
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft
File: Ys-2EOllD-PIACvGF7cFck0qAt0.mft (raw, json)
Hash identifier: Z5eONSNuk0H0rTmpoFAqm+sFCarQPyvke38WqHOCBKI=
Subject key identifier: 1E:02:1B:77:2F:E3:2E:0B:DF:1C:34:22:6D:BD:4A:41:B9:67:55:03
Authority key identifier: 62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD
Certificate issuer: /CN=A917B1B1/serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD
Certificate serial: 18DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft
Manifest number: 18CE
Signing time: Tue 12 May 2026 16:28:18 +0000
Manifest this update: Tue 12 May 2026 16:28:18 +0000
Manifest next update: Tue 19 May 2026 16:28:18 +0000
Files and hashes: 1: Ys-2EOllD-PIACvGF7cFck0qAt0.crl (hash: cJeWXN9F5cHPtoRuPkRONPzbb+qmWhYggIqTd7pE6WI=)
2: C1C12662CFC811EB9A5C5879C4F9AE02.roa (hash: dwc6e0VZe8kImW/u7x+c+fHQZoxulC4UHHkO0IPYi7Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl
rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6366 (0x18de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B1B1, serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD
Validity
Not Before: May 12 16:28:18 2026 GMT
Not After : May 19 16:28:18 2026 GMT
Subject: CN=6a035522-5ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9b:7d:d8:54:d8:65:f5:c2:8b:c1:1e:af:ee:
9e:15:5d:57:86:e8:08:ea:0c:aa:19:f2:15:ca:51:
93:12:f7:b2:f5:7e:4e:c4:1f:25:84:cc:f6:55:fe:
79:d4:4e:b4:d0:69:dd:83:b0:4c:2a:c7:e6:77:0d:
e0:50:e2:84:ba:23:5b:1f:90:6d:d9:7d:79:b8:44:
c3:76:47:c4:5f:ab:85:f7:1d:00:c6:f7:c7:22:5b:
dc:7d:bc:5d:4c:f8:2d:19:57:ee:4d:88:88:7f:1d:
f1:1b:7f:cc:7b:8f:82:04:47:6e:92:cb:ce:f7:0b:
07:0c:44:f6:41:63:49:ad:80:94:b0:70:15:75:50:
38:6e:d0:66:56:c1:bd:58:f5:8a:61:52:f1:70:82:
f8:35:7d:bc:ee:53:ac:db:cb:d6:49:61:5e:bd:ff:
da:a7:f6:a2:d8:a5:98:98:c6:a3:56:36:bc:91:16:
f0:91:52:48:f3:11:53:78:6a:5f:d6:ae:e7:10:ff:
f6:4c:19:a8:99:a9:43:7d:84:39:bf:97:36:ce:24:
6c:ec:f4:51:73:64:ca:3f:de:be:2d:71:95:26:d1:
70:62:82:c8:2c:8c:51:3f:95:43:85:32:58:07:9a:
b8:3f:80:fb:d9:4d:b3:8e:e8:bb:a9:65:38:e3:bb:
21:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:02:1B:77:2F:E3:2E:0B:DF:1C:34:22:6D:BD:4A:41:B9:67:55:03
X509v3 Authority Key Identifier:
keyid:62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:81:93:b0:be:c5:f9:9a:ee:53:41:0a:d8:1a:78:a0:77:a8:
6e:65:2d:4d:f7:2d:99:89:c2:d6:98:b1:34:13:c4:1d:97:0d:
ae:56:a5:bd:08:67:a4:73:c4:5c:22:85:d2:69:9b:b9:e3:3c:
4a:f8:8e:70:91:6d:5f:33:07:d7:1c:6a:98:f5:63:2a:0d:93:
98:0e:dc:e2:e0:42:94:af:f6:16:1d:ed:18:cb:62:62:81:17:
06:58:8a:93:5f:7f:80:2f:21:bc:72:ed:7e:14:07:20:e4:4f:
03:45:87:f2:ac:85:b6:e2:a0:44:0c:4e:25:d1:3b:fa:1e:8b:
c2:b7:89:e0:1a:58:0a:b1:c6:b2:4f:e9:57:04:c6:d7:88:72:
5b:0f:fa:19:54:4f:56:90:2b:75:a6:19:8f:5a:50:22:65:18:
11:d0:c9:84:34:65:08:c4:cf:54:71:99:fd:b0:39:d3:70:f3:
46:16:8c:6d:2a:7b:1c:40:85:a6:75:f0:e0:e8:a9:79:ee:8d:
49:a5:fe:33:77:39:51:99:40:06:81:84:74:7b:46:91:f3:c3:
b6:16:59:69:48:c5:c8:27:41:b3:2a:39:2f:be:80:ec:a4:e5:
56:b0:d6:ec:32:15:e3:8e:77:c3:51:8c:7b:3f:2a:7d:6e:c1:
1e:ca:05:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:30:37 2026 by rpki-client