
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
File: YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft (raw, json)
Hash identifier: 8raRGoAtu5R1tVqJYlpZSAkjmtP6r4tG6ipCe75zx1s=
Subject key identifier: A5:82:B8:DE:B1:24:A2:EF:9F:FA:89:AD:4A:C3:45:35:5A:2E:07:BD
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Certificate issuer: /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial: 01EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
Manifest number: 01DD
Signing time: Mon 11 May 2026 03:32:24 +0000
Manifest this update: Mon 11 May 2026 03:32:24 +0000
Manifest next update: Mon 18 May 2026 03:32:24 +0000
Files and hashes: 1: YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl (hash: URfUUBVEbMP7xqyMeq0hwckG/qVuyw1UHHgRiBgJqng=)
2: CE24A9DE739411EEB8BAE858C4F9AE02.roa (hash: 1ypTR4tpjHhybEU79OLgj9vwi7cGiaHW8fChke9PVj0=)
3: CD34C770739411EEB8BAE858C4F9AE02.roa (hash: qZE2RJVXRkOaQUu308Ogy2i4oQQi5FTddemUiT3SAjM=)
4: CDB51BDC739411EEB8BAE858C4F9AE02.roa (hash: wNyWzcRKJYqMachMShaQ5xH7ilqP4KvZkktUsCzRUfA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:32:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 492 (0x1ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Validity
Not Before: May 11 03:32:24 2026 GMT
Not After : May 18 03:32:24 2026 GMT
Subject: CN=6a014dc8-424d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:05:9c:79:54:95:43:40:4f:74:fe:5f:70:b9:
5c:3f:0f:d7:34:28:b3:44:94:f2:bb:68:83:50:57:
6f:0c:2e:fc:21:d6:f9:28:3b:2c:ba:a7:00:9a:f8:
be:91:93:0f:bc:da:fc:b5:31:c8:ff:8b:cb:1b:55:
af:8a:bb:cc:95:4e:95:3d:ac:89:0a:1e:fb:22:25:
39:bf:75:37:55:6f:a6:af:d3:9d:b6:19:a6:ef:3c:
5f:25:6f:24:db:08:c7:e0:c7:6d:72:2a:8f:b3:ea:
06:34:ff:27:db:7e:fd:7b:71:f6:c0:87:2d:f5:38:
d4:7e:f4:92:47:6a:95:e0:4f:8e:f9:94:b4:fb:63:
1c:73:cc:e5:8b:3e:32:08:38:8a:fa:48:3e:a3:57:
fe:6f:be:c7:ae:72:f6:d8:7a:19:02:e7:83:d0:46:
84:1a:16:26:1b:01:0a:36:67:3f:e6:e3:24:86:f4:
cc:36:b0:87:3a:b2:60:62:90:3e:5a:db:63:4f:27:
59:fe:65:09:e7:07:9b:33:e9:a7:8f:81:00:94:f9:
fb:1d:14:79:c7:cb:ca:f0:af:fb:8c:1e:bb:67:a5:
01:23:67:d8:74:94:2f:b1:a8:6f:71:71:f3:c0:4d:
87:7e:6b:7d:55:65:0b:a2:24:f3:ed:30:c5:c4:98:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:82:B8:DE:B1:24:A2:EF:9F:FA:89:AD:4A:C3:45:35:5A:2E:07:BD
X509v3 Authority Key Identifier:
keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:ce:0d:6d:50:c7:a4:b2:26:d3:ba:bb:41:7e:d0:df:47:4d:
8d:3b:1f:19:78:b2:88:56:b6:62:71:5a:e6:ce:05:1c:d6:29:
ad:b3:af:c2:57:a2:17:f7:15:36:31:57:2d:f5:14:95:1b:b1:
0e:50:8d:f5:45:64:fc:9d:ba:25:b2:e2:8e:a9:36:47:8b:07:
87:df:db:72:56:a3:36:2a:c7:1c:8d:a2:63:20:de:7a:2e:a0:
e9:69:50:24:e7:e4:9f:e3:9c:24:c8:61:9f:d1:5f:cf:f3:28:
fc:80:6d:35:cd:e9:f7:23:da:a9:40:0c:f7:a5:aa:79:e9:59:
56:02:c5:e9:41:8f:22:4b:ec:2a:be:d1:c6:90:c3:13:07:00:
af:38:59:60:2c:52:54:1b:36:15:c3:54:4e:9c:29:6e:83:2a:
9d:80:0e:18:90:79:96:fd:f7:e2:04:65:fc:e3:63:c7:56:75:
ee:8d:c0:db:e3:dd:1a:44:b2:49:00:16:54:3e:b0:ff:d1:69:
38:be:e5:ba:4e:52:19:4f:23:5b:b5:8b:66:94:3d:f0:02:ec:
08:0c:a7:9f:a6:d9:55:ec:4a:e3:de:01:f9:94:df:ee:84:8f:
73:0f:88:b1:a5:a4:b8:c6:09:9a:d0:d8:cd:9b:89:d1:79:9a:
2d:c0:6f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:05:59 2026 by rpki-client