
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
File: YhuBwQnlqnjYKfMKV9o1MwglT2k.mft (raw, json)
Hash identifier: onJOIceEuBNPqiGtb1lc/Or/EWzQC/XOV2XXIN77QJE=
Subject key identifier: 64:73:31:29:AB:C2:64:69:65:77:5C:BA:9E:1E:D5:3C:D9:ED:82:F1
Authority key identifier: 62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69
Certificate issuer: /CN=A9138D62/serialNumber=621B81C109E5AA78D829F30A57DA353308254F69
Certificate serial: 0516
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
Manifest number: 050D
Signing time: Thu 23 Jul 2026 00:28:54 +0000
Manifest this update: Thu 23 Jul 2026 00:28:53 +0000
Manifest next update: Thu 30 Jul 2026 00:28:53 +0000
Files and hashes: 1: YhuBwQnlqnjYKfMKV9o1MwglT2k.crl (hash: q+H5bAYf7B4669vRzfZA5iyqCwsYZ7AFFgOnEKEOQUg=)
2: 31E51BB65FD311EC9AA5DA4EC4F9AE02.roa (hash: QGxKWKuwU4koWUT3cHCTo7iWv57eqY9PU0NUcULxizU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl
rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1302 (0x516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138D62, serialNumber=621B81C109E5AA78D829F30A57DA353308254F69
Validity
Not Before: Jul 23 00:28:53 2026 GMT
Not After : Jul 30 00:28:53 2026 GMT
Subject: CN=6a616046-c772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:78:d8:b3:53:67:cc:9c:a3:c9:0c:d6:5c:63:
1e:b5:25:a8:71:5e:2b:4d:6f:8f:9f:8c:82:49:93:
60:b5:8e:fb:bd:e6:f7:21:a6:5c:db:d1:11:6e:58:
14:92:d1:ab:f7:b9:a7:17:06:e2:99:66:f0:b7:ce:
03:5b:cd:ec:4c:f8:b2:6a:60:aa:c5:58:3a:b8:42:
66:98:ea:fb:30:de:f6:fb:34:be:0b:9f:ce:e1:70:
32:e9:e2:19:a2:65:ef:90:23:1b:ca:06:82:2a:3b:
23:0f:fd:73:89:21:2d:09:54:56:2c:7a:c4:f7:8c:
2b:9d:b9:31:d3:45:f1:0f:4f:db:56:94:df:75:7c:
a9:7b:3f:f9:51:c2:1c:8d:a4:5b:94:3c:00:13:10:
09:f0:eb:93:4a:fd:0f:de:d0:b9:04:84:8e:e2:9d:
3f:8a:62:27:3b:81:29:8f:c6:e2:15:4b:6c:68:77:
a4:f7:c7:94:2f:ae:1f:51:0b:6b:4f:47:ca:23:98:
11:21:db:6c:d5:28:ac:fb:69:0a:34:97:80:20:bc:
c6:4d:a4:78:c5:ac:f0:e1:74:5e:a9:d8:c4:db:54:
81:41:2d:e3:c5:09:6e:d2:ff:f5:38:a9:71:d2:bf:
e9:a6:e8:09:7d:23:50:17:6a:57:7c:f2:36:39:da:
90:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:73:31:29:AB:C2:64:69:65:77:5C:BA:9E:1E:D5:3C:D9:ED:82:F1
X509v3 Authority Key Identifier:
keyid:62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:76:1b:1c:2e:45:e5:d9:fd:c4:a7:07:3b:e5:d2:30:34:9b:
f3:c8:b4:bb:50:42:e5:37:30:3b:0b:d3:dd:36:4c:45:c5:f4:
7b:34:00:51:89:96:e9:56:c4:2c:cf:7e:30:14:39:15:a5:ee:
8a:04:17:74:e4:b2:84:b0:31:e7:25:bc:97:f2:ff:8c:61:32:
60:cf:78:b7:a2:8f:19:0e:f5:c7:56:8b:46:6a:95:5c:06:07:
26:07:59:30:af:be:21:45:69:c3:da:bf:6e:01:4b:76:88:a5:
c5:a1:54:b5:1f:54:22:0b:b6:4d:fe:91:f7:6e:88:eb:ce:bd:
f9:f3:00:a8:ae:92:3d:2a:2f:10:e9:38:d1:c5:79:6b:e8:ad:
c0:1e:0f:ad:16:0b:89:7a:4b:d3:ae:02:0d:47:ec:86:62:68:
ba:29:10:62:59:4a:3f:79:0e:4c:7a:b2:7a:97:9c:f7:18:14:
2d:b1:50:63:30:bc:14:f3:b7:53:92:a0:e9:a1:95:d1:35:56:
25:e9:c2:3b:ab:b9:44:96:1b:a6:d3:fc:24:48:a3:f7:34:d8:
35:2c:86:27:d0:f9:18:61:50:76:28:40:65:8e:10:65:13:d8:
c9:09:21:d5:12:e4:4b:21:d0:89:6f:ff:86:cc:22:cf:76:52:
2d:a8:69:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:12:38 2026 by rpki-client