
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
File: ygBwrFIB1vandapSXVPY4zDjIJY.mft (raw, json)
Hash identifier: vREGvc7FU3VdOcWpyNs3INu67kG2CPHx4mLQpvLhwXs=
Subject key identifier: 62:34:8A:81:35:BC:55:41:69:EE:61:49:5A:0D:9D:B2:CD:A9:EA:EB
Authority key identifier: CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
Certificate issuer: /CN=A9116907/serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096
Certificate serial: 0296
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
Manifest number: 028A
Signing time: Wed 13 May 2026 01:56:50 +0000
Manifest this update: Wed 13 May 2026 01:56:49 +0000
Manifest next update: Wed 20 May 2026 01:56:49 +0000
Files and hashes: 1: ygBwrFIB1vandapSXVPY4zDjIJY.crl (hash: NwziJg8NDKngxEcNy6BoLFMZg7KnDbXGZL0Psgy41ww=)
2: EF9D5BBCE94211F08F77753A3C6F56BC.roa (hash: dSdyOI3NKroBXRPK4g3/VXBd5t/AgAoW4VERy4gWDHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl
rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662 (0x296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116907, serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096
Validity
Not Before: May 13 01:56:49 2026 GMT
Not After : May 20 01:56:49 2026 GMT
Subject: CN=6a03da61-5b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1d:5f:ed:8f:fe:b8:ac:05:30:28:15:34:c7:
f6:9f:e3:f4:be:7c:dd:9b:d3:41:f4:14:f6:5c:41:
5d:c8:61:27:ae:f4:b5:cc:87:40:2e:19:0c:c4:dd:
db:fa:e5:fc:4f:31:9a:9c:c2:fa:98:2a:42:e6:af:
6e:d9:98:f2:41:75:6c:46:aa:c3:37:3d:e4:af:19:
9a:82:fc:b5:4b:ed:b6:c0:b8:1e:41:43:91:ec:55:
4f:00:42:0c:1a:9a:12:ac:7d:b1:d8:d4:fc:9e:67:
10:78:b2:d2:3d:45:68:f0:10:7c:bd:5f:24:92:8d:
08:c2:82:6c:0c:3f:43:bd:5b:73:bf:d9:d2:a9:73:
86:4e:b8:fb:48:fe:3c:0a:e4:8c:db:96:1d:c7:44:
91:cf:e5:cd:96:fa:b6:8c:5d:5d:db:e0:b6:20:a4:
fe:2d:9e:4d:8e:4c:74:0f:13:e7:86:7d:a3:1d:fa:
9f:da:47:02:b8:65:83:c3:12:9d:4b:09:3d:64:36:
9a:04:47:8b:80:04:12:8e:5e:05:08:9a:e4:bb:7d:
a7:0f:53:9e:7b:b1:c6:96:cd:ec:3c:15:7c:e9:ab:
f4:80:50:57:a7:e6:1e:39:e2:f1:5c:d2:15:e2:79:
74:5f:7e:e4:1e:1c:47:dd:df:10:cd:3e:03:51:20:
15:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:34:8A:81:35:BC:55:41:69:EE:61:49:5A:0D:9D:B2:CD:A9:EA:EB
X509v3 Authority Key Identifier:
keyid:CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:25:57:f3:3f:e7:42:0e:6a:16:76:55:35:82:1c:85:42:aa:
0b:0f:a1:54:00:c7:1e:2e:d6:11:83:71:f9:27:53:3b:a8:34:
5f:02:57:f7:23:28:00:25:48:a3:21:9e:9f:94:31:a4:7d:47:
91:7f:87:be:1c:42:02:58:23:ca:d3:79:67:1a:1d:ec:fd:bb:
3a:93:7d:ce:e8:50:2f:ee:28:e2:4e:d4:05:53:47:15:6d:8b:
35:30:68:2e:61:7a:98:35:cc:ea:0d:bf:b8:b1:7f:55:6f:5c:
ba:73:62:ca:30:85:cc:01:b7:f9:4c:59:a7:83:bd:b0:12:2a:
72:c9:c2:9e:83:d9:96:d6:cb:a9:59:be:7b:02:c2:9b:01:23:
68:b5:81:c0:d7:24:99:85:5d:e3:48:15:14:84:88:de:91:41:
29:8f:28:a2:04:f6:f2:80:5f:40:0e:aa:39:d1:5f:b2:4c:dd:
dc:c7:d0:a5:25:a0:4c:2a:65:c8:8e:a0:ff:13:7e:36:a6:b0:
b0:ee:ab:15:ee:6f:ce:73:73:0c:c5:52:14:59:d9:f1:cc:ce:
45:81:17:ca:62:2c:44:dd:d3:6c:a5:cd:72:54:4e:d4:c7:a2:
8a:42:f4:7d:b7:b1:18:35:c7:d0:6f:28:37:8b:3a:1d:97:97:
7a:dd:1c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:30:53 2026 by rpki-client