
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft
File: ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft (raw, json)
Hash identifier: jKLazucADoNTAITW1YyZ3TtZSiz7oTLm8qj+EvoNmqs=
Subject key identifier: A2:A8:D7:71:8A:72:21:B1:87:66:CA:70:23:E4:5F:1C:F2:12:C1:9C
Authority key identifier: CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8
Certificate issuer: /CN=A912BD8E/serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8
Certificate serial: 0148
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft
Manifest number: 0144
Signing time: Sun 27 Sep 2026 05:52:50 +0000
Manifest this update: Sun 27 Sep 2026 05:52:50 +0000
Manifest next update: Sun 04 Oct 2026 05:52:50 +0000
Files and hashes: 1: ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl (hash: iHVegHcwgFYaAAIQYZCEjaHieUWIxDvgc3L7UXkT6xA=)
2: 095AF45ECE8911EFBEC5D618C4F9AE02.roa (hash: D7h1gktg5+5yyaBrNhzNSFMs7boyS9O5+bm+qSSzUdI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl
rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 05:52:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BD8E, serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8
Validity
Not Before: Sep 27 05:52:50 2026 GMT
Not After : Oct 4 05:52:50 2026 GMT
Subject: CN=6ab8af32-ca32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:c9:db:8a:6f:a2:17:bb:93:64:30:35:a9:
09:dc:ce:fd:c4:30:2b:54:60:6a:dc:08:66:bd:5d:
96:9c:ee:f3:76:86:04:82:1a:46:9c:4c:d2:58:c1:
55:ab:0f:e0:03:b4:c3:e5:5e:f5:ef:d0:f1:6e:1d:
c2:51:29:b9:c5:5b:5d:7f:ad:be:61:0a:0a:ee:c3:
a4:0c:84:d5:88:f0:c5:f7:ef:62:3d:81:9c:dd:5b:
4c:36:0c:9f:7f:71:08:05:c1:94:5b:fc:51:30:21:
78:06:bd:1a:40:2c:48:02:c2:fe:a6:0a:f1:b9:46:
20:2a:4f:c1:fb:f8:85:a9:82:36:92:a2:a5:f2:e2:
51:25:81:c9:51:2c:67:a6:9b:4b:26:36:75:e1:a4:
69:f4:27:57:cd:4d:48:97:c5:2a:2d:33:0b:26:e7:
71:8f:c8:8e:3f:14:d2:45:e6:6a:ed:d6:4a:b6:f4:
5a:69:94:fd:e2:23:4a:38:c4:86:09:65:09:37:3f:
84:aa:0d:6e:a5:4d:f8:e1:2f:b7:5b:3f:60:50:87:
fb:ec:0f:38:53:67:ce:0b:3e:aa:b5:2c:55:ad:d2:
a2:d3:3f:a5:bf:d7:1f:1e:e7:e6:8f:11:27:59:ff:
c9:82:3a:92:e7:1b:88:ee:08:ed:ad:a6:0e:a7:8e:
5b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A8:D7:71:8A:72:21:B1:87:66:CA:70:23:E4:5F:1C:F2:12:C1:9C
X509v3 Authority Key Identifier:
keyid:CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:4e:41:07:29:74:48:47:2e:e7:c0:5e:21:79:d7:4e:99:ea:
6f:23:81:b0:f9:e9:d3:5a:14:6b:22:52:84:a3:ff:0a:da:2b:
a7:cc:6f:d4:9e:b1:48:22:2e:8b:3e:f5:38:08:b5:0b:b5:db:
3f:fd:62:66:7c:2a:9b:b1:0b:a5:af:af:8e:fe:5d:1c:34:30:
a8:85:62:c8:4a:c6:93:ba:6f:47:5b:9b:f6:b1:53:50:c4:e7:
53:0c:2a:e4:85:90:8e:b8:64:66:fb:72:19:f0:c4:29:08:0a:
3b:c7:89:c4:84:b0:f0:be:95:15:86:eb:73:e5:2d:92:d7:42:
34:a7:30:26:48:52:4f:6b:7f:95:5a:a1:d0:f3:2a:bc:ab:5a:
cd:06:78:32:a8:ba:f5:46:fd:f9:03:8a:2f:d3:bd:a5:f0:94:
f5:8e:73:32:29:6e:a5:5c:36:73:eb:43:b2:2d:bc:87:e8:44:
82:af:40:f6:7d:1a:a9:87:fe:18:96:c7:bf:e0:ea:32:4b:8f:
58:35:8a:01:c2:fa:05:c1:0d:db:01:61:01:95:02:ab:d1:99:
e4:51:f5:1f:62:19:02:37:b7:d2:21:35:59:19:a1:22:56:18:
79:a2:6d:b6:3e:02:b1:58:e7:10:e2:a1:d5:71:66:4a:e0:80:
89:6c:f8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:45:31 2026 by rpki-client