
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
File: YDL2P9JhaBpA9zC5eHJR5jMozW4.mft (raw, json)
Hash identifier: MMRq5QFZTQY4KkG6kfWKXdKQtEeWHt59FTTJs8O9Igk=
Subject key identifier: 62:71:9A:DD:F5:2D:A3:42:76:D3:72:0E:F9:84:95:88:95:9B:FC:19
Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E
Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
Manifest number: 018D
Signing time: Mon 11 May 2026 04:34:34 +0000
Manifest this update: Mon 11 May 2026 04:34:33 +0000
Manifest next update: Mon 18 May 2026 04:34:33 +0000
Files and hashes: 1: YDL2P9JhaBpA9zC5eHJR5jMozW4.crl (hash: yZTHZEZOGK0yRlt51RX63eysMhI2WhBzIPfcHz5ELU4=)
2: 2FA6E74C0E0511F0971F7328C4F9AE02.roa (hash: IRQ5tUvjSdYBMHXJtMeaFpdBVsbhUU9VeI4w+7YPShY=)
3: 8A27B986FFB811EFB6E16425C4F9AE02.roa (hash: EXf60aPYaF6V19CZAmIAiXajARXVjVYLev6p/NnSpqE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl
rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:34:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155098, serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
Validity
Not Before: May 11 04:34:33 2026 GMT
Not After : May 18 04:34:33 2026 GMT
Subject: CN=6a015c5a-b950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:42:31:f0:74:b5:c6:65:eb:8a:e8:0a:22:
6d:3e:bf:cf:4c:84:88:09:18:92:4a:28:43:99:7a:
8b:de:f5:6f:62:f4:22:46:1a:34:95:5e:d5:32:6b:
dc:f4:13:18:bb:26:a4:67:81:66:df:e6:87:98:76:
b2:c6:22:14:ab:56:5c:a4:34:8b:7d:83:b8:1b:7a:
c6:22:47:f4:d0:6b:52:0c:fe:b1:60:24:2e:49:6e:
02:88:72:b8:29:19:c2:47:a7:8a:da:63:b9:ea:ae:
68:76:cd:86:ac:8c:df:66:0e:e4:36:3a:3c:e6:0a:
2b:f5:dd:8b:58:57:81:1e:00:14:95:52:29:2d:e8:
9a:1f:9d:82:25:15:d1:f8:e1:0a:9a:56:ad:ae:6c:
7e:eb:7d:e3:40:bd:88:7c:4b:1f:c4:cb:d4:09:90:
cc:4b:33:9b:98:a7:43:70:6f:a9:e4:e8:7b:72:e8:
36:c8:72:52:e4:8f:0f:44:7e:d6:28:42:4a:22:ad:
84:d2:9a:08:0e:51:44:80:6a:28:53:c2:aa:77:13:
fe:37:6d:d6:3d:66:cb:fa:01:55:3c:22:99:34:a9:
2c:8a:1f:92:fd:15:fb:2c:e7:33:dd:26:75:89:2c:
e1:b2:0a:da:8c:93:74:56:d2:5f:12:96:1d:c4:43:
dd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:71:9A:DD:F5:2D:A3:42:76:D3:72:0E:F9:84:95:88:95:9B:FC:19
X509v3 Authority Key Identifier:
keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:49:97:ed:08:e5:f7:ec:cb:0d:dc:df:ab:45:00:e8:6b:81:
17:35:d0:d7:eb:98:a9:3e:41:61:36:ba:13:a5:0c:d0:39:ca:
8d:97:3e:2e:ab:e6:97:5e:e1:7a:12:da:7a:c9:c1:98:7b:57:
51:fb:b0:f2:4e:cf:31:b3:1b:07:61:09:74:d9:b4:fe:d1:ee:
97:5b:ab:50:63:b5:9c:43:57:bd:06:89:1b:11:b1:9b:0a:78:
bb:4e:b5:1a:54:7d:a3:1c:a4:89:fc:e3:37:e6:0f:17:67:8f:
c9:61:ab:41:ae:5b:f3:c1:79:c7:57:b5:0c:3f:04:97:f2:b2:
f2:0b:49:51:1c:64:ae:6a:d6:1f:a7:95:22:99:63:0b:89:81:
cb:e1:01:fe:14:86:ca:52:2f:2f:2d:16:66:c1:d9:a3:d4:dc:
56:5a:6d:78:6a:0f:32:d3:5b:12:62:98:7f:3e:b9:c1:2b:44:
64:62:20:a4:f5:31:d3:86:e1:d6:f6:3c:c7:bf:34:86:7b:2a:
e1:0d:3d:5e:c7:00:a6:65:3e:78:1d:ca:c8:89:58:43:74:e7:
32:f3:9d:91:5f:13:0d:c5:5c:63:11:b1:7a:fc:ab:a8:0b:a7:
2d:5e:58:66:61:82:2a:4d:14:ac:25:cc:41:df:6b:d7:8d:4b:
07:c8:4e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:10:33 2026 by rpki-client