
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
File: YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json)
Hash identifier: +BvQjiAsgTSo3C9olGm83LOwQw0RiPWXQZnoCW/3Fn0=
Subject key identifier: 6B:55:E1:94:BB:14:B9:54:20:60:72:D9:F2:79:0F:F1:A0:C4:B3:B3
Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Certificate serial: 0579
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
Manifest number: 0560
Signing time: Tue 12 May 2026 23:32:07 +0000
Manifest this update: Tue 12 May 2026 23:32:06 +0000
Manifest next update: Tue 19 May 2026 23:32:06 +0000
Files and hashes: 1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: J/MFFwHvS/d5HU9tZZ5Yj5CE27KDJzmi+Yq+f68qenM=)
2: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: 79TNb9upWSGm9yBDGngscbHy7jvkh/bVgSJa7W+FYrI=)
3: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: MCVYIDVOykTmNbo90DABkV8onNjQjPmA4NHqWOQwZM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl
rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1401 (0x579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Validity
Not Before: May 12 23:32:06 2026 GMT
Not After : May 19 23:32:06 2026 GMT
Subject: CN=6a03b877-097c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:5f:ff:d7:53:05:77:66:80:cd:73:47:e3:
05:00:da:8c:86:3a:75:4d:a9:33:33:7d:7c:e4:42:
b2:7b:15:60:d4:e2:b5:3d:8a:ce:71:28:e1:33:af:
87:e4:e4:cc:59:5e:f9:b6:39:45:02:f6:46:a9:13:
5b:2a:99:05:34:94:48:14:6e:5f:8b:09:12:44:61:
20:e8:87:d4:4f:7f:3b:fd:6f:4a:01:9d:0a:56:82:
3f:e0:d5:a3:aa:66:96:a6:07:c9:2d:6c:87:f6:b2:
a5:f3:01:30:9f:f0:be:9e:cd:ad:ef:07:7c:93:3f:
3c:99:11:d5:e4:6f:4e:33:ca:a5:9c:94:8b:d1:53:
89:fb:a2:fd:80:6e:76:03:24:85:e5:55:90:ec:06:
c1:76:32:f4:d4:69:8e:05:ae:99:68:23:96:45:ad:
70:4a:80:aa:79:2f:74:9c:e5:ff:9f:60:bf:9e:2b:
9e:d4:6b:6a:d1:00:39:51:f0:a2:a6:e0:cd:e1:a2:
9d:60:f8:3e:96:c0:e9:4e:ce:88:e0:71:ea:d1:0c:
ce:b5:fa:3f:9c:2a:cd:c8:aa:1a:fb:62:f3:77:a6:
48:20:70:c8:4e:db:73:bc:14:14:71:0b:ce:f8:8f:
e9:4f:e4:51:42:71:c3:3a:f9:b5:52:8e:1e:92:ea:
df:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:55:E1:94:BB:14:B9:54:20:60:72:D9:F2:79:0F:F1:A0:C4:B3:B3
X509v3 Authority Key Identifier:
keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:b1:7e:28:53:18:2e:1f:ee:a3:85:ac:15:a9:c7:3d:5d:c5:
14:2d:c4:70:2f:e4:6f:c7:06:92:6a:c3:45:b1:3b:55:7c:09:
e5:bd:50:ef:81:ca:58:4a:96:b6:d8:64:e3:af:b5:bf:49:f6:
c5:b4:d2:06:ab:72:df:58:ee:8b:47:1d:ab:cd:97:27:92:76:
b5:d5:ba:16:d9:ab:97:2e:e8:51:5b:11:14:45:94:60:2d:a8:
01:35:95:0a:b8:d9:fb:d5:05:23:fe:ab:14:71:3f:7e:c5:2a:
59:9a:ac:d0:d5:c3:8a:d0:67:68:fc:24:79:3d:08:5d:94:41:
60:5a:04:7e:7d:89:81:5e:bb:9d:b0:6f:68:7f:af:99:38:bb:
8f:63:a7:5c:44:f2:8a:2e:a0:85:20:21:77:9b:2e:35:43:47:
d4:47:0e:46:ed:02:7b:1d:ac:37:e2:49:2f:b8:5b:42:e8:ff:
94:69:e8:18:55:1c:50:27:15:79:ac:30:29:8a:e4:fb:3f:4e:
31:75:50:38:a3:ac:86:72:a4:c5:1b:4d:0a:fc:a2:d5:f0:fc:
ff:dc:0f:28:fb:02:1d:97:0a:93:f1:de:1f:a0:6f:c6:4f:76:
b1:7c:25:94:71:40:1d:a0:47:d6:54:0e:a0:82:34:88:0c:3b:
88:03:4e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:18:35 2026 by rpki-client