
$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
File: yil3R0MKG-s0C8o51iIv0mQZt9s.mft (raw, json)
Hash identifier: 6pw7KKrbCacs8Ws9P/H62bNq8jHQGahyT7Tiq4IjKGE=
Subject key identifier: FD:7D:FA:77:B0:BE:81:4C:36:03:CF:3D:90:A1:6F:D1:EC:7B:31:4E
Authority key identifier: CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB
Certificate issuer: /CN=A91417B0/serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
Manifest number: 011E
Signing time: Thu 23 Jul 2026 07:35:00 +0000
Manifest this update: Thu 23 Jul 2026 07:35:00 +0000
Manifest next update: Thu 30 Jul 2026 07:35:00 +0000
Files and hashes: 1: yil3R0MKG-s0C8o51iIv0mQZt9s.crl (hash: uf+EiUPH4I/Wag0ovOXNYM/0ZCv3Vu97fwX7dPshGfY=)
2: 5909D86203DB11F0B7D5DD29C4F9AE02.roa (hash: tvmpk8Ite7pSp5NKIoDYEAchnf/U0Ef+pNgJmhuXtZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl
rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91417B0, serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB
Validity
Not Before: Jul 23 07:35:00 2026 GMT
Not After : Jul 30 07:35:00 2026 GMT
Subject: CN=6a61c424-96c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:fe:9b:83:07:ab:fd:42:8e:11:d0:a6:8e:49:
8d:77:09:b5:0c:57:5f:b3:cd:fd:37:41:ec:51:f9:
07:44:1a:09:b9:0f:b1:f0:b5:b9:e0:b7:b6:64:75:
8a:b5:d7:4e:a3:09:f5:99:4e:a0:4d:14:89:23:5f:
71:22:35:23:91:49:06:ee:62:0f:db:26:66:19:69:
50:52:3f:dc:56:48:44:47:34:7f:1c:fa:c1:3f:48:
a6:25:04:9d:de:d0:83:09:7b:db:46:76:89:ce:00:
28:01:af:fe:6a:68:fb:58:d2:0e:f8:9d:51:1d:54:
f4:9a:20:db:3e:4f:96:65:85:de:b0:32:e7:ab:3d:
fc:ac:b0:47:88:68:e9:1d:da:c0:52:4a:53:6d:82:
da:dc:6a:38:2e:19:57:77:8a:dc:e9:52:51:d6:64:
f5:1b:a0:ce:99:67:e4:00:09:ca:cc:c9:ab:92:ff:
78:fc:71:1c:3d:29:6b:fb:52:e5:4f:90:44:30:f3:
61:c1:bd:16:26:d2:1b:d0:21:0a:70:50:3f:9b:35:
ef:46:d6:0d:7c:fb:82:00:c3:45:09:05:ed:df:89:
8d:0f:7f:ad:3b:7f:2d:f9:14:ad:76:d8:61:f9:2e:
21:5b:70:d0:b3:83:90:8e:b5:41:07:2e:fb:91:9b:
81:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7D:FA:77:B0:BE:81:4C:36:03:CF:3D:90:A1:6F:D1:EC:7B:31:4E
X509v3 Authority Key Identifier:
keyid:CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:98:f9:14:8d:89:90:0b:97:2d:8d:26:34:0e:88:1c:e3:b6:
5a:82:e6:91:a1:b2:be:64:c4:ac:52:ca:91:06:00:ab:d6:ef:
89:13:bc:c0:4e:41:0d:f5:8a:a6:69:75:32:2a:d7:90:82:17:
9f:d0:ff:eb:b3:9d:22:e4:69:82:27:a0:2e:fe:5c:72:cc:26:
af:68:64:b0:7c:a0:8c:07:e6:40:ac:75:15:30:0f:65:63:88:
dd:dd:94:fd:da:be:ff:df:34:42:cb:6b:59:18:61:c3:c3:f5:
b6:e3:c1:f9:48:4a:19:84:13:ec:6f:e6:12:8d:27:fc:78:ff:
3d:fd:d3:95:ec:d7:2b:ed:34:2e:00:da:e3:f5:0e:34:f3:04:
e4:37:9b:20:df:f6:45:49:68:23:9c:54:4e:7d:e2:c8:14:0e:
02:04:6d:d9:cb:97:13:e8:c5:0c:fd:57:ff:4f:43:42:f8:5d:
61:64:e8:8b:0f:b9:9f:f5:75:fa:20:04:68:13:e6:a9:58:d4:
97:4c:42:79:c2:d6:44:03:08:ad:9b:13:94:29:39:06:41:bc:
a6:59:f0:d3:22:7c:1e:e0:4b:a0:61:e1:b7:fd:40:98:e4:88:
18:38:a3:c9:d1:88:e6:66:c6:0d:33:f7:8f:49:6c:69:c4:f2:
28:04:cf:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:01:08 2026 by rpki-client