
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
File: yl96MSHB9fmJUgx6UZcT-zpoyn4.mft (raw, json)
Hash identifier: ycbz676wKKvntvQaWnlNLFF3D4VY2dYEx3V6ktqzqJE=
Subject key identifier: EB:C5:EE:3C:84:23:D6:F1:74:DF:4F:C2:D5:9D:D5:97:4F:D5:4D:54
Authority key identifier: CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E
Certificate issuer: /CN=A919E1FC/serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E
Certificate serial: 011C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
Manifest number: 010A
Signing time: Sun 05 Jul 2026 06:46:25 +0000
Manifest this update: Sun 05 Jul 2026 06:46:25 +0000
Manifest next update: Sun 12 Jul 2026 06:46:25 +0000
Files and hashes: 1: yl96MSHB9fmJUgx6UZcT-zpoyn4.crl (hash: feJf9M3UU4R+xT2X39oF4uDj33FhTo5sMFBkiiPw9FU=)
2: 09852FF6E9FC11EF9D3DE972C4F9AE02.roa (hash: +Guf8goiy81fZQZko9cL1+fi1M4VlxC1TorsAeBwzhI=)
3: 0A34182CE9FC11EF9D3DE972C4F9AE02.roa (hash: 5aZLhkHexwZy2OGn8j73qB9Fr54SX5MLYLq1gSETLgc=)
4: F70CBA98E9B911EFB5B54650C4F9AE02.roa (hash: ApqLcBimI49Avn0PuHyRPruV4UszM9ORBkBlkObwqEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl
rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 06:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E1FC, serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E
Validity
Not Before: Jul 5 06:46:25 2026 GMT
Not After : Jul 12 06:46:25 2026 GMT
Subject: CN=6a49fdc1-22c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:80:f4:da:a5:28:89:86:19:2a:b3:2b:c0:58:
74:69:a7:38:a5:6d:b5:9a:0f:96:39:24:ba:58:d7:
ad:d8:4d:b0:11:cd:d8:ab:e9:4c:45:59:19:a7:2b:
90:1d:bc:cb:3b:c9:94:bf:7d:c9:d5:8c:21:43:da:
49:3a:5e:9a:28:be:2c:e2:5d:34:50:2d:ce:d7:dc:
f9:f7:74:40:a0:71:66:c2:ba:93:87:a8:a9:ee:40:
06:67:73:f2:2c:df:92:4d:23:7b:8c:88:46:01:01:
73:e6:57:eb:18:35:db:c0:ee:ba:2b:0d:65:c4:98:
fe:39:9f:ed:8b:80:2c:13:11:ab:5e:37:30:2a:6e:
a5:01:46:7c:16:c1:ba:c3:e2:44:b0:1e:47:f4:44:
22:b5:28:d5:2c:e2:16:d2:a8:40:5b:c2:66:5c:c5:
fe:42:44:0b:10:a6:7e:b7:c8:a5:72:de:9d:fa:04:
16:aa:6a:67:db:0c:97:0c:12:f4:de:c3:c1:a2:ee:
3c:a1:b8:a1:7d:0c:ef:47:9f:a5:93:b8:08:00:fd:
40:1c:78:28:e5:69:3b:06:fc:78:69:51:75:cd:01:
3d:51:89:c9:48:8e:56:2c:76:cd:3f:50:65:76:2c:
b1:72:8c:e0:0a:64:fb:43:22:9d:b4:5c:f2:55:ef:
a4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C5:EE:3C:84:23:D6:F1:74:DF:4F:C2:D5:9D:D5:97:4F:D5:4D:54
X509v3 Authority Key Identifier:
keyid:CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5f:e9:1d:ea:5f:92:b2:a6:aa:6c:e6:33:3a:ba:34:16:65:
42:d0:e2:07:fe:5c:59:f6:24:3a:31:30:b3:58:45:dc:12:a0:
c7:de:46:1a:f9:68:89:12:0f:cc:40:80:94:07:73:fb:e1:0e:
ba:25:33:d5:71:9f:ef:28:a2:58:87:74:01:67:9d:31:63:83:
51:e9:c3:f8:9f:95:9b:a9:eb:97:a4:60:e3:b6:d7:db:d9:3c:
ce:65:5f:02:5e:c1:ab:35:55:b6:56:58:46:4b:46:2c:fc:84:
dd:d3:3a:a5:4e:b8:7a:4b:15:11:a8:33:be:b3:a6:f8:e7:8a:
9a:c2:cd:2c:34:73:25:0a:c7:d4:5b:ce:61:4e:19:76:be:9e:
ed:91:c8:8f:df:71:a0:e1:65:4e:19:62:c9:53:86:20:1c:42:
f4:26:ed:c7:28:9a:a7:59:31:94:54:e3:e3:e3:5b:c8:e1:2b:
a2:ad:3e:e2:be:cc:7a:d9:3b:c4:23:64:6c:c8:69:aa:a2:15:
c0:31:8f:09:9e:b5:8a:e3:e6:50:6b:63:43:89:c4:96:ac:88:
37:ed:f7:58:dc:b4:9d:e1:28:e8:27:c2:e2:88:56:4e:cb:e2:
ce:32:af:fa:7f:6e:a7:9d:a2:54:44:a5:27:1a:6c:77:46:f6:
3c:e9:e7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:26:19 2026 by rpki-client