
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
File: yLK8O4qx665KdD-Q2Mih39HUzhc.mft (raw, json)
Hash identifier: Y5QueJBEQtGzY6jkc7gkZ/n2qgUsCgnJHZ+FNNRkZ4Q=
Subject key identifier: 02:56:CC:52:C7:56:D8:0A:3B:76:D3:58:C8:A3:C3:FE:81:35:7D:6E
Authority key identifier: C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17
Certificate issuer: /CN=A9113493/serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17
Certificate serial: D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
Manifest number: C9
Signing time: Wed 13 May 2026 06:59:07 +0000
Manifest this update: Wed 13 May 2026 06:59:07 +0000
Manifest next update: Wed 20 May 2026 06:59:07 +0000
Files and hashes: 1: yLK8O4qx665KdD-Q2Mih39HUzhc.crl (hash: zcyBfWNLHpv+ynSc25dra+k3JVaeGTtalKoy+W7fVHc=)
2: 8C19B3A21EFD11F0B822DF56C4F9AE02.roa (hash: TSbzXgPkumBg0cDwPI2XndJNJ0jn2eg2lDv16RkcG74=)
3: 758E8E941EFA11F0A6533A31C4F9AE02.roa (hash: 3KZYWiJqZH8n9U/9eCnSUD7SavXQ/Ekzxh7yjVvlx04=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl
rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113493, serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17
Validity
Not Before: May 13 06:59:07 2026 GMT
Not After : May 20 06:59:07 2026 GMT
Subject: CN=6a04213b-29f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:24:70:1c:a1:f5:ab:42:5f:34:fe:71:94:de:
9d:19:e0:69:93:44:66:12:27:e6:bc:da:ce:6b:e7:
24:95:50:85:51:4d:c7:fa:ad:88:99:8b:2f:9d:ba:
e6:3e:89:79:47:4e:cb:91:69:ab:79:12:ee:48:e9:
d4:0a:ed:a3:1b:a1:c5:e0:25:fb:c0:b7:e4:95:ca:
b1:4e:ff:88:c0:f8:6b:7b:db:48:51:e1:1f:29:86:
88:c8:dc:95:97:d3:23:40:2b:38:33:b7:98:e8:3b:
72:d8:d6:4d:04:f4:1a:b8:04:14:1b:33:f7:03:87:
3e:3b:fe:ce:fd:fe:07:dc:bf:d5:e9:bf:3c:77:ad:
a0:cf:4b:1f:eb:12:5f:7a:0d:59:76:76:95:f6:bb:
8e:68:7e:1d:fe:a4:27:a0:ce:a4:a9:a7:a0:b9:93:
b6:76:f3:e5:0f:0a:ff:47:cc:24:aa:09:17:78:2f:
2d:c0:53:49:61:bb:ee:a8:07:d2:5d:d2:64:51:32:
11:d6:e5:7f:fa:eb:c7:a7:a1:b3:69:e7:6d:4d:08:
70:9e:99:08:0b:5e:fd:99:66:0e:dc:80:a8:e7:06:
14:24:db:c5:e3:5e:7c:3e:22:8d:59:88:cc:ff:86:
14:82:4a:c5:ba:ba:bc:69:bd:dd:4b:c0:fd:1e:fb:
00:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:56:CC:52:C7:56:D8:0A:3B:76:D3:58:C8:A3:C3:FE:81:35:7D:6E
X509v3 Authority Key Identifier:
keyid:C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ed:ff:06:a7:1e:1b:f1:d5:ef:e5:33:05:a6:c1:38:e8:93:39:
26:97:f0:16:4e:c0:f8:6c:52:94:03:87:f9:37:ca:9e:9c:f4:
4d:a8:73:e6:96:22:84:0a:11:68:b1:65:03:90:d1:d5:cf:62:
c7:08:3a:aa:b0:ec:b7:e5:c6:04:c3:2c:f8:98:fb:30:75:46:
31:19:41:12:e5:00:ba:93:0f:8b:d5:60:45:74:69:73:44:79:
8b:d8:73:32:9f:7b:63:12:ff:68:0d:96:47:14:fe:8f:e3:3f:
51:72:69:32:09:1e:5c:91:89:8f:85:51:f7:83:c9:e6:9d:00:
40:36:c3:90:32:71:b8:a4:4a:0a:57:a7:97:13:20:b1:41:d1:
91:dc:34:b8:01:3e:de:1e:7a:78:f3:a0:f5:b3:6d:e1:d3:4f:
fa:64:7b:26:2e:30:1a:21:55:85:84:64:af:9c:ec:c6:0c:de:
3e:34:23:f7:07:a8:09:8a:dc:58:40:22:2c:20:3f:c9:c7:a5:
28:76:21:99:9a:c2:8f:e3:72:e8:d4:6f:9a:50:ec:a9:37:30:
49:a1:e8:00:19:07:c7:e3:ca:cb:3b:ee:ae:80:d1:b9:46:2a:
20:bc:b6:76:9e:eb:12:75:70:eb:15:f2:6e:fb:ce:a5:33:64:
a2:58:ae:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTM0OTMxMTAvBgNVBAUTKEM4QjJCQzNCOEFCMUVCQUU0QTc0M0Y5MEQ4QzhBMURG
RDFENENFMTcwHhcNMjYwNTEzMDY1OTA3WhcNMjYwNTIwMDY1OTA3WjAYMRYwFAYD
VQQDEw02YTA0MjEzYi0yOWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkSRwHKH1q0JfNP5xlN6dGeBpk0RmEifmvNrOa+cklVCFUU3H+q2ImYsvnbrm
Pol5R07LkWmreRLuSOnUCu2jG6HF4CX7wLfklcqxTv+IwPhre9tIUeEfKYaIyNyV
l9MjQCs4M7eY6Dty2NZNBPQauAQUGzP3A4c+O/7O/f4H3L/V6b88d62gz0sf6xJf
eg1ZdnaV9ruOaH4d/qQnoM6kqaeguZO2dvPlDwr/R8wkqgkXeC8twFNJYbvuqAfS
XdJkUTIR1uV/+uvHp6GzaedtTQhwnpkIC179mWYO3ICo5wYUJNvF4158PiKNWYjM
/4YUgkrFurq8ab3dS8D9HvsAHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAJWzFLH
VtgKO3bTWMijw/6BNX1uMB8GA1UdIwQYMBaAFMiyvDuKseuuSnQ/kNjIod/R1M4X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzQ5My8wNUVDMUQxNDFF
RjkxMUYwQjQxMUUzMkVDNEY5QUUwMi95TEs4TzRxeDY2NUtkRC1RMk1paDM5SFV6
aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lMSzhPNHF4NjY1S2RELVEyTWloMzlIVXpoYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MzQ5My8wNUVDMUQxNDFFRjkxMUYwQjQxMUUzMkVDNEY5QUUwMi95TEs4TzRxeDY2
NUtkRC1RMk1paDM5SFV6aGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA7f8Gpx4b8dXv5TMFpsE46JM5JpfwFk7A+GxSlAOH+TfKnpz0Tahz5pYihAoR
aLFlA5DR1c9ixwg6qrDst+XGBMMs+Jj7MHVGMRlBEuUAupMPi9VgRXRpc0R5i9hz
Mp97YxL/aA2WRxT+j+M/UXJpMgkeXJGJj4VR94PJ5p0AQDbDkDJxuKRKClenlxMg
sUHRkdw0uAE+3h56ePOg9bNt4dNP+mR7Ji4wGiFVhYRkr5zsxgzePjQj9weoCYrc
WEAiLCA/ycelKHYhmZrCj+Ny6NRvmlDsqTcwSaHoABkHx+PKyzvuroDRuUYqILy2
dp7rEnVw6xXybvvOpTNkoliu6g==
-----END CERTIFICATE-----
Generated at Wed May 13 15:50:54 2026 by rpki-client