
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
File: y-ExoIOkVjx8Q52webZLatEQGnw.mft (raw, json)
Hash identifier: EiO3lwQw4i4MSvptLkdiTcfDlUQX42CpRpZNxLxNd6g=
Subject key identifier: D5:5E:3F:CB:76:A4:9B:A3:E3:8E:66:F9:B5:5D:17:C2:13:12:FA:D1
Authority key identifier: CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C
Certificate issuer: /CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
Certificate serial: 096E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
Manifest number: 0954
Signing time: Wed 22 Jul 2026 20:36:53 +0000
Manifest this update: Wed 22 Jul 2026 20:36:53 +0000
Manifest next update: Wed 29 Jul 2026 20:36:53 +0000
Files and hashes: 1: y-ExoIOkVjx8Q52webZLatEQGnw.crl (hash: /WOOOv0vqRO6zB5YQjtlHE9JrLrFX6Lq835AqaeNuoM=)
2: 91B81F1EC2BA11EA8A079767C4F9AE02.roa (hash: 6Szm2QWfkOsYb1i1zd7g9FOIR4EuHLgd8D1MqV0Eyn4=)
3: F043A0CCC2B411EA9BAFF054C4F9AE02.roa (hash: VNNGkBpD1q5WZ16FnB1qRceTw8NjIdUzV5+D2PvmOUk=)
4: 90D4C28CC2BA11EA8A079767C4F9AE02.roa (hash: xPzPEEzjonH18gW4iaUITzfSURpkuwZnTJJlRi6h5I4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl
rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:36:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2414 (0x96e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EED0, serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
Validity
Not Before: Jul 22 20:36:53 2026 GMT
Not After : Jul 29 20:36:53 2026 GMT
Subject: CN=6a6129e5-c84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b8:a6:11:99:ab:c4:8a:04:d7:ac:c1:f4:11:
a5:f4:97:fa:e0:7a:b7:78:e2:41:ff:e5:03:80:60:
4c:a9:05:60:41:a3:cd:e5:09:70:da:54:bb:1e:7e:
58:45:2f:7b:74:fa:ce:76:2a:90:50:df:38:a7:7e:
c0:ce:95:e4:fb:53:c9:08:0c:28:77:70:0d:a6:ba:
ef:37:5b:a1:cf:06:ae:19:2c:6b:0f:38:1c:e5:89:
d4:3c:de:00:2a:0f:59:8a:b5:4f:dd:8a:ab:41:bb:
7a:0c:53:7a:a7:2d:d9:f0:01:b5:00:54:db:b4:9a:
64:71:60:87:c1:3d:49:03:3c:4a:3e:11:40:c7:4a:
c9:bf:b5:de:38:99:a9:61:52:d1:2c:3a:c8:4e:f5:
5e:99:cc:65:69:14:41:c5:bc:a5:a9:6f:21:02:16:
5c:65:7a:4d:8c:f9:0d:00:48:a1:e2:6d:6d:1c:47:
e2:11:df:61:67:e5:93:0b:dd:54:41:f2:1e:70:c7:
61:9d:92:65:db:0c:c1:83:b0:80:d5:21:bd:8c:82:
a3:8f:fb:c6:e3:78:b0:b6:16:85:b5:15:18:03:fa:
4e:78:00:15:a6:89:db:fd:67:03:53:6f:44:60:a8:
b4:89:86:42:e3:bc:10:6e:ac:5a:7f:ac:57:ca:7a:
99:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5E:3F:CB:76:A4:9B:A3:E3:8E:66:F9:B5:5D:17:C2:13:12:FA:D1
X509v3 Authority Key Identifier:
keyid:CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:b7:1e:5a:09:7d:18:52:fa:84:ff:07:6e:ee:58:e0:3c:41:
55:ad:88:52:f0:b0:1f:cb:60:ec:a0:ec:c8:34:59:c3:5a:d1:
75:04:f5:f8:f1:44:4c:97:30:32:e8:9b:ea:34:4b:47:cc:f2:
15:a7:b6:b9:1c:2b:5a:7a:ce:da:2d:dd:df:37:a5:ed:5f:fa:
cb:db:28:96:fd:76:c5:4f:b8:87:15:0d:52:1c:e3:22:66:43:
48:78:ab:53:0a:ff:55:1f:df:b9:27:7f:19:e7:19:84:5b:bf:
ac:6c:85:0a:16:4b:0b:b9:7d:6f:bc:48:83:18:43:6f:1e:6d:
ea:45:92:59:fc:53:4a:b1:eb:1c:08:7f:57:fb:b1:75:57:e5:
3a:a7:f7:35:ef:8d:1e:a5:90:13:8b:15:bb:75:71:a6:a8:8a:
48:ec:2f:20:0e:24:97:70:65:6c:5f:44:dd:95:a5:3c:be:a7:
14:62:03:2d:94:da:b4:17:e7:a1:9e:02:83:85:2e:f5:fb:03:
21:f0:51:41:f3:2b:10:ec:fb:b4:1f:8a:5b:b2:5a:90:f2:f7:
00:d4:47:12:0f:6b:3d:75:ba:40:af:8e:46:4f:bd:4d:85:10:
47:12:f5:11:25:3f:3d:d9:fe:bc:4a:a7:c9:8d:93:e6:8a:ac:
1a:03:2e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:11:23 2026 by rpki-client