
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.mft
File: YoElNRN3xZBrhJugUmeYfheuLeQ.mft (raw, json)
Hash identifier: BJThofR0dgfbEi1UjD/tdamPbsaarNGHdaS2faZkZF4=
Subject key identifier: E8:0C:B4:37:76:07:8B:D9:11:A6:D1:8A:64:73:EA:0D:90:23:0A:FA
Authority key identifier: 62:81:25:35:13:77:C5:90:6B:84:9B:A0:52:67:98:7E:17:AE:2D:E4
Certificate issuer: /CN=A914E801/serialNumber=628125351377C5906B849BA05267987E17AE2DE4
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoElNRN3xZBrhJugUmeYfheuLeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.mft
Manifest number: 0D
Signing time: Wed 13 May 2026 09:15:02 +0000
Manifest this update: Wed 13 May 2026 09:15:02 +0000
Manifest next update: Wed 20 May 2026 09:15:02 +0000
Files and hashes: 1: YoElNRN3xZBrhJugUmeYfheuLeQ.crl (hash: kKp336Im3cpKEhIeVPOGZG4mUsixkPpxh296miujs78=)
2: 6FCDD2583E2A11F1A3496A87B6833773.roa (hash: Ai2MwF3dSzKIObesI/BV2cneUL9Hmjliymu4mkNTO8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.crl
rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoElNRN3xZBrhJugUmeYfheuLeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 09:15:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E801, serialNumber=628125351377C5906B849BA05267987E17AE2DE4
Validity
Not Before: May 13 09:15:02 2026 GMT
Not After : May 20 09:15:02 2026 GMT
Subject: CN=6a044116-a36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:0c:96:bf:19:96:7f:54:f9:da:bc:ce:d2:
76:7a:c1:9f:31:ff:77:61:e2:1e:33:7a:04:c5:66:
6c:e7:01:b6:d2:c3:b2:78:43:94:8d:23:ac:42:f3:
76:dc:97:fe:16:a1:ab:e5:aa:ce:40:85:aa:ab:33:
26:81:27:37:47:48:05:02:b4:4b:5e:41:03:fe:af:
72:41:93:38:35:62:b4:5f:28:2b:8b:c6:c0:f0:7a:
31:25:d8:30:e7:8f:25:08:f3:3b:e8:5e:46:c4:ba:
01:e6:03:c2:60:62:95:db:4b:e2:0b:23:a1:a3:0e:
df:a3:03:2b:67:4b:01:65:fa:57:4d:e3:fe:66:e4:
17:96:68:92:ec:35:bc:d9:3b:7d:4c:cd:03:e3:b6:
59:b7:df:f2:87:21:98:0a:1b:17:aa:e6:bb:c9:de:
0c:27:16:e8:01:a2:e3:08:ce:bb:1f:60:d7:7a:a4:
eb:b4:a5:6b:44:52:b2:e6:ca:85:a5:e8:d3:77:27:
43:41:44:57:ba:e0:d5:40:66:0c:f1:a6:e1:c3:8e:
0a:23:64:90:6b:43:a7:31:36:18:67:ed:24:6e:55:
2f:ac:d9:42:f8:12:dd:ff:02:43:87:91:72:75:8e:
90:fd:96:50:d0:59:e0:8b:1b:00:61:40:78:53:c4:
77:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0C:B4:37:76:07:8B:D9:11:A6:D1:8A:64:73:EA:0D:90:23:0A:FA
X509v3 Authority Key Identifier:
keyid:62:81:25:35:13:77:C5:90:6B:84:9B:A0:52:67:98:7E:17:AE:2D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoElNRN3xZBrhJugUmeYfheuLeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:94:b9:f8:f5:6d:17:ea:bf:67:08:ca:02:41:74:cd:44:d8:
f9:ea:70:cd:36:ca:d5:e4:a9:8b:c4:05:45:ec:bc:59:68:6c:
e7:b7:ef:47:7b:9c:39:a2:01:73:64:2e:d0:cf:05:3a:57:7c:
d7:a4:27:02:cb:4e:fa:f4:d8:cc:74:df:fb:63:18:97:a4:6f:
af:9f:d7:a4:eb:51:26:9c:d4:66:13:c7:a9:c4:fa:a0:a3:98:
59:a7:66:d6:1b:ad:ae:98:cf:e0:03:d7:c1:13:7c:9c:6c:0c:
37:95:38:02:1c:7f:eb:76:9e:ae:c2:ce:12:8e:b4:59:fb:cc:
91:66:08:20:1f:4b:0a:e4:48:e3:bf:af:46:bb:9b:58:94:f2:
20:7e:56:41:64:fb:d5:be:5c:79:b9:08:f6:56:50:6d:48:49:
75:73:df:17:04:16:ab:d7:14:cb:c5:75:57:c9:47:25:b3:54:
01:c8:1d:0e:83:7e:c1:07:54:f8:18:af:bc:d4:de:81:dd:4a:
cd:12:14:6a:b6:33:12:e8:99:05:ec:c8:59:14:da:70:be:ce:
b4:93:4c:b6:16:95:a5:b7:bc:45:27:67:10:49:a8:eb:1b:d7:
e0:af:13:d4:ff:0d:35:b5:c0:1e:e8:1c:cd:ba:f4:b5:fb:95:
53:7a:75:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:41:32 2026 by rpki-client