
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
File: yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json)
Hash identifier: sW50ryxYrvyIbVcnihYLf9xWRcIITWcyyxVoEvjOJHk=
Subject key identifier: 6B:B0:09:E2:09:06:EB:A0:FF:A3:EE:0D:5C:21:B2:61:D3:80:F3:D0
Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40
Certificate issuer: /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
Certificate serial: 0C5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
Manifest number: 0C3E
Signing time: Wed 22 Jul 2026 19:04:55 +0000
Manifest this update: Wed 22 Jul 2026 19:04:54 +0000
Manifest next update: Wed 29 Jul 2026 19:04:54 +0000
Files and hashes: 1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: eIrX9a4ndl6PffQlqJwTczG8k7KteB9nCtnh3v2iLf8=)
2: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: NNkPApcMl17Fe2ICzZKJl1AOkbO+YYiI8uoP32kJG3k=)
3: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: iYKsxDWu3S2WTBmkPPCzWiLUj+VpiqqOdy4MbHyYgYs=)
4: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: ltYps8if0G6nvc97HNna0dOwk3QKPLcJcqz29XZNF8A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl
rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:04:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3164 (0xc5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
Validity
Not Before: Jul 22 19:04:54 2026 GMT
Not After : Jul 29 19:04:54 2026 GMT
Subject: CN=6a611457-e371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:cd:e8:85:3c:16:8d:f1:2f:21:dc:0f:2a:
27:97:b4:0c:13:61:e6:52:24:2c:5b:4b:f3:42:ad:
ea:80:a4:10:02:6e:f3:ec:b7:24:79:6a:b8:78:79:
65:a9:d8:ee:c8:b2:27:88:5c:81:0c:dd:30:49:d9:
17:e8:29:c8:38:7b:85:52:08:3a:b9:4a:14:66:cc:
a0:8d:f9:1d:06:77:22:9d:0f:33:56:e3:aa:a6:1f:
d3:03:91:60:e7:44:70:b6:59:49:b7:bd:e4:d1:d4:
71:fe:3c:a0:9b:97:54:04:e0:22:9a:c2:90:15:25:
18:62:9a:15:8d:71:6b:bc:3b:93:ee:af:ae:c1:95:
fa:62:0f:f3:82:1c:19:1a:b8:a3:f2:cb:2f:be:ce:
bf:20:a8:50:73:f8:f0:90:a5:cd:72:63:21:9b:0e:
c3:51:de:fd:a7:4b:97:06:84:ae:26:c1:57:3f:ec:
cb:83:13:14:77:e1:22:3a:09:a3:12:ee:76:58:69:
b8:bd:54:3c:ca:22:ea:06:ab:ac:ae:02:b0:53:a3:
68:ef:b3:4c:3f:0a:a9:58:db:c9:d0:af:f4:15:dd:
e9:a5:c3:66:3b:31:80:8e:6d:2a:cd:fd:c6:20:d1:
83:46:a5:bd:a4:c8:63:ac:9d:9e:17:5c:f7:ec:ff:
c0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B0:09:E2:09:06:EB:A0:FF:A3:EE:0D:5C:21:B2:61:D3:80:F3:D0
X509v3 Authority Key Identifier:
keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f6:a9:7c:35:a2:2b:21:f0:b0:fc:68:17:d0:99:c8:6f:19:
e8:33:eb:40:a9:47:03:1a:a4:b3:82:80:1d:80:0c:84:13:c7:
ea:e5:b3:ce:3a:33:b0:24:d5:31:8f:54:fe:8b:22:41:86:4f:
5f:29:fa:4a:8a:64:f2:8c:c5:78:71:af:eb:bc:aa:58:10:28:
bd:14:66:e8:07:c4:34:cd:f2:61:26:94:67:cf:8c:76:d3:43:
99:00:d7:1e:91:f2:4a:9c:6a:10:89:ed:76:03:87:c4:49:15:
33:bf:be:06:0c:0f:13:7a:11:71:b2:e8:91:82:69:b0:19:a6:
56:73:d7:43:10:a6:0d:17:60:b9:b2:52:db:9a:21:d9:9d:9d:
26:25:3f:a0:7f:f2:50:7a:54:c7:91:e1:9d:5e:7b:42:0f:f3:
e2:f6:1a:67:c1:21:44:cb:a1:9b:9b:1b:74:d9:f3:a8:88:93:
8f:be:ba:58:23:3d:50:06:6c:6d:a5:b9:c8:fa:b6:6f:82:07:
72:ad:58:c4:3f:a4:f0:26:ea:9b:88:e9:da:c8:c3:89:c3:4c:
f6:89:3c:06:4f:f3:d7:ae:36:70:79:21:f3:be:77:63:9b:2b:
26:35:4a:08:d7:0f:79:09:fb:72:56:fb:04:24:e1:c4:32:52:
aa:d1:27:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:50:52 2026 by rpki-client