
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
File: yQm9soTk3whHdmDWgrfLP1lIMeM.mft (raw, json)
Hash identifier: ScQaBmTNSXZdqPyk3MO5T+fU1hW5I2vvLOz3bUMyw8g=
Subject key identifier: FE:62:E8:AD:27:51:74:20:91:22:FF:F3:02:82:DC:BF:28:C5:05:0B
Authority key identifier: C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3
Certificate issuer: /CN=A912BD25/serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
Certificate serial: 0CB5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
Manifest number: 0CA9
Signing time: Tue 12 May 2026 18:34:10 +0000
Manifest this update: Tue 12 May 2026 18:34:10 +0000
Manifest next update: Tue 19 May 2026 18:34:10 +0000
Files and hashes: 1: yQm9soTk3whHdmDWgrfLP1lIMeM.crl (hash: iVMovEhxdzCb9pKMo6oI3tV8eLqSvyvLe4b2oQi0QdI=)
2: CF3378E272DB11ED8483E95DC4F9AE02.roa (hash: k4o/xpl05MWpxfINsWsD9ge7BlRuKXGB+2xC5Rxqzp0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl
rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:34:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3253 (0xcb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BD25, serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
Validity
Not Before: May 12 18:34:10 2026 GMT
Not After : May 19 18:34:10 2026 GMT
Subject: CN=6a0372a2-5bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d6:68:e4:1d:e0:66:0c:80:b4:9a:f7:1f:98:
4c:9f:22:ee:6d:fc:98:79:43:f6:5c:06:5d:85:2e:
3f:d3:30:21:18:8b:ec:f4:05:e3:67:70:ef:6d:8c:
7f:74:b7:68:02:ea:53:2e:5c:65:e4:e9:69:0a:67:
97:a5:75:14:8d:9e:fe:1b:b1:b6:55:f4:22:89:76:
1d:78:0a:90:d2:39:da:bd:25:0a:7e:c6:96:c3:51:
27:6c:78:99:91:23:bb:33:c4:4f:a0:df:dc:9b:cc:
9b:9e:c3:cf:27:91:92:ef:96:6f:f1:cd:33:95:fe:
9d:ee:66:7d:62:86:1f:d5:88:98:96:ba:dd:3b:c2:
80:4d:ba:f8:c0:ee:ce:d5:e3:b0:42:30:bb:48:de:
05:e1:0f:71:30:48:ef:ac:1f:97:a5:74:fc:44:37:
89:90:a2:a3:09:bd:4c:1f:fb:6c:94:04:93:30:38:
91:63:3e:cd:37:9c:1e:2f:ca:66:73:ff:84:48:ca:
5b:e7:14:25:d8:48:c7:2f:ac:91:b4:f9:d3:20:20:
93:60:92:9d:e8:e6:e6:94:df:c1:8f:8a:09:9a:25:
ca:3e:00:fb:df:8d:bc:a6:d4:93:64:38:3c:cf:ef:
3f:14:70:96:aa:d2:af:43:43:dc:df:1b:77:0c:c3:
33:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:62:E8:AD:27:51:74:20:91:22:FF:F3:02:82:DC:BF:28:C5:05:0B
X509v3 Authority Key Identifier:
keyid:C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a3:5f:09:26:9d:b1:2c:4d:2f:01:4a:98:06:62:94:8c:09:
9a:92:ae:f7:b9:7a:d5:5d:bd:b1:15:da:ed:a0:5c:bf:e9:c3:
fd:c7:e0:38:1d:c0:ba:a4:f8:09:d7:b7:54:c4:a3:df:96:a5:
c4:3f:f6:89:5e:da:f9:15:5b:af:20:fa:1c:d1:a9:4e:11:2c:
58:b5:76:84:a3:91:52:68:04:22:af:ad:fb:4f:99:1b:1f:60:
0a:f4:97:6f:29:f7:7d:df:0c:13:06:1a:57:db:9a:50:9b:66:
25:4e:6e:c2:5e:5d:e6:f8:70:0d:0e:f4:1f:4f:e4:3f:5c:36:
19:27:ce:2c:7f:49:c1:58:89:f0:e2:b4:da:38:04:e2:ed:24:
10:19:46:48:e1:2f:7b:4a:88:d4:e9:c3:59:d1:f9:6a:1e:0f:
51:29:cc:d4:cb:f3:8c:9b:4e:25:40:a5:e6:68:8a:5b:32:31:
1d:b8:07:1d:e5:22:64:f1:24:8c:4d:02:49:f2:29:6a:19:a1:
e4:ba:94:24:46:6f:52:9c:65:7d:0a:66:6c:d1:27:af:0b:db:
31:61:39:f9:d2:5c:84:e7:9e:15:36:67:99:58:0f:1d:10:ee:
f6:76:bd:ba:12:15:00:ec:b7:6e:18:27:e2:d8:47:59:10:71:
b7:23:4c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:18:13 2026 by rpki-client