A3:48:1F:91
X509v3 Authority Key Identifier:
keyid:62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7b:15:b3:e1:38:4b:36:af:ea:80:6b:80:52:c6:c4:79:bd:
60:d5:d2:a4:3b:14:d4:f4:13:dd:45:78:d2:20:b5:f2:65:3c:
07:30:31:15:5b:85:57:43:94:f1:96:75:9f:aa:ce:39:b1:63:
ff:5c:43:29:18:76:a3:b2:fe:fc:55:3d:b0:88:aa:1d:6e:23:
cf:0a:62:ec:e5:59:2c:7d:a4:25:75:ae:d4:57:05:35:86:ec:
98:fd:0e:60:f9:b0:bf:bf:eb:00:f9:8e:bf:22:75:4c:87:4e:
d4:18:df:8f:75:83:7c:15:b6:f2:f0:eb:bd:90:74:ec:e1:32:
22:6c:02:38:85:49:a3:d1:f7:86:ce:61:ef:f8:f6:62:54:a3:
a4:27:c1:50:73:7a:0d:b6:bb:cc:15:02:4d:bc:85:80:cc:ca:
2e:f4:6a:99:b6:56:d4:d2:34:f5:e8:6b:5d:d9:01:24:cf:81:
21:98:8b:da:66:24:5c:b8:d0:79:26:10:34:43:6e:76:02:06:
1d:bc:ed:d8:03:b4:be:99:96:b0:46:dc:83:3d:56:87:40:b1:
80:33:31:b7:fb:2c:5b:36:1d:df:bf:49:02:40:5f:78:cc:ff:
75:7d:28:09:0c:04:b2:b0:0e:2e:2d:7a:4f:5f:fa:20:3a:3c:
0a:9d:8d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 14:40:52 2026 by rpki-client