
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft
File: YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft (raw, json)
Hash identifier: /xpHcWKq+UvSlWI77KII2GEYV889ffjMrNbURDE0Xos=
Subject key identifier: 26:1A:5D:D9:21:A5:BE:CC:1C:1A:D3:EA:D3:82:EB:6B:C0:D2:34:97
Authority key identifier: 62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4
Certificate issuer: /CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4
Certificate serial: 0D66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft
Manifest number: 0D55
Signing time: Tue 12 May 2026 18:03:58 +0000
Manifest this update: Tue 12 May 2026 18:03:58 +0000
Manifest next update: Tue 19 May 2026 18:03:58 +0000
Files and hashes: 1: YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl (hash: LZSjlrGpFso2iWOy+BXh60NshTHU38oZY+TwSbjVl44=)
2: 4154E51AC91311EBA6226F45C4F9AE02.roa (hash: pILIYLSoyXCPBfvCRHzHdNoR3Vcxlvl1vIwUNhIpUCE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl
rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3430 (0xd66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120FD4, serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4
Validity
Not Before: May 12 18:03:58 2026 GMT
Not After : May 19 18:03:58 2026 GMT
Subject: CN=6a036b8e-8136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:45:e3:4b:75:30:e1:de:46:cf:12:06:fd:c6:
1a:9a:79:89:2a:10:8f:22:c6:22:fc:2e:b8:8d:31:
26:7c:3b:c5:5a:97:eb:78:dd:65:42:c8:2a:a2:5b:
50:f0:09:e9:19:dc:5b:bc:24:ce:4a:ea:92:4d:7a:
c9:40:fd:21:49:f8:bf:f6:1c:1f:09:1c:d0:65:90:
d0:fe:01:a2:a2:d0:a7:22:5b:e6:ad:04:18:49:a7:
2b:37:b0:55:39:48:0e:84:07:50:2a:87:c4:bf:30:
aa:9c:46:4e:a3:01:8e:e3:dd:10:8d:9c:fc:f2:5c:
c1:82:83:20:df:7b:ed:88:ff:86:cd:e2:b8:d8:4f:
18:04:e8:86:51:91:f5:6e:6d:89:7a:26:be:12:1b:
68:87:02:7e:6b:8b:32:ae:43:97:1b:23:3d:74:46:
eb:01:25:3f:47:58:0a:98:37:a0:b4:1f:b4:09:05:
69:78:a5:bc:91:9b:a2:78:73:07:47:bd:bd:82:8a:
d0:f7:ca:4b:a1:63:42:64:eb:84:9a:97:d2:81:54:
5a:fc:e0:b3:3b:75:a3:f4:69:9a:98:be:96:38:b6:
f5:7c:ad:ef:a7:4c:ba:05:a2:a9:6d:43:a0:dd:60:
b1:d6:48:63:cb:c6:fb:1a:c1:4d:29:9a:d0:fe:5d:
65:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1A:5D:D9:21:A5:BE:CC:1C:1A:D3:EA:D3:82:EB:6B:C0:D2:34:97
X509v3 Authority Key Identifier:
keyid:62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:06:49:00:01:65:95:0e:cc:9f:90:60:24:bd:36:c4:2a:6f:
d2:d5:63:a6:ce:30:df:e9:89:28:93:96:ee:9b:32:4c:9b:11:
13:10:ff:cd:d0:0c:55:bf:31:d2:d2:80:ed:c1:de:e6:42:66:
bc:26:c4:78:05:06:9a:80:12:02:1d:2d:34:77:e5:58:3b:bf:
c5:d8:3c:da:47:4d:41:d9:22:e8:f6:9b:0b:c8:f8:80:dd:e4:
1f:6d:d9:79:78:51:96:28:95:dc:e1:7e:52:65:e2:2d:d0:c1:
d5:d8:0b:f7:b9:4c:01:38:b7:d0:93:e2:52:3a:57:9e:b7:9c:
eb:51:80:c9:00:a1:6b:62:a4:e2:93:ba:15:59:5f:f9:59:f3:
9d:d8:1f:af:0b:63:d4:d7:3e:ac:e3:69:94:52:1a:72:6e:d9:
f6:ba:8c:cc:d7:19:44:23:40:e3:1a:9d:17:3e:16:7e:55:a0:
22:80:8b:8f:a9:29:17:40:9f:f7:f6:16:ae:62:d2:0f:57:a9:
5f:79:f3:f6:5a:96:f3:61:95:79:7e:5a:a7:c0:53:bd:80:70:
52:f4:66:38:95:38:1f:48:d2:69:d1:cf:40:81:78:5b:c5:42:
11:96:90:fe:65:e4:af:63:6d:98:de:c3:8e:74:db:7e:03:f9:
3f:4e:52:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:39:15 2026 by rpki-client