
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft
File: yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft (raw, json)
Hash identifier: sVYgIKaPbj7s9cC4mNIeLRg7RLIBai4az3yNvOUFjE8=
Subject key identifier: C1:26:F1:9D:2C:9C:49:96:52:91:C2:9A:6C:8D:72:DF:5E:88:BC:74
Authority key identifier: C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0
Certificate issuer: /CN=A917E1FA/serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft
Manifest number: BE
Signing time: Mon 01 Jun 2026 07:48:20 +0000
Manifest this update: Mon 01 Jun 2026 07:48:20 +0000
Manifest next update: Mon 08 Jun 2026 07:48:20 +0000
Files and hashes: 1: yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl (hash: sxzrJ8NrwL5tgZRCLKj5AkhBgDWQ024vCY1Jnwymr3U=)
2: 7354ACC0472811F0ADE2D44BC4F9AE02.roa (hash: znoNuAslfVcaeYT9Qtb9J+D936zhsxuFnvCQ4z32+wE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl
rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FA, serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0
Validity
Not Before: Jun 1 07:48:20 2026 GMT
Not After : Jun 8 07:48:20 2026 GMT
Subject: CN=6a1d3944-1887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:92:3f:19:e9:21:a1:24:ae:88:94:fd:21:f1:
c9:8d:33:1f:ef:d9:31:c4:16:5d:a4:15:a0:66:5e:
a6:56:38:ad:08:c5:ae:95:cc:15:7a:12:ab:e0:5e:
5a:b0:62:ab:b6:b6:07:1d:f4:24:6f:e3:f8:92:cc:
41:90:61:43:bd:21:ae:a7:88:47:f8:25:99:9d:1a:
33:5b:5d:ff:d8:45:9c:5d:ae:20:6f:5c:59:e9:a5:
64:53:50:bc:04:e9:e5:ad:3c:d1:46:48:4e:49:e1:
7e:88:3a:97:66:76:54:06:71:24:8e:33:48:72:b5:
44:4f:02:1e:59:b6:94:f3:1b:5a:48:8f:2a:59:72:
3b:03:97:6c:0d:8d:77:75:97:1c:74:dd:46:de:62:
07:7f:3a:a6:0f:87:60:c0:99:3d:b0:b0:a3:0f:76:
45:c5:c3:62:02:b8:0f:f8:68:11:8c:b9:df:70:15:
d9:36:84:40:2f:ee:0f:52:fc:0a:49:57:ae:c6:e5:
51:29:08:d5:61:eb:f3:92:80:b9:5c:63:09:8e:30:
13:88:84:d5:35:d4:b8:af:01:17:5f:07:d0:a2:e5:
aa:a2:62:65:37:5e:ab:d8:37:3e:d2:46:cc:be:97:
68:40:30:ed:75:59:77:d4:af:8a:bd:39:91:03:b8:
37:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:26:F1:9D:2C:9C:49:96:52:91:C2:9A:6C:8D:72:DF:5E:88:BC:74
X509v3 Authority Key Identifier:
keyid:C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1d:54:cc:9c:e4:ed:f1:39:31:08:90:4f:38:56:b6:d4:35:
46:e2:2b:4d:96:3c:2c:d9:d2:4e:d8:6a:8a:59:17:c6:9a:17:
a6:7e:ed:0f:d8:c5:dd:41:b1:b0:50:01:ca:98:dd:5c:e8:91:
72:d2:3f:0a:2d:4e:7d:02:4a:eb:d5:86:46:bd:74:ff:5a:26:
0d:c9:47:bf:6b:81:8d:d5:c8:bb:ff:07:3f:e3:3e:41:00:40:
7f:26:96:49:0c:5b:34:bc:60:0f:c3:a6:88:6e:3a:79:d2:8b:
55:2e:0a:49:2e:82:f1:77:b7:b5:08:0e:4a:87:5d:3b:a5:c1:
29:95:17:6d:44:20:5a:84:35:7c:09:c6:ea:71:ca:ff:9e:97:
09:d9:f7:99:cf:85:e2:57:aa:6d:b1:4c:f9:fd:7e:c0:d7:ca:
2a:8c:07:01:7d:c6:ac:20:fd:bb:8b:6c:b8:d9:1b:3c:37:9c:
29:9c:64:8f:83:37:73:67:fd:30:cc:5c:ec:59:cc:c6:c0:df:
64:12:d2:25:04:f7:45:0c:59:5e:82:50:41:1a:ac:05:56:93:
56:68:e8:b0:b6:4a:55:61:72:11:1e:49:24:39:27:1a:6c:3a:
8a:b6:a8:4a:c6:96:bf:c6:7b:6f:6d:5e:d4:c5:35:2b:92:b8:
3a:81:a3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:32:06 2026 by rpki-client