
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
File: YWPctdU7SHLhWVY-kPxeQa0ALC0.mft (raw, json)
Hash identifier: z62k5vZoR4Vfr7gKVFHlRNm38nTcxFOZBVzMVo3oggY=
Subject key identifier: 3E:E9:51:35:DA:E8:E7:A8:58:22:D5:7E:ED:64:7D:1E:61:E9:2F:D0
Authority key identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D
Certificate issuer: /CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
Certificate serial: 0536
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
Manifest number: 052A
Signing time: Tue 12 May 2026 23:39:56 +0000
Manifest this update: Tue 12 May 2026 23:39:56 +0000
Manifest next update: Tue 19 May 2026 23:39:56 +0000
Files and hashes: 1: YWPctdU7SHLhWVY-kPxeQa0ALC0.crl (hash: 1wllqzx2MEJAweQ0C+zVCH+aRAMbjVOSw/8NtCikcbI=)
2: BDE72518479C11EC8861323FC4F9AE02.roa (hash: voztcrzhiVsnEEDAL+kh/aaIgcYKoM5wE79GPvMJ4lw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl
rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1334 (0x536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174282, serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
Validity
Not Before: May 12 23:39:56 2026 GMT
Not After : May 19 23:39:56 2026 GMT
Subject: CN=6a03ba4c-ae44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c6:88:4c:ca:08:39:3a:70:c3:fc:1a:77:bd:
82:67:37:84:b4:9a:b0:fd:5b:76:67:71:db:7d:1b:
e3:a2:46:13:33:a6:43:37:b1:6f:1a:d8:e3:55:33:
6d:87:17:19:6e:05:3a:9d:bd:74:a5:b7:73:36:3b:
69:65:af:ac:bd:1c:0b:5c:12:55:14:99:7d:92:c1:
99:7d:5a:ed:2b:06:b2:10:07:a6:c9:2b:77:45:dc:
cb:98:37:96:61:38:2a:56:32:a9:1c:8a:76:39:c6:
31:1d:28:0c:47:8e:ac:fb:35:9b:47:7d:75:f5:40:
1b:aa:98:0d:a4:96:2c:e6:0e:36:0a:f7:dc:c4:21:
4c:b0:3b:4d:01:6e:e7:ad:7a:d1:45:14:0f:4d:4b:
ff:1c:87:d6:83:b1:d0:e2:f5:be:e1:e7:4b:7e:1e:
e6:17:6f:e3:94:06:bc:a8:e0:d4:bd:66:29:06:42:
ff:e8:3b:c7:01:41:88:2d:4d:de:e1:6a:6d:dd:39:
df:3c:8a:54:8a:4e:4d:e8:e2:50:7d:2f:74:b9:1d:
96:e6:9b:e0:2f:ef:d0:2d:ae:3b:fe:81:a6:49:cf:
6a:d1:43:1f:de:89:ec:c7:33:62:5e:75:29:e5:83:
53:71:5b:79:2f:97:67:8c:eb:94:5b:8a:c8:22:1b:
bf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E9:51:35:DA:E8:E7:A8:58:22:D5:7E:ED:64:7D:1E:61:E9:2F:D0
X509v3 Authority Key Identifier:
keyid:61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:f9:8a:ea:ce:30:30:20:7a:80:2b:12:64:ba:13:fa:c8:89:
f7:ca:1f:4e:f6:e3:30:c1:5a:bf:47:a7:fb:0d:69:fd:a6:39:
d2:c4:b8:c1:34:c0:c9:9b:04:a6:a6:f2:4e:74:da:35:e1:66:
62:84:04:82:f7:6b:97:09:e5:ad:21:14:77:05:a7:87:c6:9d:
10:cd:21:2c:65:cf:e3:fb:99:b1:57:b1:8f:f1:9a:42:cb:01:
6f:13:f6:de:32:7f:14:8a:08:43:33:17:54:55:56:6a:3f:ad:
43:c9:aa:0e:23:5e:8f:24:d3:87:7f:22:ff:05:45:08:bf:88:
c0:7d:0c:50:6d:b9:b0:54:2c:b9:30:e3:f2:9f:a0:8d:a0:b7:
10:6f:0f:49:b4:cc:a1:c4:94:8b:76:1e:94:44:65:5e:2c:7f:
23:e1:ce:b2:2e:4c:33:e9:95:84:e4:ea:c6:bf:17:f0:86:6a:
45:15:56:18:e9:00:2f:1d:62:8c:42:ab:59:90:97:f2:25:84:
12:2b:54:23:d6:f4:6e:b4:56:59:f6:af:11:68:da:55:9c:3b:
f6:e2:3c:09:21:0f:2e:43:1d:33:56:31:aa:ab:f4:91:d6:55:
b6:2c:54:96:1a:e7:e3:2e:86:9c:b8:37:1a:2a:76:4d:8c:b5:
53:d5:a4:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQyODIxMTAvBgNVBAUTKDYxNjNEQ0I1RDUzQjQ4NzJFMTU5NTYzRTkwRkM1RTQx
QUQwMDJDMkQwHhcNMjYwNTEyMjMzOTU2WhcNMjYwNTE5MjMzOTU2WjAYMRYwFAYD
VQQDEw02YTAzYmE0Yy1hZTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6caITMoIOTpww/wad72CZzeEtJqw/Vt2Z3HbfRvjokYTM6ZDN7FvGtjjVTNt
hxcZbgU6nb10pbdzNjtpZa+svRwLXBJVFJl9ksGZfVrtKwayEAemySt3RdzLmDeW
YTgqVjKpHIp2OcYxHSgMR46s+zWbR3119UAbqpgNpJYs5g42CvfcxCFMsDtNAW7n
rXrRRRQPTUv/HIfWg7HQ4vW+4edLfh7mF2/jlAa8qODUvWYpBkL/6DvHAUGILU3e
4Wpt3TnfPIpUik5N6OJQfS90uR2W5pvgL+/QLa47/oGmSc9q0UMf3onsxzNiXnUp
5YNTcVt5L5dnjOuUW4rIIhu//wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD7pUTXa
6OeoWCLVfu1kfR5h6S/QMB8GA1UdIwQYMBaAFGFj3LXVO0hy4VlWPpD8XkGtACwt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDI4Mi85NzE0MzM3NjQ3
OTgxMUVDQjAzRDU1MzhDNEY5QUUwMi9ZV1BjdGRVN1NITGhXVlkta1B4ZVFhMEFM
QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lXUGN0ZFU3U0hMaFdWWS1rUHhlUWEwQUxDMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NDI4Mi85NzE0MzM3NjQ3OTgxMUVDQjAzRDU1MzhDNEY5QUUwMi9ZV1BjdGRVN1NI
TGhXVlkta1B4ZVFhMEFMQzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcfmK6s4wMCB6gCsSZLoT+siJ98ofTvbjMMFav0en+w1p/aY50sS4wTTAyZsE
pqbyTnTaNeFmYoQEgvdrlwnlrSEUdwWnh8adEM0hLGXP4/uZsVexj/GaQssBbxP2
3jJ/FIoIQzMXVFVWaj+tQ8mqDiNejyTTh38i/wVFCL+IwH0MUG25sFQsuTDj8p+g
jaC3EG8PSbTMocSUi3YelERlXix/I+HOsi5MM+mVhOTqxr8X8IZqRRVWGOkALx1i
jEKrWZCX8iWEEitUI9b0brRWWfavEWjaVZw79uI8CSEPLkMdM1Yxqqv0kdZVtixU
lhrn4y6GnLg3Gip2TYy1U9WkdA==
-----END CERTIFICATE-----
Generated at Wed May 13 08:05:17 2026 by rpki-client