
$ rpki-client -vvf rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
File: P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft (raw, json)
Hash identifier: 4ci0Ij0cHt5Wa3YefrvNpCUHTPRLcMNj66lIhJ2x6hU=
Subject key identifier: 81:DE:00:5A:99:AE:D7:15:A8:C8:75:7B:AF:BF:A4:88:0D:C3:8D:55
Authority key identifier: 3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94
Certificate issuer: /CN=A914988F/serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094
Certificate serial: 0876
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
Manifest number: 086C
Signing time: Tue 12 May 2026 20:48:15 +0000
Manifest this update: Tue 12 May 2026 20:48:14 +0000
Manifest next update: Tue 19 May 2026 20:48:14 +0000
Files and hashes: 1: P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl (hash: 91A/wzobJEadCq/6Ma06QGLuZNLArmqS+iiT91Z0lZ0=)
2: 4ED5A00CFE2611EAA4F3424DC4F9AE02.roa (hash: JI2Y4J6EIn1uWFB8nwUdnofquITm7Yx3KS03ihwD+yc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl
rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2166 (0x876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914988F, serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094
Validity
Not Before: May 12 20:48:14 2026 GMT
Not After : May 19 20:48:14 2026 GMT
Subject: CN=6a03920e-174a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:79:98:b4:2c:89:d2:1f:f8:28:76:ce:ae:9b:
be:fe:b4:f1:29:39:e2:3c:71:6d:50:5c:2f:13:e7:
57:1d:fa:69:a2:c3:00:53:5e:4a:4b:8d:dd:55:13:
11:24:17:cc:a6:78:cf:2a:44:93:65:18:f2:99:c5:
e9:d2:1d:ef:91:f7:7f:4a:55:97:55:6f:1a:db:71:
35:7b:4e:95:9a:11:87:65:7a:3a:0f:d2:50:08:82:
2b:db:dd:5f:c0:65:dc:31:6b:cc:23:31:58:3b:7f:
98:a9:9a:bc:63:a9:89:c2:3b:6a:f1:50:a4:4d:35:
7b:42:e8:32:82:29:87:62:ca:c4:c7:cf:6c:be:fd:
ce:c3:26:5e:7f:d1:59:8e:49:df:43:44:e5:90:e4:
7a:66:fc:eb:23:a3:d0:87:1b:83:6d:4d:f5:e7:f6:
ee:ec:57:6e:93:d2:46:f8:48:ff:ed:a6:04:8a:d8:
93:5a:cd:6a:8e:08:59:ae:86:1b:f6:97:01:6f:b5:
fa:52:e6:7f:8e:01:0d:2c:5b:58:b3:6f:38:6a:ec:
b8:8d:f9:d8:eb:fd:d7:a6:68:87:55:60:76:a6:70:
bb:79:a7:4c:bb:df:5e:f7:6c:16:28:12:6a:c1:43:
8b:ce:de:46:4c:f5:b4:d7:7c:ee:4b:46:54:8d:53:
7a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DE:00:5A:99:AE:D7:15:A8:C8:75:7B:AF:BF:A4:88:0D:C3:8D:55
X509v3 Authority Key Identifier:
keyid:3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9e:87:9a:77:93:74:fc:fb:7f:2e:6b:b4:53:7e:6e:b7:c9:
d0:66:f5:f0:83:e4:7e:b4:c0:44:9b:a0:d7:9c:23:8b:19:02:
3e:1d:da:04:95:99:e9:6f:88:96:86:45:be:d3:2d:2c:15:70:
66:78:9e:4b:f7:94:5d:6d:a3:66:b5:19:7f:9a:df:b3:92:a2:
d6:64:79:07:f7:f6:77:5e:ce:0f:94:51:09:df:b3:94:b0:68:
2b:2d:dd:88:73:4c:7e:9f:57:a3:80:f3:7a:1c:45:0a:3c:99:
a4:a4:eb:f6:f3:a3:e7:62:02:43:e5:fb:cb:ff:93:dd:23:ab:
5c:0a:16:fe:4b:2d:d7:e4:44:00:a7:6c:08:60:be:79:05:ba:
fc:97:f2:c6:7c:53:4e:e7:8a:6a:4b:35:af:dd:6c:ea:e6:12:
c9:1e:d9:b0:1c:a4:36:8c:e0:63:7c:69:99:7b:72:1b:d6:43:
13:3b:b1:3b:2d:74:e1:fe:c1:2f:78:44:01:6d:74:59:67:d3:
21:90:36:10:b0:6b:75:e8:39:62:d5:d4:46:c1:3d:0e:c0:ae:
e7:a4:a7:77:31:11:03:7c:12:ce:5a:89:64:76:d7:d5:98:3d:
ea:07:e6:d7:94:48:65:72:51:87:93:9f:b1:5b:d3:9b:7e:b3:
c2:29:ed:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:10:34 2026 by rpki-client