
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
File: yzDTXHDfyGaoN8rt_vzm_sv8W18.mft (raw, json)
Hash identifier: 5Zmx08GZ63TA06rCiSukyscJnR/trnKazKTI0GXZEe8=
Subject key identifier: D3:D6:6F:D2:3E:9C:6D:5D:49:12:38:4F:29:09:AA:F4:AF:67:2F:99
Authority key identifier: CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F
Certificate issuer: /CN=A915F2CF/serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
Certificate serial: 0870
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
Manifest number: 0858
Signing time: Tue 12 May 2026 20:54:49 +0000
Manifest this update: Tue 12 May 2026 20:54:49 +0000
Manifest next update: Tue 19 May 2026 20:54:49 +0000
Files and hashes: 1: yzDTXHDfyGaoN8rt_vzm_sv8W18.crl (hash: 2p+31ElFLNN+XWCJXvgr8eTRc1ZVXsbpNA5LWQEq7OE=)
2: B8BB04788D0E11EF9759C171C4F9AE02.roa (hash: QKLGspANWbxw8KYj33JMMJdYgC4PO2q64kvi/bPww0U=)
3: 7A5654CE358A11F0A6A3E84EC4F9AE02.roa (hash: VYWEaRIXiR8qMtQLt1vLH6vscj0LW+C9m3n4iYjk9EI=)
4: C6C096F68D0D11EFB98F225AC4F9AE02.roa (hash: IPMYkvrQfdZ2mzJDAfxRKRzbx0toH4tf3xv/XzDEnbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl
rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2160 (0x870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F2CF, serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
Validity
Not Before: May 12 20:54:49 2026 GMT
Not After : May 19 20:54:49 2026 GMT
Subject: CN=6a039399-ab9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f8:05:54:bb:68:c9:93:be:83:93:cf:fc:33:
79:4d:e9:d0:87:93:5b:c2:b2:40:aa:2d:dd:be:99:
b5:78:aa:0d:d8:18:cb:8d:f1:1d:42:c5:a1:a3:d5:
56:89:5c:8c:84:66:2d:f4:96:c8:92:96:fc:5b:a2:
e8:b7:96:d6:cc:81:02:ba:e2:de:4b:36:0b:8b:4d:
a0:49:5f:be:25:28:46:99:67:02:ed:96:21:89:ab:
3b:2e:81:2f:99:69:10:05:58:b3:ee:6c:e1:76:41:
80:4a:cb:f9:7b:11:0b:36:52:05:03:9b:50:40:db:
33:f9:e9:54:14:4c:bf:6d:ef:8c:61:0b:7a:0e:a8:
19:50:f4:c8:80:fc:3e:96:b5:e4:fb:97:65:da:12:
54:5f:3f:9a:10:12:d0:d0:b1:c6:2c:8a:e2:9f:67:
04:2a:8e:8b:56:6a:de:0e:12:78:0d:83:b3:35:c8:
4b:14:32:c3:98:f3:a3:b4:ac:9f:c7:cf:6b:3c:ca:
d9:88:f0:4e:6a:ad:de:33:3d:d1:05:a5:4b:d9:e1:
a5:3b:d1:62:36:a0:a4:58:97:5b:48:90:b4:a4:fd:
61:73:96:03:98:2a:9b:20:3b:97:34:c0:c7:85:8d:
e1:cd:d8:1d:30:99:8c:af:87:f5:46:d5:7e:1e:b3:
b3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D6:6F:D2:3E:9C:6D:5D:49:12:38:4F:29:09:AA:F4:AF:67:2F:99
X509v3 Authority Key Identifier:
keyid:CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:99:2e:35:45:23:84:b9:e3:e0:74:85:cc:7f:38:95:eb:1a:
6e:7c:92:c7:fa:cb:6f:67:dc:cc:5e:97:ab:e3:7f:69:d6:5e:
55:66:64:45:4b:96:fd:d6:72:8a:09:5e:3f:25:5d:5a:9b:67:
df:10:98:3c:e5:16:3c:32:7e:67:99:d2:fe:33:87:74:5a:a0:
93:b4:ce:5c:16:d1:68:6d:50:64:1a:a7:77:07:0f:fb:7d:03:
d2:71:de:52:01:e6:7b:f7:80:cb:0f:68:33:2d:b9:a0:60:f6:
d0:f1:ed:d3:7a:c5:e5:2e:07:54:b9:80:e9:35:68:c5:b5:4b:
33:1c:91:1b:86:d9:bb:41:8d:b1:23:b9:0d:2a:33:c2:2a:dc:
e3:90:a1:c9:26:30:46:30:01:dc:1e:14:b4:70:29:7e:ff:66:
2b:4e:1d:79:63:8c:a1:78:dc:a2:d2:c2:d3:c0:10:05:83:b0:
a3:bd:50:96:5a:6d:08:70:80:2f:2c:10:4a:59:83:1f:d9:fa:
d6:96:63:90:ee:dc:8c:85:2c:02:e9:97:30:01:42:f6:01:3c:
3b:7f:54:b6:b9:5f:42:4c:23:8e:17:7f:77:fa:0e:b5:d7:23:
24:e7:ff:a5:f8:a9:38:27:50:8c:08:04:03:76:5c:b4:81:46:
f5:1e:6a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:38:36 2026 by rpki-client