
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
File: YiOr1va2e6_v4-c2Rv16ZuECFL4.mft (raw, json)
Hash identifier: 6yxLKHqpOO/BcnhdM3j4zuI98AIha1kADL6zS9PxFio=
Subject key identifier: 37:AF:1D:CC:FF:B7:05:03:61:E7:63:30:FD:59:F2:AC:E9:66:7A:8F
Authority key identifier: 62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE
Certificate issuer: /CN=A9176FD9/serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
Certificate serial: 0197
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
Manifest number: 017A
Signing time: Mon 11 May 2026 04:41:48 +0000
Manifest this update: Mon 11 May 2026 04:41:47 +0000
Manifest next update: Mon 18 May 2026 04:41:47 +0000
Files and hashes: 1: YiOr1va2e6_v4-c2Rv16ZuECFL4.crl (hash: 3dnyjZusN6XSERR0OEiCqwXUmZjqtz8aT6JxjJZVEB0=)
2: 878615B88D3211EF9E092384C4F9AE02.roa (hash: +Oriw3lUJw94Q18jNkVCiDGs/4UmxApuASFaCH+rWfE=)
3: 884A59828D3211EF9E092384C4F9AE02.roa (hash: 6cl4hRPCA+MAEDHJqAR36U+3vHDUJ12lZhGnjQOUElU=)
4: A937C2200FA511EFBDB06936C4F9AE02.roa (hash: g2XOcezvQ7KxIm645xlMyxErFktIXV60RTFqR5uY2Hw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl
rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176FD9, serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
Validity
Not Before: May 11 04:41:47 2026 GMT
Not After : May 18 04:41:47 2026 GMT
Subject: CN=6a015e0b-fe2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8f:8d:43:6c:e5:38:d7:f7:52:69:da:92:da:
20:ef:8d:bb:3e:20:cd:ba:a9:40:ea:b3:03:c8:61:
e4:bd:4a:38:4b:db:d5:ed:46:29:bb:42:8b:64:33:
85:3f:37:0d:d7:74:32:5a:67:4c:2d:a6:f9:40:af:
d6:1f:99:18:81:86:e3:25:1f:b8:f1:1c:ad:89:b2:
88:06:d5:fc:9e:cf:e5:9a:cb:21:71:8c:fb:a5:71:
2f:08:88:82:b5:71:0b:82:4b:b7:5d:f5:29:e1:30:
06:30:6c:49:3d:4b:45:af:97:08:9c:8d:9b:f0:51:
16:4e:71:24:da:53:9c:7b:23:67:90:7d:73:2a:b2:
64:b5:71:25:66:4b:29:36:12:3a:99:ed:27:1e:22:
d5:41:dc:ff:10:85:19:d8:93:4d:50:7f:e0:00:b9:
b7:24:db:0c:79:73:14:55:86:89:73:5e:73:09:c5:
d3:a4:71:8e:fc:49:56:d8:82:d3:a3:59:74:40:fc:
9c:49:9f:ff:3c:de:8b:4e:15:cf:e0:a5:e9:7d:46:
48:c3:ed:82:7f:ae:9b:da:7c:3a:3d:d6:aa:f9:7c:
ac:a9:2b:32:8e:d9:07:40:ff:5b:46:8c:c5:4a:e4:
3e:44:19:c6:b1:29:88:97:67:61:bb:73:04:91:ab:
f9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AF:1D:CC:FF:B7:05:03:61:E7:63:30:FD:59:F2:AC:E9:66:7A:8F
X509v3 Authority Key Identifier:
keyid:62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:90:65:b9:16:fa:80:5f:d7:26:4c:03:31:1e:67:1d:ba:d1:
0b:48:01:7d:bc:56:12:e6:1e:7c:09:42:3b:68:20:9b:48:39:
5c:30:62:63:6d:86:9b:a0:d0:c6:28:1b:32:e3:a4:d8:b4:6a:
dc:ff:90:09:f9:01:1b:a4:13:08:2e:bb:d5:d1:dc:65:f3:51:
b3:b5:09:30:a6:fe:9f:a5:0e:85:0f:0b:c7:38:0c:40:16:4f:
6f:ce:70:fe:e7:9f:19:85:50:81:91:14:27:ce:3f:c0:60:10:
11:f3:a7:e1:a3:99:72:90:00:79:09:43:bb:42:0b:87:03:e6:
14:1c:9c:2d:63:9f:32:1a:54:5e:45:8c:8b:33:fa:04:fa:5b:
fb:99:31:e5:91:29:eb:e0:36:61:e0:e5:3b:59:99:8f:44:6d:
60:4b:b2:42:3f:84:60:3b:2c:36:46:76:30:6a:93:fc:64:81:
89:9e:2e:75:ba:b9:75:a1:50:ea:0a:31:d2:eb:df:77:f8:ee:
17:f4:50:de:7f:bd:d5:96:ab:84:d5:71:88:92:54:5e:d8:84:
d9:d4:bf:f8:00:79:07:59:43:5f:0e:2d:dd:a7:8a:0d:fb:f3:
01:b0:6c:65:93:d0:d1:3b:4a:d4:61:71:de:6d:ac:11:90:63:
b0:fb:c3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:54:37 2026 by rpki-client