
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft
File: Ys-2EOllD-PIACvGF7cFck0qAt0.mft (raw, json)
Hash identifier: OtaqCFquNIhvkksQu/OKPggYAc7uwWc+8cktF0BXYm4=
Subject key identifier: 37:34:46:4F:86:69:BC:3E:39:EC:07:BD:75:2D:D3:7D:F8:99:5C:D3
Authority key identifier: 62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD
Certificate issuer: /CN=A917B1B1/serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD
Certificate serial: 1902
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft
Manifest number: 18F2
Signing time: Wed 22 Jul 2026 16:32:39 +0000
Manifest this update: Wed 22 Jul 2026 16:32:38 +0000
Manifest next update: Wed 29 Jul 2026 16:32:38 +0000
Files and hashes: 1: Ys-2EOllD-PIACvGF7cFck0qAt0.crl (hash: PEHoL0DO0vZjRZs3x5TYRnHJMHGCCY0nW3PMNR3elEs=)
2: C1C12662CFC811EB9A5C5879C4F9AE02.roa (hash: dwc6e0VZe8kImW/u7x+c+fHQZoxulC4UHHkO0IPYi7Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl
rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6402 (0x1902)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B1B1, serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD
Validity
Not Before: Jul 22 16:32:38 2026 GMT
Not After : Jul 29 16:32:38 2026 GMT
Subject: CN=6a60f0a7-3b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:68:e7:57:73:0f:e6:e1:be:3f:10:f6:5f:
58:a4:5c:3a:a1:01:5e:76:10:be:4a:62:e8:94:46:
2b:af:88:ba:21:ca:1f:d0:03:62:ab:e9:82:b8:4f:
ef:ff:ca:56:6a:53:08:d7:da:35:17:b1:73:27:bc:
8c:c3:0c:0f:f5:ae:09:2b:02:22:01:fa:f9:ff:ed:
c2:69:37:52:82:84:e1:46:2c:37:bb:50:5d:56:f1:
39:e2:e3:9c:8a:83:53:ef:f4:b0:d2:aa:01:ca:bf:
6a:19:c0:b0:f7:0b:61:f1:44:36:ca:85:60:63:98:
e8:93:18:34:ec:db:c2:69:d5:57:4b:a3:a9:bb:e2:
63:ce:95:b2:ff:42:23:0a:21:1f:af:23:6c:f6:61:
d4:60:89:5a:8a:76:9c:14:94:81:12:bb:a3:89:54:
51:1b:6a:a5:aa:93:4e:9a:c9:4a:4b:e7:cf:8c:b1:
33:be:bf:11:8f:25:e9:f6:b8:5c:3d:31:32:e3:ba:
63:5e:a8:3e:10:b5:50:bf:ce:6f:bf:1e:b0:c5:45:
29:a9:cb:f0:87:8f:18:74:28:02:21:3f:a7:10:53:
ab:99:74:21:09:7e:d8:e7:1d:62:19:74:9f:ad:54:
12:14:fa:eb:bf:ed:87:6f:96:79:52:a0:eb:68:24:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:34:46:4F:86:69:BC:3E:39:EC:07:BD:75:2D:D3:7D:F8:99:5C:D3
X509v3 Authority Key Identifier:
keyid:62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ea:c6:7a:5d:aa:31:b0:25:7c:ce:b1:95:2a:e1:d1:e0:5f:
d1:8d:c2:5e:d4:db:9e:72:b5:90:55:44:c9:bd:74:c8:e5:33:
5c:d1:84:c8:c0:e6:89:1d:59:91:f9:f2:ab:ca:a7:fe:55:0c:
b9:7d:42:fd:ec:7c:9a:39:d2:32:20:8f:3d:47:20:e6:24:03:
0d:d0:84:a6:94:81:ea:20:43:d8:ab:be:b6:2d:a8:79:c9:ed:
05:a4:bb:32:0d:a2:f7:c7:70:c0:ee:b9:63:d8:4a:73:f8:5e:
06:01:cd:a5:ae:37:dc:5e:d4:1a:61:a4:ad:f0:6f:81:b3:4b:
64:9a:32:f3:db:bf:cf:e8:ce:49:42:a3:31:a1:7f:42:2d:63:
ff:15:49:95:a5:f8:24:ca:50:42:7d:1a:48:00:4c:60:8e:c4:
9b:cc:07:89:c1:a3:24:65:bf:8d:9d:c4:04:f0:bc:76:9d:20:
66:59:6d:c9:fc:ea:1b:8e:b7:14:a9:ca:2c:91:d1:db:81:d7:
79:0d:ae:53:5c:80:2a:44:bc:91:32:ff:ad:af:0c:44:ad:54:
3c:b5:75:45:e7:c1:a5:0e:78:d9:36:e3:63:19:8b:b4:8f:ae:
92:01:ac:86:94:18:c3:90:ca:44:96:44:23:b3:d3:c3:5e:61:
95:58:40:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:19:47 2026 by rpki-client