
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft
File: YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft (raw, json)
Hash identifier: 3i7AIkDWXW77y7sxOyKw/UTXPlbih/vr2Danw98jBAA=
Subject key identifier: D4:1F:49:17:05:20:E1:FF:B8:44:13:77:42:59:A5:D4:9F:C9:2C:31
Authority key identifier: 62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4
Certificate issuer: /CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4
Certificate serial: 0D8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft
Manifest number: 0D79
Signing time: Wed 22 Jul 2026 18:12:57 +0000
Manifest this update: Wed 22 Jul 2026 18:12:56 +0000
Manifest next update: Wed 29 Jul 2026 18:12:56 +0000
Files and hashes: 1: YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl (hash: VCQpUmp65N7Bzs4/jpZhrzdNW1XBcDiMwseueq1KcnY=)
2: 4154E51AC91311EBA6226F45C4F9AE02.roa (hash: pILIYLSoyXCPBfvCRHzHdNoR3Vcxlvl1vIwUNhIpUCE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl
rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:12:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3466 (0xd8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120FD4, serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4
Validity
Not Before: Jul 22 18:12:56 2026 GMT
Not After : Jul 29 18:12:56 2026 GMT
Subject: CN=6a610829-75ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:21:09:e3:6c:d0:92:6b:50:d4:f7:64:c8:
21:89:2a:99:14:b7:e5:b2:09:1a:50:23:52:1e:ec:
72:21:cb:eb:c8:32:90:92:f9:a9:3c:72:4c:4d:2f:
ae:49:c1:ed:e4:51:3b:04:23:00:36:28:d9:01:ea:
79:58:9d:e4:75:73:4c:31:cf:aa:d9:b8:8a:b1:35:
8a:3c:0f:16:95:22:bb:99:08:03:db:4f:0f:d9:18:
b1:ae:db:05:48:84:05:98:c7:59:5b:a9:46:15:38:
84:9f:ba:54:13:17:a1:41:d6:d1:c9:1d:59:70:1c:
47:79:1d:8f:c0:9d:ed:3a:68:6a:ad:c2:de:20:08:
e0:d9:97:99:ae:3a:ce:2f:45:19:21:64:4e:2f:31:
23:d5:29:24:89:6f:52:c5:6c:cc:98:d5:25:eb:3f:
fa:6a:4c:fa:e5:45:cd:14:3a:f8:62:dc:a8:33:2e:
86:5d:72:7a:16:68:b0:5b:bb:76:9e:5d:f3:75:d6:
63:04:e5:77:02:14:84:0a:76:af:2f:4b:18:4d:e9:
78:cb:ea:ad:35:9d:8f:46:d2:77:68:9c:e1:22:9b:
de:af:9a:22:03:40:d8:b0:37:c8:86:a5:fa:d3:87:
c3:99:d0:b8:c5:f6:4c:16:df:84:30:f6:ba:13:5a:
bd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1F:49:17:05:20:E1:FF:B8:44:13:77:42:59:A5:D4:9F:C9:2C:31
X509v3 Authority Key Identifier:
keyid:62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:84:9a:80:d2:32:cf:cb:8b:5e:cb:8c:79:4d:4a:9b:65:66:
cf:41:f5:b1:ea:88:89:82:e5:27:50:7f:ad:4f:93:d1:42:61:
4d:21:d8:f9:66:4a:10:4d:9e:58:de:2a:f7:c0:29:8b:56:b7:
97:19:2e:77:11:f7:f2:8b:af:27:5b:28:99:a5:d6:a2:84:16:
2c:7f:45:c1:0d:4d:8c:d9:ca:a7:89:d5:3c:59:38:a1:c9:be:
d8:47:20:a0:cc:dc:84:d2:42:c5:06:90:74:7c:4c:48:6f:f1:
e5:a6:f9:21:9e:66:82:6f:ef:4c:06:d2:0e:c5:c8:77:c4:67:
c3:f3:74:15:80:94:39:e8:51:d7:b5:ad:6b:6d:a2:bb:3b:ce:
5f:c1:00:a6:5a:bf:32:05:26:b9:78:ae:27:89:23:ee:f0:be:
75:d0:e8:7e:60:d0:fa:eb:59:ff:65:e1:c7:f2:3f:ce:98:12:
19:b1:28:cd:23:79:86:07:d8:5a:21:62:43:26:e7:09:a2:cb:
35:62:80:9f:98:00:c4:e0:d6:55:4d:3c:63:2e:c7:66:81:9c:
c6:34:0a:fa:5c:46:c7:fb:7f:6f:49:e5:c8:fb:09:71:5e:13:
65:83:75:3a:01:c2:f1:db:4a:fc:90:a5:69:bd:d4:9e:04:82:
b6:75:12:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:48:49 2026 by rpki-client