
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
File: YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft (raw, json)
Hash identifier: Zd85aFnPXpQO+7vz2mLxUHotOXRux3ZixX/5lSFWf3U=
Subject key identifier: E0:E2:80:61:02:E5:3A:22:94:2E:48:2E:10:CC:67:57:F3:B5:AC:0B
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Certificate issuer: /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial: 0210
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
Manifest number: 0201
Signing time: Thu 23 Jul 2026 04:25:29 +0000
Manifest this update: Thu 23 Jul 2026 04:25:29 +0000
Manifest next update: Thu 30 Jul 2026 04:25:29 +0000
Files and hashes: 1: YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl (hash: SGQucEtc1vKML//yp2VYXl+ykgGQWvhsgkLD2GmDpkQ=)
2: CDB51BDC739411EEB8BAE858C4F9AE02.roa (hash: wNyWzcRKJYqMachMShaQ5xH7ilqP4KvZkktUsCzRUfA=)
3: CD34C770739411EEB8BAE858C4F9AE02.roa (hash: qZE2RJVXRkOaQUu308Ogy2i4oQQi5FTddemUiT3SAjM=)
4: CE24A9DE739411EEB8BAE858C4F9AE02.roa (hash: 1ypTR4tpjHhybEU79OLgj9vwi7cGiaHW8fChke9PVj0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:25:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Validity
Not Before: Jul 23 04:25:29 2026 GMT
Not After : Jul 30 04:25:29 2026 GMT
Subject: CN=6a6197b9-7123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b4:b9:e0:a4:13:80:c5:02:63:a5:4c:e6:20:
0f:f4:f2:2a:7f:c7:cc:7c:07:28:d1:b5:b6:8a:8c:
ea:de:8e:40:12:bd:d7:13:68:a0:97:cf:0b:2a:af:
31:71:84:23:1b:a9:49:3f:cb:9b:64:f9:b8:b8:66:
37:53:52:63:4d:a2:c6:a2:43:88:0d:56:59:c3:8f:
a7:5c:b3:fe:12:76:de:89:59:90:bd:60:52:37:71:
17:b1:ab:53:c8:4e:84:b3:cf:15:5b:a3:4d:67:b6:
14:53:93:f4:5d:7b:05:a4:85:8f:5a:e7:87:93:8b:
e1:d8:65:2a:63:f0:e0:41:9b:a7:c4:68:97:78:0b:
8a:80:ff:cc:99:66:9f:aa:20:89:41:e9:f6:60:7e:
cb:49:c6:89:5f:77:0c:55:4e:89:75:ac:74:c5:8a:
15:83:a4:f8:61:69:88:1e:55:29:40:0f:28:de:f7:
09:86:4b:7d:5f:31:28:48:c1:bc:7a:59:b7:32:60:
78:e4:31:81:a0:a8:2d:bf:aa:d4:e0:d2:5b:6e:08:
17:80:60:4e:ce:63:be:0c:5f:fc:b0:07:b3:99:6e:
aa:ed:88:8b:48:35:a6:c3:33:4f:b0:c5:40:c2:68:
82:61:a0:de:ef:7a:6b:e6:5f:fc:30:c4:c7:56:96:
04:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E2:80:61:02:E5:3A:22:94:2E:48:2E:10:CC:67:57:F3:B5:AC:0B
X509v3 Authority Key Identifier:
keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c0:05:fd:45:e6:e4:35:02:24:ce:06:39:99:6e:a2:dc:18:
5f:2a:e5:9f:24:dc:e1:af:f4:0a:7c:5a:b6:e3:49:8e:cd:9d:
03:d0:5b:19:b1:b3:96:50:cd:dd:c1:44:ef:fe:84:f5:f5:c9:
ae:fa:01:be:fe:be:f9:70:4a:27:19:84:46:da:5f:3e:fa:f7:
0f:7b:b3:f3:1f:cd:1a:84:84:46:25:00:6d:6f:3a:be:f7:8b:
04:31:d8:1e:23:94:51:39:4e:cd:43:ec:d8:cd:5e:1e:48:0d:
bc:9b:8d:d1:33:ce:14:47:2f:ee:b9:d1:5f:d2:7e:c5:38:fd:
93:3f:7b:72:db:73:2c:64:58:8e:36:4d:86:f1:7f:e0:9f:7d:
ee:45:ff:7b:0c:6c:62:a6:26:0f:ff:e1:d4:60:b6:88:8f:b9:
1b:0e:74:a3:47:ee:66:1f:54:3d:11:fd:d4:83:06:8b:6d:4b:
67:2b:3c:06:0e:92:ec:c6:d8:6c:38:1e:91:6b:7a:e4:ee:2c:
c3:40:01:a6:77:a4:96:5f:64:18:de:8c:4f:64:d0:e8:0e:55:
f1:a8:90:f0:8a:2b:bd:32:4d:44:ad:37:e9:85:f8:6e:31:da:
47:df:64:15:2a:b1:f1:c7:d3:de:c1:95:a9:6d:cf:ec:e3:0d:
79:aa:53:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:25 2026 by rpki-client