
$ rpki-client -vvf rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
File: YQihMheWwWwmFLdc14tfV5DNrQE.mft (raw, json)
Hash identifier: /kzAWlnGi6OEYT6G2hSPbSBATR5OMAiBeU4NtvTIymA=
Subject key identifier: 98:7F:F9:A5:D1:5C:9F:7A:46:1F:67:BD:6D:61:8E:7A:B0:B0:B4:A7
Authority key identifier: 61:08:A1:32:17:96:C1:6C:26:14:B7:5C:D7:8B:5F:57:90:CD:AD:01
Certificate issuer: /CN=A914ACC8/serialNumber=6108A1321796C16C2614B75CD78B5F5790CDAD01
Certificate serial: 23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
Manifest number: 22
Signing time: Thu 23 Jul 2026 10:55:54 +0000
Manifest this update: Thu 23 Jul 2026 10:55:53 +0000
Manifest next update: Thu 30 Jul 2026 10:55:53 +0000
Files and hashes: 1: YQihMheWwWwmFLdc14tfV5DNrQE.crl (hash: p2P0R2Vi4Lj5RAypRA/OJhQVp5N6ACS0SnmGoyXtKAU=)
2: D5B3126E534B11F1B99ADA8D94833773.roa (hash: sXd+41/gn4hIOq0ToYPsxHfLlqQrww+estsIf7WIWOE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.crl
rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:55:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914ACC8, serialNumber=6108A1321796C16C2614B75CD78B5F5790CDAD01
Validity
Not Before: Jul 23 10:55:53 2026 GMT
Not After : Jul 30 10:55:53 2026 GMT
Subject: CN=6a61f33a-1718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:7c:12:d6:38:ab:a7:89:81:3e:fa:48:60:
65:f8:2e:06:c8:f9:c9:7a:96:2b:8e:ed:bc:c5:ae:
e8:44:cd:ab:dc:c3:65:64:59:0c:6d:54:dd:27:71:
0d:c1:4b:dd:74:68:5e:10:40:9b:41:14:53:f2:e8:
e1:7f:06:27:1d:63:b2:24:35:e6:5e:99:be:5b:9d:
63:25:cd:48:8c:3e:ac:76:b3:cb:11:69:fd:6b:89:
7f:8c:b6:9c:3f:75:5a:c4:c8:0b:20:3e:18:3f:82:
04:ee:20:04:f8:cb:f2:71:34:67:62:71:78:3f:f8:
6a:c2:bf:a9:8d:d9:2c:0d:4d:e1:47:64:16:90:0a:
59:92:54:e9:c8:df:ef:06:b3:68:5e:65:d7:c0:99:
99:e2:79:52:39:ba:41:17:83:17:3c:f2:b7:fa:c7:
83:53:36:b9:b4:7e:1e:b8:61:46:44:5e:6c:39:82:
43:94:37:d2:55:15:f2:77:c3:b4:e2:81:d9:1e:4c:
00:75:e2:2f:c9:ec:32:cb:49:d4:d2:82:13:96:6f:
ee:d5:0c:ac:3f:43:dc:27:34:59:9f:b5:13:d8:d8:
ff:d5:e1:69:9c:cb:de:1c:cc:6f:54:26:31:cc:82:
17:be:83:ee:cb:b0:ac:d7:aa:87:d5:55:c9:ec:3a:
2f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7F:F9:A5:D1:5C:9F:7A:46:1F:67:BD:6D:61:8E:7A:B0:B0:B4:A7
X509v3 Authority Key Identifier:
keyid:61:08:A1:32:17:96:C1:6C:26:14:B7:5C:D7:8B:5F:57:90:CD:AD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:26:11:1c:f7:8b:62:e5:7f:dd:12:a6:d1:07:5d:1d:93:2a:
e7:54:1a:bd:3a:f7:fb:98:a3:af:32:1d:54:85:74:e4:5c:b0:
74:c7:e2:dd:a2:cb:da:18:80:f3:ba:17:38:e7:b9:01:93:2c:
47:dc:02:1d:8f:7e:e7:ee:38:d0:90:51:42:33:a4:64:ad:ba:
d4:e0:f3:fa:ea:6f:9a:78:16:9d:c2:e9:f9:c6:7d:3d:60:a0:
21:bf:9f:8f:cc:39:66:c8:2a:0e:73:07:66:76:71:cf:97:3f:
69:6f:81:5c:ff:40:03:6f:a7:9c:8e:42:75:cb:b0:2b:cf:67:
3a:bb:2d:ce:0b:5c:79:47:e6:9d:70:df:d7:8c:a6:6c:40:91:
db:16:e7:e4:f4:2a:79:93:31:b6:28:b8:de:2d:77:2b:ca:cc:
1e:ad:b8:58:dd:df:7e:0f:6e:66:3f:f0:c2:d8:21:67:f6:24:
09:bf:1c:4a:90:1c:09:c6:cd:9e:72:d0:fe:d0:3d:47:9f:83:
61:3b:63:02:62:42:98:7e:cf:8b:78:13:29:79:7b:0c:5c:dd:
a2:59:da:3b:e6:29:b1:38:b1:a7:d6:89:0e:c1:ce:9b:04:94:
fd:0d:34:c8:ca:69:e0:27:29:e9:64:9c:c6:9c:1c:4d:5f:3a:
18:29:99:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:18 2026 by rpki-client