
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
File: YBi5hcOZywcxwWNM_ktHkS8q9dE.mft (raw, json)
Hash identifier: m4xCF8xlFIb+3StzjAEZ3jJc5rH0w/mPkOJCjXcItfY=
Subject key identifier: B4:DF:29:D0:29:AF:AD:15:59:BD:14:C6:D0:D5:FA:B4:DA:7B:F0:CB
Authority key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
Certificate issuer: /CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Certificate serial: 029D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
Manifest number: 0296
Signing time: Thu 11 Jun 2026 03:50:25 +0000
Manifest this update: Thu 11 Jun 2026 03:50:24 +0000
Manifest next update: Thu 18 Jun 2026 03:50:24 +0000
Files and hashes: 1: YBi5hcOZywcxwWNM_ktHkS8q9dE.crl (hash: 8924i8Ht1NrpUGGsGDVybuC/YXWpTKvxyEckchLz1Ms=)
2: C386C06A706211EDA9CCDB76C4F9AE02.roa (hash: /uGLQIrlBTxMwkdtG3jyxMXG6mL7PGCkVKPH/j33iG8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669 (0x29d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183BA5, serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Validity
Not Before: Jun 11 03:50:24 2026 GMT
Not After : Jun 18 03:50:24 2026 GMT
Subject: CN=6a2a3081-a2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:08:2e:cb:d0:c3:cc:24:09:04:d4:20:5d:9e:
ca:02:9f:97:91:f5:25:4b:90:d4:ce:4f:6b:13:66:
92:c3:41:6d:70:21:12:aa:2b:16:5a:ae:31:38:45:
76:58:ba:ae:be:ac:b6:00:d8:64:7e:e2:ff:c2:3d:
1c:1b:c8:a2:34:ce:96:cb:0a:d4:e9:68:f4:6d:25:
02:dc:3d:ee:f9:54:05:fb:db:40:1a:03:86:5f:c5:
84:96:47:19:71:59:0f:cf:64:68:25:d6:3b:5a:ed:
10:ad:51:38:3c:60:d6:43:1d:07:d2:82:7f:8f:52:
72:e6:d5:2f:46:2c:b0:df:65:96:b8:f9:b5:fe:e8:
fe:5c:fc:51:9d:f8:1f:7c:de:dc:9c:1e:b9:3e:4d:
eb:fe:b8:3e:54:54:2e:b2:56:00:f9:a6:04:ce:c1:
07:6c:0c:7d:04:8f:42:1b:28:1a:ae:1f:91:ef:95:
b4:6b:28:e3:51:31:8e:74:f3:37:25:1b:40:3b:8f:
c9:6d:d5:af:98:6f:c1:a1:d9:07:ee:3c:bf:40:c9:
4d:28:ec:92:06:d4:27:0b:2c:69:f8:a8:ef:eb:1a:
f1:f7:e7:a6:11:5e:07:56:d7:34:62:c0:e4:87:08:
2d:99:0f:05:27:7d:60:86:58:e7:09:71:40:de:2e:
00:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DF:29:D0:29:AF:AD:15:59:BD:14:C6:D0:D5:FA:B4:DA:7B:F0:CB
X509v3 Authority Key Identifier:
keyid:60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:77:3a:0b:22:89:71:7f:3b:23:f4:67:55:33:f7:8d:92:e0:
0e:1a:9e:9e:6b:f9:51:87:29:ba:65:ec:1a:c6:13:0f:53:3a:
43:75:b6:f7:15:25:c8:f3:e1:fc:01:1a:b2:43:ed:68:f1:3b:
90:e9:d4:8a:46:28:9d:f7:bd:a2:c4:4c:82:1d:53:a6:0b:65:
54:b2:9e:49:62:bc:57:70:8b:db:4d:9a:39:e8:32:6c:f2:6a:
6c:22:36:2f:1a:5c:39:50:86:7b:59:c4:ab:83:ea:3a:85:7e:
1b:04:a4:cc:8e:7c:32:c6:11:cd:49:c6:b4:95:63:4a:16:ab:
9a:2b:f8:fd:7a:73:02:9f:cd:ee:ed:1d:0e:55:57:39:c1:b0:
b7:a8:23:ba:ae:fe:cb:d5:8e:6f:71:76:1e:ed:41:8e:8c:b6:
90:a0:a7:cc:2f:64:5c:d6:49:72:44:e7:ee:89:76:71:71:25:
04:e6:d2:4c:cc:50:06:2b:f3:fc:89:e4:91:cd:ed:f2:fe:83:
01:cd:7a:e8:5f:09:c8:92:9a:cf:0b:46:a9:5e:6d:e6:ac:16:
37:d9:25:17:3f:d7:b8:1f:ec:45:58:ca:6a:ff:0b:1e:0f:61:
7d:2f:0a:a0:88:61:42:dc:03:35:b4:00:9f:33:6e:3a:ca:65:
94:f3:bf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:23 2026 by rpki-client