
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft
File: Y4g-TKLI593aw5h-SE_R1nLZOUk.mft (raw, json)
Hash identifier: IV7w7XKeJQgvAk+Rmzc9z+uyem7vlzU/S+dPH0yd3Rk=
Subject key identifier: 17:00:31:CB:CB:36:9A:C9:4F:A7:EC:39:A3:33:0B:24:FD:4A:B3:DA
Authority key identifier: 63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49
Certificate issuer: /CN=A913E4AA/serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949
Certificate serial: 0CF4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft
Manifest number: 0CE5
Signing time: Wed 22 Jul 2026 18:42:18 +0000
Manifest this update: Wed 22 Jul 2026 18:42:18 +0000
Manifest next update: Wed 29 Jul 2026 18:42:18 +0000
Files and hashes: 1: Y4g-TKLI593aw5h-SE_R1nLZOUk.crl (hash: 6Y1zgf56S0PI79I8TW7C5YMPNVdM+jxqRfuxcIl4vgk=)
2: DF7C7778A97711F0A76BF369C4F9AE02.roa (hash: BQ60yu99DWJ9CNKy9x/LydxX4YGxdVFeZGopEZ5WrOo=)
3: 3C48E7BECA0E11F0B519EA6AC4F9AE02.roa (hash: BJhR7XO5jBVX7pJopEIukYOW4YF8aEvCYgvTMv/w/5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl
rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3316 (0xcf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E4AA, serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949
Validity
Not Before: Jul 22 18:42:18 2026 GMT
Not After : Jul 29 18:42:18 2026 GMT
Subject: CN=6a610f0a-c9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:fe:82:99:e4:3a:28:4e:bd:56:ad:6c:71:
1f:23:fc:02:01:dc:53:43:f8:e6:a3:92:f3:ac:f1:
49:f4:2d:5c:e9:ec:ef:c7:d7:49:94:83:f2:f9:12:
83:18:c7:18:1d:19:75:3a:81:40:50:48:bc:73:0d:
db:cb:16:06:bb:65:af:bc:bf:5c:c8:4e:c1:f7:0a:
a3:12:06:52:43:e0:d2:76:f5:50:ce:f9:97:3b:5a:
f0:f0:61:0f:a3:49:8a:22:cc:6a:9e:85:f0:ee:f0:
a1:59:89:66:63:ea:c2:6f:0e:8e:a0:06:45:7f:f9:
91:eb:9f:19:d2:f4:07:79:52:ab:d7:d0:e1:52:d5:
6f:5c:91:5f:3b:7d:6d:71:e8:43:62:bb:32:04:5a:
15:3d:b1:ff:0f:da:22:56:41:2b:46:61:1b:03:3b:
02:2f:9c:94:84:f4:cf:1c:e5:c2:c5:72:8a:85:b8:
8e:52:24:d0:2d:15:d0:cb:ba:c6:81:c6:8c:dd:01:
d0:9f:bb:ed:40:62:27:62:42:ad:4a:9e:ee:74:ac:
e0:32:0c:8d:7a:70:72:2f:99:40:3f:c0:a3:bc:67:
48:d8:59:ad:6c:45:65:30:34:a9:47:47:3c:f5:c7:
1f:0e:bb:cb:2b:67:94:c7:ae:45:4a:ed:25:f9:cd:
32:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:00:31:CB:CB:36:9A:C9:4F:A7:EC:39:A3:33:0B:24:FD:4A:B3:DA
X509v3 Authority Key Identifier:
keyid:63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5b:7e:0f:d5:fe:5d:4e:65:7d:73:13:78:00:18:5f:ce:1d:
f4:e3:1a:45:47:15:5e:00:cc:ac:5c:d3:fd:39:df:69:f2:7b:
07:01:21:c4:8a:b6:8e:6a:1d:8a:05:32:68:cb:6c:8e:76:b6:
8d:dc:30:57:04:f0:49:e8:17:5e:d6:cc:0e:b5:d8:45:57:2b:
36:98:6e:3d:f7:a6:44:2f:55:39:c0:b9:6a:11:69:67:95:90:
62:d3:c2:4a:d2:be:d4:6d:42:5b:63:65:47:6f:7c:f5:d9:75:
d8:4e:77:a8:57:a9:a4:67:a6:32:90:c6:9d:ff:01:b2:f6:1d:
66:4b:3a:17:ea:31:ff:4b:57:ab:c3:ac:c0:3c:86:ac:17:16:
ec:30:26:f7:1d:b1:e9:7a:63:9c:20:f1:10:51:3c:cb:bb:6b:
1d:17:46:83:cb:2e:17:60:3e:e4:a5:1e:e1:fd:b4:2b:30:fd:
4c:3e:69:2d:b6:7f:11:0e:b4:be:0d:d8:7e:ca:8f:c5:a7:ac:
f0:60:32:8a:0c:53:6f:e3:ab:1a:a2:28:68:92:d2:07:ab:82:
c3:bd:e4:b4:3b:dd:7c:37:57:89:67:99:33:61:89:cc:2a:42:
34:dd:28:12:65:c1:66:e5:f6:06:f4:6d:33:61:7e:6e:e1:b9:
47:de:82:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:13 2026 by rpki-client