
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
File: Yja2yVcFRCapTOamlDI45v5tH1Y.mft (raw, json)
Hash identifier: S9p9dlUlfJUpthHzrKG07h5QQuBN51Y5hz0k5YJxER0=
Subject key identifier: 69:15:DB:FC:50:08:9C:A4:60:48:27:49:0B:91:3B:99:4A:6C:5F:80
Authority key identifier: 62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56
Certificate issuer: /CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56
Certificate serial: 04AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
Manifest number: 04A7
Signing time: Thu 23 Jul 2026 00:46:05 +0000
Manifest this update: Thu 23 Jul 2026 00:46:05 +0000
Manifest next update: Thu 30 Jul 2026 00:46:05 +0000
Files and hashes: 1: Yja2yVcFRCapTOamlDI45v5tH1Y.crl (hash: P9gByqJAqEcH5roIGeMbby56v3VpwKR2YuSjL5twezw=)
2: 8B626F5487C911EC908CE327C4F9AE02.roa (hash: UJpA5zEw7YjHmI7sbnVaspAGcZB71kOVdtEMUuEsETo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl
rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1198 (0x4ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D655, serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56
Validity
Not Before: Jul 23 00:46:05 2026 GMT
Not After : Jul 30 00:46:05 2026 GMT
Subject: CN=6a61644d-ec62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:6a:49:97:04:f0:05:a7:fa:2e:93:6e:f6:
4a:f8:39:a6:16:a4:83:a9:2e:fa:08:d2:24:ec:3f:
cb:ae:5e:54:f6:80:63:de:ec:b3:e9:37:23:53:10:
8e:34:fb:53:2d:e5:7b:12:8e:0d:0f:78:47:1a:c8:
e7:da:88:35:a7:eb:2d:8e:25:7b:90:5b:9b:86:9b:
21:b0:9c:80:9e:94:7e:cc:41:12:f5:a0:92:07:51:
f1:6e:be:84:54:1d:0e:93:8e:52:8e:39:ef:11:a2:
9d:84:5e:8e:9a:d8:7c:69:e3:8a:b4:b6:36:ba:87:
2c:0e:17:ff:ad:66:15:a5:ca:b9:a9:9c:cb:2e:bd:
80:44:b5:5e:86:c3:5d:f6:a1:39:48:f1:30:c7:f6:
d5:ca:8c:0d:da:84:4b:96:47:4f:33:32:05:0d:a9:
24:2a:91:c9:a3:98:98:17:f7:4d:80:e4:4a:3d:93:
fe:50:4a:af:4d:80:ce:92:dd:4d:39:d4:fb:52:39:
e5:c3:b6:37:c9:08:6c:10:b0:19:1d:fb:27:40:06:
9a:43:32:0b:6c:18:52:fa:94:52:35:89:81:7e:35:
6a:1c:c0:98:31:47:d7:09:41:f3:b8:5e:6d:cb:d6:
02:60:45:c2:85:89:c5:ee:75:6b:c6:85:45:d1:9e:
3a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:15:DB:FC:50:08:9C:A4:60:48:27:49:0B:91:3B:99:4A:6C:5F:80
X509v3 Authority Key Identifier:
keyid:62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:76:8f:e1:c4:ac:8b:9b:67:82:fd:87:2c:12:c0:5f:00:ce:
d2:13:c2:10:e1:1d:06:ed:58:32:97:15:02:09:b0:08:39:6d:
d5:4d:2f:a1:e1:78:93:5b:33:e8:10:af:b6:4a:19:71:98:53:
e5:5d:15:27:3f:f2:5e:0f:ea:86:d2:29:1a:5a:a7:43:a1:95:
83:3d:7e:be:f7:46:a6:05:d3:9a:4d:8c:b9:5f:c8:68:08:8c:
55:dc:37:aa:fc:c5:bd:3d:f4:dd:d9:b5:94:5b:09:42:b8:61:
56:72:56:15:98:48:9d:77:d5:02:16:32:f9:34:dd:2f:de:25:
df:7b:40:1d:cc:88:8e:ce:57:e8:17:c2:1f:0a:7b:3b:44:fa:
2d:97:26:0b:80:b0:0d:6b:35:4f:a9:eb:df:1a:e3:68:79:23:
52:29:11:a9:35:df:e7:b4:88:c1:d3:f1:a7:53:f1:e4:0b:ce:
e0:a3:4e:72:cb:c5:c1:35:95:75:f4:75:11:a3:83:91:79:dc:
1e:28:74:2c:c6:e4:b9:41:3f:68:d8:6f:61:ff:7e:c2:08:a2:
75:22:e3:63:cf:d6:01:21:0e:f9:6c:22:59:81:b3:07:e0:0d:
d4:73:42:5b:ae:3b:13:89:ab:bf:ec:c0:17:80:c0:2c:5b:51:
90:40:e4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:28 2026 by rpki-client