
$ rpki-client -vvf rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft
File: yZhQyMiGp__kXfG6HWUCy1pl63A.mft (raw, json)
Hash identifier: DZ/Orm6hNKQr3bYl2tm+iQt/jZp1YqoAH5ZjlUB6tBI=
Subject key identifier: 84:2C:49:BA:51:00:B3:93:A9:BC:05:06:60:5B:DF:51:1B:E3:EB:65
Authority key identifier: C9:98:50:C8:C8:86:A7:FF:E4:5D:F1:BA:1D:65:02:CB:5A:65:EB:70
Certificate issuer: /CN=A917049A/serialNumber=C99850C8C886A7FFE45DF1BA1D6502CB5A65EB70
Certificate serial: 34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft
Manifest number: 34
Signing time: Mon 11 May 2026 08:50:50 +0000
Manifest this update: Mon 11 May 2026 08:50:50 +0000
Manifest next update: Mon 18 May 2026 08:50:50 +0000
Files and hashes: 1: yZhQyMiGp__kXfG6HWUCy1pl63A.crl (hash: fqqjab7w3zSKndBbNs1cuOxSIOM7xN6Io6ua9ClhXCs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.crl
rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:50:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917049A, serialNumber=C99850C8C886A7FFE45DF1BA1D6502CB5A65EB70
Validity
Not Before: May 11 08:50:50 2026 GMT
Not After : May 18 08:50:50 2026 GMT
Subject: CN=6a01986a-6aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:19:a4:6b:2f:bd:11:01:95:ee:ca:94:e4:cb:
a6:60:f1:dc:88:81:2c:2c:81:e8:ee:53:4f:36:2e:
e4:e9:54:3f:9d:6f:88:24:87:6b:2f:7b:98:13:e4:
aa:79:c3:67:5a:8f:7e:0c:d2:29:a5:a2:64:fe:63:
68:4b:a9:40:8f:5a:dd:e4:25:15:1d:d7:c9:e8:45:
ea:38:01:dc:5f:da:1b:da:f6:75:a4:aa:5f:29:1d:
f3:e1:28:78:f8:b0:3a:fa:7d:f3:ed:88:74:18:5c:
32:9e:8e:65:94:71:c6:f8:1d:b5:e5:40:f1:44:62:
ae:35:11:30:2e:09:a0:26:2f:7f:18:3b:a7:3d:b3:
32:00:1a:4a:a0:d6:93:34:aa:74:0f:f7:f2:ec:41:
30:1c:88:54:06:64:d9:8a:0c:07:67:db:2c:07:3a:
6b:a8:6f:8b:e5:6f:88:35:2b:af:f7:b6:66:12:7c:
d0:fc:1e:6a:3b:cf:5d:fd:5b:e2:2f:25:4f:c2:c4:
ce:58:ec:4b:22:a8:b0:b8:cf:68:4b:77:2a:59:64:
a0:e1:04:32:0c:a0:35:1f:1e:eb:38:18:6e:9b:97:
8d:19:36:9f:fa:74:ef:0e:86:8e:82:ca:81:f0:07:
73:e3:3a:2d:e9:39:da:af:57:79:d0:6e:03:11:ec:
4c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2C:49:BA:51:00:B3:93:A9:BC:05:06:60:5B:DF:51:1B:E3:EB:65
X509v3 Authority Key Identifier:
keyid:C9:98:50:C8:C8:86:A7:FF:E4:5D:F1:BA:1D:65:02:CB:5A:65:EB:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:6d:8d:ac:71:0d:cf:79:9b:63:a7:33:70:76:67:b8:a6:08:
cd:fb:88:22:aa:73:e3:9e:cf:4f:27:77:ad:04:93:3e:fc:65:
1b:3e:a9:21:0e:12:e6:85:c7:6b:cc:96:c1:c7:06:99:8f:03:
9b:44:80:6d:df:99:7d:56:f0:fb:e6:9a:ab:36:db:24:56:dd:
91:88:d4:89:16:21:e7:5d:a0:ba:5e:df:95:f5:8b:72:a9:17:
82:a8:c9:27:96:ab:9c:ae:47:a8:f0:5b:99:0c:32:43:7a:36:
b5:94:f6:41:6a:24:37:8e:c3:41:c5:da:9c:e6:dc:af:a1:c3:
29:c9:d9:62:08:7d:cb:3b:a6:da:84:b2:94:e8:6d:4b:a3:7d:
a1:70:80:f8:eb:d5:04:e6:b6:a1:58:b6:88:6a:bb:77:69:3c:
13:ba:16:7f:74:f7:2f:cc:19:b7:62:1f:69:d0:88:78:6f:f3:
85:0b:26:36:de:bc:bc:1d:57:cd:f0:f4:36:3d:41:f9:f4:22:
42:fc:cc:ac:37:0b:ed:92:39:83:01:db:f5:1d:19:8e:59:5f:
dd:25:8c:e2:7c:f0:87:8c:56:c0:c3:b7:42:f4:66:fb:61:00:
b8:3a:cd:58:21:3c:cf:b0:33:5b:af:e3:e9:d2:bc:d6:1e:62:
42:24:2b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:02:17 2026 by rpki-client