
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
File: Yl7U298nRjIvVZOFco6Ojl_4usI.mft (raw, json)
Hash identifier: IW41CbdfpLVnHkQewVriwfeNDf7KaXbPDkAwHu8xhU8=
Subject key identifier: 1F:A6:3E:44:24:D3:B1:F9:BD:17:A1:7C:6C:B0:96:EC:CD:26:24:FB
Authority key identifier: 62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2
Certificate issuer: /CN=A9114899/serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2
Certificate serial: 0850
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
Manifest number: 0839
Signing time: Tue 12 May 2026 21:04:47 +0000
Manifest this update: Tue 12 May 2026 21:04:47 +0000
Manifest next update: Tue 19 May 2026 21:04:47 +0000
Files and hashes: 1: Yl7U298nRjIvVZOFco6Ojl_4usI.crl (hash: ehBlm60NpBqtRLPhDzYlLtHZ2mSdj4nn4DJa5GdRxek=)
2: 53093BC469DE11F094E16744C4F9AE02.roa (hash: 1p73ZeotPbJ3TemVvVZqXvbSf05sdp3huzlwxxL33ww=)
3: 48728BF269DE11F091F06044C4F9AE02.roa (hash: XrC+twP35eEE0VoJEXE2NgHwIqsHhcjLryu81w4UBcc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.crl
rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2128 (0x850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114899, serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2
Validity
Not Before: May 12 21:04:47 2026 GMT
Not After : May 19 21:04:47 2026 GMT
Subject: CN=6a0395ef-8458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a1:89:8c:55:b1:0a:da:18:40:5d:dd:c8:3b:
f5:ce:31:2b:cc:67:56:0f:8d:cc:46:ab:9b:0a:ee:
73:71:11:54:80:c7:d4:ed:9a:5e:41:43:7c:6f:c1:
60:a7:71:e6:1e:a1:bd:16:4f:ec:a8:bf:de:ec:cc:
1c:1e:9e:60:d0:29:7c:01:dc:01:e3:ad:66:56:f4:
5d:27:1f:ad:be:d8:4d:72:c5:6e:99:9c:98:62:5b:
21:50:d9:dc:b3:f8:f6:b3:43:2d:cb:fe:9c:21:00:
15:fd:ed:84:ac:42:a8:d5:51:b0:a3:8f:18:db:1a:
3d:12:c5:b9:68:d3:f9:2c:bc:e9:ec:5c:d9:fa:05:
c2:8f:e0:7b:f3:30:d6:21:58:05:41:39:74:2e:53:
e0:55:59:c1:3c:e7:0b:dd:30:3e:04:9c:42:7b:d7:
b4:e4:c4:ef:69:1d:4a:b2:88:df:c2:db:19:68:ee:
16:72:17:68:b6:1a:ee:fc:bb:31:72:81:97:6a:76:
b6:e8:dc:2f:21:e8:ae:b3:d8:38:d3:79:45:9d:3a:
25:43:ff:7e:6e:f8:05:d6:79:93:c3:30:00:ad:3e:
1e:9a:aa:39:80:0e:0e:0f:ba:6a:bd:dd:43:4d:50:
ff:3e:6f:38:1a:a6:41:a0:29:37:92:64:85:50:36:
a3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A6:3E:44:24:D3:B1:F9:BD:17:A1:7C:6C:B0:96:EC:CD:26:24:FB
X509v3 Authority Key Identifier:
keyid:62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:c1:18:d5:d5:c5:07:07:3d:77:13:a6:55:8e:0e:ac:42:ca:
16:e8:48:e9:03:f2:40:22:cb:ed:79:d5:37:fe:2f:f2:4d:89:
69:ed:d2:13:1e:e1:19:cc:3a:09:97:a9:44:2e:73:81:f2:40:
bb:a2:6d:f2:01:18:a6:fb:6e:5c:0a:73:89:63:b6:4d:dc:ee:
d9:ba:8c:74:3e:0e:81:b5:d7:9c:5c:2a:bf:4d:df:ef:9c:6b:
a3:89:d7:12:ee:48:54:bb:cb:9f:a1:c4:35:81:1a:79:a9:20:
08:ff:19:60:b9:e4:bf:d3:68:63:87:2b:78:fb:df:3c:05:ab:
5f:57:27:d0:b8:ef:b1:a0:fb:33:b0:a4:e1:4a:c6:d8:c7:7c:
d4:2f:82:02:d4:31:17:dc:39:ef:23:30:5a:49:a9:f6:14:df:
62:2b:b0:b0:01:e3:f5:5c:83:40:32:ce:9f:ac:a8:b5:cd:f3:
92:d5:37:a8:8c:92:bc:d2:b5:34:d8:1e:ff:e4:a8:97:a8:e8:
73:7a:0a:a5:ef:0f:bc:df:23:de:3f:98:77:14:9c:09:35:66:
fc:71:fb:41:9e:a3:1f:15:0d:50:13:da:f4:28:5f:e4:60:77:
8a:d2:fa:14:11:55:18:d4:0c:a2:c0:66:b9:ee:e0:0b:15:66:
93:8b:ad:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:05:26 2026 by rpki-client