
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
File: yQm9soTk3whHdmDWgrfLP1lIMeM.mft (raw, json)
Hash identifier: DdLeI5/KEaoYkWsUvIiZnBVvvS2KFpo09xYDVW7gN0U=
Subject key identifier: 8F:87:D2:DB:4A:20:07:56:1C:AF:83:3E:E6:82:61:D7:FD:62:F2:37
Authority key identifier: C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3
Certificate issuer: /CN=A912BD25/serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
Certificate serial: 0CD9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
Manifest number: 0CCD
Signing time: Wed 22 Jul 2026 18:44:54 +0000
Manifest this update: Wed 22 Jul 2026 18:44:54 +0000
Manifest next update: Wed 29 Jul 2026 18:44:54 +0000
Files and hashes: 1: yQm9soTk3whHdmDWgrfLP1lIMeM.crl (hash: 72GiTfktwhVEYE0o8wOlcsbZiRvgOilbz3KKXsx9vZo=)
2: CF3378E272DB11ED8483E95DC4F9AE02.roa (hash: k4o/xpl05MWpxfINsWsD9ge7BlRuKXGB+2xC5Rxqzp0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl
rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:44:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3289 (0xcd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BD25, serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
Validity
Not Before: Jul 22 18:44:54 2026 GMT
Not After : Jul 29 18:44:54 2026 GMT
Subject: CN=6a610fa6-991e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:98:0f:b7:5a:6c:28:a2:fa:d8:ac:04:61:
29:b4:2c:d8:2a:58:d4:90:a8:86:33:98:70:0e:db:
e7:d2:14:af:7e:08:fc:6b:62:1c:b6:8c:56:a7:39:
06:00:92:c3:58:78:7f:fb:95:80:fa:58:a4:06:73:
13:44:42:71:4a:fd:64:2b:1f:48:57:69:df:d1:71:
88:ff:90:24:93:da:db:7d:b0:b4:e7:c0:ed:81:72:
e9:2e:7e:6f:bc:e4:33:94:b0:f4:39:f7:54:8a:08:
b4:08:f0:03:24:37:8d:a4:86:81:7b:97:42:82:e0:
c8:34:70:f1:b0:c9:1c:bd:57:41:0c:ec:eb:65:64:
b2:77:5b:ef:7f:8d:5e:6e:1d:40:76:4f:8d:d6:2f:
a0:11:08:f4:28:45:51:71:87:45:a9:59:f2:d7:17:
33:e9:29:70:89:c3:b3:8f:c3:4c:93:cd:bc:47:ab:
93:ce:a2:e6:33:6e:58:b3:18:f4:93:f1:36:d7:1e:
3d:da:6e:e0:b4:18:b2:39:7a:e0:94:d3:45:ec:73:
7e:52:f1:2b:fa:8c:91:c3:5b:2e:fe:70:a9:ae:53:
fc:d7:41:6d:c7:9b:10:1a:f1:88:56:6f:d5:94:39:
a7:63:e7:03:35:61:aa:3a:6d:c8:d5:c8:fa:c7:aa:
2a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:87:D2:DB:4A:20:07:56:1C:AF:83:3E:E6:82:61:D7:FD:62:F2:37
X509v3 Authority Key Identifier:
keyid:C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:6e:58:e9:78:7e:12:72:12:a5:57:0e:b7:3b:47:88:0f:10:
88:b1:c1:1f:52:41:9d:61:c6:12:99:2e:0b:26:04:e0:df:0b:
10:23:9d:41:72:95:19:08:99:01:15:30:e7:0e:0f:af:24:60:
ac:e9:35:d0:8f:73:59:fc:51:18:8c:ae:39:38:4a:6c:b9:41:
ca:3f:f6:30:5f:74:4c:a2:09:8f:e7:a0:f7:84:b4:0b:5b:f7:
0d:89:3b:b0:26:79:7b:6a:42:21:c7:89:89:1e:47:84:76:2a:
e6:41:21:28:44:1d:f4:2f:5d:91:51:27:1f:82:87:48:e9:32:
36:42:75:04:26:bb:76:e6:78:de:b0:0f:ac:67:11:36:83:68:
22:b4:84:af:eb:8e:00:37:7f:23:9a:93:7a:e0:65:27:c6:9e:
bd:f4:63:3e:af:a7:c6:5d:f6:3e:3c:ad:2e:3a:c9:73:f2:20:
05:f0:79:84:87:e4:43:20:b5:66:3e:0d:48:fa:17:23:35:c7:
42:4b:2c:3d:49:7b:9b:46:63:b1:3e:c1:fa:8e:94:0d:3d:71:
05:f2:b1:23:0f:fe:74:6f:82:7e:8f:15:38:5d:2c:2e:98:c8:
69:6c:9a:bc:61:f4:85:93:f0:24:d2:a5:2b:b6:70:a9:f5:8d:
c1:db:0d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:21:10 2026 by rpki-client