
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
File: yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json)
Hash identifier: PKNFUSMkyBP2M8kxm5PqyzPfu2QKDEor254bIam9Nng=
Subject key identifier: DF:47:77:AE:C4:CB:29:3A:53:D4:AA:0A:1F:EE:6E:F6:49:54:62:4D
Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40
Certificate issuer: /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
Certificate serial: 0C38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
Manifest number: 0C1A
Signing time: Tue 12 May 2026 18:52:30 +0000
Manifest this update: Tue 12 May 2026 18:52:29 +0000
Manifest next update: Tue 19 May 2026 18:52:29 +0000
Files and hashes: 1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: cih0DiM4DO4x9ZNrdmMdfhCzOh+KeW5hot5S73/2e/Q=)
2: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: ltYps8if0G6nvc97HNna0dOwk3QKPLcJcqz29XZNF8A=)
3: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: NNkPApcMl17Fe2ICzZKJl1AOkbO+YYiI8uoP32kJG3k=)
4: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: iYKsxDWu3S2WTBmkPPCzWiLUj+VpiqqOdy4MbHyYgYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl
rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:52:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3128 (0xc38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
Validity
Not Before: May 12 18:52:29 2026 GMT
Not After : May 19 18:52:29 2026 GMT
Subject: CN=6a0376ee-434f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e9:69:f5:00:72:a9:27:bf:c8:e5:bf:07:79:
c4:47:87:fe:7c:a8:5d:5f:5b:f5:df:a6:44:f8:8d:
17:71:2b:cd:64:be:ec:3a:a7:6d:13:3a:22:e9:72:
32:78:bd:18:93:cd:58:7f:87:88:a3:73:a5:0d:3d:
f5:89:31:45:4c:4a:19:04:1f:61:35:7b:2b:52:09:
6b:e4:24:00:f2:39:6b:a5:e0:f7:03:f8:b6:17:69:
ed:9e:71:f9:60:44:ff:11:8d:72:aa:e1:82:86:30:
27:01:42:2a:c1:7b:68:89:44:03:22:32:1d:b0:00:
f3:4b:32:f3:13:7f:00:a7:5a:2a:ac:3d:02:6a:00:
eb:d8:7e:3f:41:76:3d:41:94:6f:19:ba:cf:ef:cc:
f7:43:5e:91:ac:77:93:2d:63:09:f5:2c:30:b2:a0:
67:f8:f9:a2:5d:80:6a:15:6f:12:79:4d:f4:4a:6c:
b5:e7:29:22:ae:f0:1c:ec:6b:c8:fe:81:8d:90:e5:
a0:6c:4f:c8:b5:fa:d0:71:1f:9e:48:db:91:59:bf:
50:31:27:9d:24:66:83:a6:6b:75:54:f8:e2:36:50:
ea:70:dc:44:a6:c6:f2:ce:94:38:0d:48:9c:53:61:
d7:7b:6b:dd:43:4c:66:bc:07:af:2d:e0:1d:c8:6f:
f4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:47:77:AE:C4:CB:29:3A:53:D4:AA:0A:1F:EE:6E:F6:49:54:62:4D
X509v3 Authority Key Identifier:
keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:1b:82:1e:31:82:39:56:79:3a:f7:be:95:b6:c9:09:11:94:
9c:c3:c3:1e:d4:26:66:01:93:7f:70:45:c0:4a:c0:0e:8a:b5:
3e:d4:66:90:3b:6b:30:3d:2a:69:63:6f:a9:35:c6:41:23:1d:
92:4e:d3:16:dc:87:72:bd:8e:cd:5b:13:b4:e5:1d:e2:3f:de:
13:f1:14:28:a4:a7:bd:61:b3:26:b1:c3:59:1c:79:c1:60:36:
84:d1:3b:b6:81:ab:e2:1e:94:74:e2:5c:3d:c4:63:0c:54:52:
8f:a3:26:90:5e:cf:ae:2f:4f:f7:eb:ff:a2:e1:dc:62:00:e3:
f1:60:9b:7b:9a:2a:a7:de:c6:bb:b9:c1:a8:58:d5:9b:f4:56:
ae:7c:0b:39:0e:78:ed:09:ea:a5:d4:51:3c:31:3c:ba:66:21:
87:fd:88:1b:0b:e4:88:ed:22:7c:f0:9b:3e:35:72:77:ed:1a:
0b:6f:61:f0:17:32:a2:5e:e4:b9:e1:bd:8a:b4:67:00:d1:2e:
99:29:3a:10:8b:cb:a0:d1:89:cf:2f:db:ad:60:47:1a:7a:4f:
9f:5a:b4:5a:6f:63:ce:78:93:18:3e:74:15:f1:b7:3c:de:b6:
96:c3:c7:06:9d:44:88:99:7e:1b:78:03:e2:1d:d5:e3:24:13:
85:56:0d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:37:53 2026 by rpki-client