
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
File: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft (raw, json)
Hash identifier: lVzqMhk4RBsqumFpS3nDUQm5nNvWWbHrFSC4Mv4C7Yo=
Subject key identifier: A0:0A:FD:20:00:30:F9:36:C4:0D:11:34:5F:AF:CB:7A:F9:04:A6:38
Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
Certificate issuer: /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Certificate serial: 0859
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
Manifest number: 083C
Signing time: Tue 12 May 2026 21:05:08 +0000
Manifest this update: Tue 12 May 2026 21:05:07 +0000
Manifest next update: Tue 19 May 2026 21:05:07 +0000
Files and hashes: 1: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl (hash: A29ROfiZ1K5EGquprexrZR6UjlvM8luUmt10x1kHbV8=)
2: 8D0DD6C2690811EFAC6DE109C4F9AE02.roa (hash: XxTxvEaSE5hUqY+FgqA+JjfK7ug+VG+l0z5zQK56p5k=)
3: 7AAA8154000311F191DFD8AE3C6F56BC.roa (hash: x6G+iXovRti/BntEfhaZ6wM5ntzRbJdW9j8h7+t6XG0=)
4: 7A299148000311F191DFD8AE3C6F56BC.roa (hash: CFc84riH2MB87zU/DpJZ0VZbTskfpT/fcnC+lNYeR50=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2137 (0x859)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130395, serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Validity
Not Before: May 12 21:05:07 2026 GMT
Not After : May 19 21:05:07 2026 GMT
Subject: CN=6a039604-cfff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:57:99:18:39:f4:f9:5a:29:b4:2f:bc:21:82:
05:d4:1e:a9:33:34:c5:ac:c3:1d:28:8d:af:96:44:
2e:82:f0:15:02:5f:c5:8e:16:5c:8b:73:c8:08:0c:
1d:06:9b:8c:4a:bc:f6:a9:cd:98:97:e7:5b:5e:ba:
43:77:9a:72:58:22:9c:1f:24:66:57:f0:7c:d6:b2:
29:49:1b:88:e5:0d:b0:ba:30:e0:1c:6b:34:4c:70:
2e:48:13:71:b5:f8:ee:73:d8:83:01:54:c5:69:6b:
2f:56:ab:f7:67:ec:2a:cf:8c:75:4a:e5:44:7e:9b:
b8:a0:16:db:49:fe:fe:3a:71:b1:24:55:be:1f:2e:
60:84:92:41:90:f2:0f:ff:35:e3:ac:f5:3d:1f:40:
60:43:cf:31:0c:9b:93:c5:6b:48:e5:78:f1:62:18:
89:01:e5:be:18:a6:80:92:3e:f0:30:db:09:d8:54:
07:55:b6:68:ec:92:bb:85:c1:fc:d7:98:c0:86:11:
c0:fc:08:e1:e0:80:b5:9e:8e:f5:91:ac:5d:85:93:
94:8d:04:38:ba:ca:c6:24:5a:09:b8:05:6c:90:e4:
81:c5:0b:26:a1:8a:07:c2:1a:7a:5d:c2:8b:db:c9:
3e:ce:ef:a1:f6:7d:3a:11:dd:d6:f7:16:b9:36:e7:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0A:FD:20:00:30:F9:36:C4:0D:11:34:5F:AF:CB:7A:F9:04:A6:38
X509v3 Authority Key Identifier:
keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b4:02:98:31:02:f9:8e:9b:c8:82:e2:f2:fb:a3:f8:53:66:
3a:d8:d4:eb:52:29:4a:2a:ed:f8:95:a9:97:53:94:21:46:39:
e8:fb:25:1a:f5:d6:08:66:18:68:43:95:f0:b9:79:06:0c:f9:
b5:89:98:43:de:eb:38:fb:dd:94:d8:7d:9a:3a:a9:3c:bf:a2:
60:5d:cb:eb:63:8d:7d:af:2a:48:88:f3:93:9f:7b:fb:21:4a:
39:ec:97:24:da:40:a5:58:1b:f8:4e:d9:a0:fa:ca:15:29:6d:
cd:50:7d:83:33:8b:1f:56:9c:6a:3d:b4:fb:7f:2f:65:2c:0b:
a3:2b:a5:5f:b2:8d:45:d4:f9:34:5f:ae:f1:5a:0c:95:02:c0:
29:23:5f:dd:8d:e7:54:bc:b4:ab:b8:74:4a:56:8c:10:a2:94:
58:4f:03:30:3c:0c:cf:75:28:b5:db:78:8c:cc:0a:a4:26:7f:
9c:62:2d:57:c5:17:ac:8f:eb:70:16:7f:86:0e:19:dc:26:96:
83:28:c2:91:25:87:5e:f2:e9:dc:09:9c:40:6a:17:01:7e:4a:
c3:5a:27:92:b6:32:2d:dc:d2:f9:e4:b7:3f:75:d6:de:a7:34:
25:42:b6:48:f6:b4:3a:72:05:e5:a7:c5:f1:6e:dd:5e:68:74:
a7:1f:e6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:05:45 2026 by rpki-client