
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft
File: yy5uwVWepHY5RAtAqtdfleb9vF8.mft (raw, json)
Hash identifier: pZ0Oa6wESPi8Cv6TFy8Qqk9R6WNRHXPY/IQwVJJVFxg=
Subject key identifier: C7:AA:53:2F:EE:07:92:F0:26:11:4E:4E:43:45:07:1F:CF:88:76:F3
Authority key identifier: CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F
Certificate issuer: /CN=A9127760/serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft
Manifest number: 87
Signing time: Mon 11 May 2026 07:43:16 +0000
Manifest this update: Mon 11 May 2026 07:43:16 +0000
Manifest next update: Mon 18 May 2026 07:43:16 +0000
Files and hashes: 1: yy5uwVWepHY5RAtAqtdfleb9vF8.crl (hash: b2gdrz4LkMO0ZcN7MX8o7MdoCqn45R+OjqxLxzkjb5c=)
2: F9B1B1167E3F11F0B7941020C4F9AE02.roa (hash: 6ut+hJgutmu3/f4DHRIxmtYIF24wDhGZAw9tYwessYw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.crl
rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127760, serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F
Validity
Not Before: May 11 07:43:16 2026 GMT
Not After : May 18 07:43:16 2026 GMT
Subject: CN=6a018894-8dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:54:2c:20:7a:b7:ce:24:32:9e:aa:49:37:
3f:ca:5a:61:25:91:77:b0:59:04:9c:b9:b6:25:59:
f6:4c:0b:f9:80:39:0c:ee:bf:cf:64:59:f7:9c:ff:
6f:f6:3a:4e:0a:ed:88:4b:15:d8:09:59:58:53:be:
33:47:a4:55:ad:4f:9c:ea:62:57:8d:9d:b4:ef:1e:
c8:5e:f3:dc:5c:e0:a0:92:7b:93:f6:62:fc:01:38:
fd:cc:8f:ff:7f:9d:68:d4:b8:02:5c:18:4a:d3:47:
21:13:60:23:cb:be:fd:af:3b:47:7d:c2:61:7f:95:
2d:89:82:ef:f9:29:c5:0e:c5:10:0b:8a:1d:f7:d9:
4e:14:2b:65:4f:db:2e:66:57:c9:4f:a3:4c:49:ed:
6d:67:33:86:cb:bc:0b:3f:22:04:95:9f:46:e1:b2:
b6:68:21:20:0f:7d:a1:b8:96:6d:bf:8d:d2:24:93:
c3:1a:c4:38:60:85:b1:ff:63:7d:7d:3e:7b:ad:d3:
5a:c9:19:42:6a:2c:26:4e:fa:b7:ac:6a:7d:17:51:
bb:65:66:66:5f:1d:71:fe:4d:2d:fb:5b:09:ea:45:
02:f5:4a:8e:a0:96:d0:ef:44:c4:58:dc:44:7e:45:
c2:fc:52:52:0d:31:86:f1:a6:72:25:c2:03:4d:e2:
76:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AA:53:2F:EE:07:92:F0:26:11:4E:4E:43:45:07:1F:CF:88:76:F3
X509v3 Authority Key Identifier:
keyid:CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:6f:ca:5f:e4:b7:a7:22:a0:65:d8:db:97:38:16:29:e6:c5:
5b:6a:71:ee:59:34:a4:b3:a0:b9:5d:b9:46:b6:f2:ca:fc:10:
a1:a4:03:ef:21:99:66:22:4c:ac:19:ad:49:ef:53:d0:c3:b1:
77:56:51:b5:6f:7a:5b:e8:9d:a3:94:b6:99:7d:8e:b2:89:b8:
85:58:e2:45:a9:13:89:ac:53:0c:ec:c6:42:67:d5:d1:6b:93:
83:95:f5:15:4c:78:8e:e3:a1:ff:4a:0f:25:72:d1:aa:92:4a:
db:bc:e6:75:e4:91:f2:8d:90:c5:c9:75:1b:83:65:85:52:42:
9a:18:84:60:3b:10:7f:71:5c:2c:61:a1:f5:42:6b:33:4b:78:
43:b9:ba:bd:39:2e:7b:3c:d6:0f:d1:3b:25:39:33:c6:56:f3:
eb:8b:98:31:e9:48:13:c9:5f:b1:d0:15:a7:8e:8e:55:c8:b6:
d6:fe:7b:e5:8f:00:ee:83:9b:bf:cf:c0:9f:22:41:5b:21:c1:
e5:de:f2:22:59:3f:c6:58:af:62:8d:54:5a:00:9e:b9:fe:cb:
ed:de:74:14:43:f1:a6:ce:3e:ae:23:9f:4f:c5:df:b1:74:83:
a1:1e:7d:0c:fe:32:93:a7:f0:20:fa:d8:ab:2e:58:15:26:51:
a3:ff:80:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:44 2026 by rpki-client