
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
File: YsQYLAA-_Po43a9O-QT7BP5bVko.mft (raw, json)
Hash identifier: uJtTIa2QAUMRUUy91PfqJRn9p0g8MQoFQAVU/ViJtwo=
Subject key identifier: 3D:4B:21:0D:38:57:F3:D2:16:6C:12:C6:77:12:EC:EB:89:22:4C:CB
Authority key identifier: 62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A
Certificate issuer: /CN=A917CE22/serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A
Certificate serial: 0868
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
Manifest number: 083D
Signing time: Tue 12 May 2026 21:06:38 +0000
Manifest this update: Tue 12 May 2026 21:06:38 +0000
Manifest next update: Tue 19 May 2026 21:06:38 +0000
Files and hashes: 1: YsQYLAA-_Po43a9O-QT7BP5bVko.crl (hash: xeZWgNc2BMj/u2Qzymv1IW7S3B7Os3XTXHeQat/cPFU=)
2: CDA6F2D0111611EFAD808A81C4F9AE02.roa (hash: mOiKBb1fBKJiEZ/Q4F6SgNQ8FYEX0pSib9+RjzLS4+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl
rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2152 (0x868)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CE22, serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A
Validity
Not Before: May 12 21:06:38 2026 GMT
Not After : May 19 21:06:38 2026 GMT
Subject: CN=6a03965e-2ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:86:26:1c:b4:14:63:ae:fc:b6:34:41:1f:
64:67:e3:9e:9c:12:09:c6:d6:de:e2:95:d8:82:00:
ff:fc:34:12:fa:40:55:76:25:e1:53:e0:c9:28:d0:
41:5f:49:d4:5a:fe:84:02:70:12:f9:86:a5:1e:25:
5d:d9:03:19:e2:ac:7b:25:a0:6d:c7:33:8a:3d:5c:
3f:3d:7d:83:b8:d7:28:3b:d5:e5:f6:4c:b1:ed:91:
29:ac:12:b3:bf:2c:f9:ac:64:ff:cf:be:61:d5:28:
d0:37:46:af:7d:7e:7c:7b:3a:b0:21:35:7c:fa:e2:
b0:84:b4:b0:14:3c:6e:42:07:57:b0:b8:b7:d1:24:
19:99:da:8e:77:09:90:7c:ae:b9:f8:55:30:49:ea:
6b:f5:1c:58:ad:f3:5b:b5:99:21:82:17:2d:1a:7a:
b2:73:81:10:62:0e:87:a7:bc:51:ee:72:89:fa:ad:
56:8b:d9:7a:f5:fe:c6:a5:7d:83:a7:70:5c:3c:a9:
a5:8a:e7:d0:9c:c6:0d:5c:53:b8:55:f6:07:63:6c:
d4:65:f1:45:1a:4d:2f:5c:00:70:c8:08:00:50:97:
7e:dd:27:db:7e:b3:63:07:37:ca:c3:66:82:be:a3:
ff:27:67:c0:68:95:52:08:d5:60:3f:4c:85:35:dd:
a2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4B:21:0D:38:57:F3:D2:16:6C:12:C6:77:12:EC:EB:89:22:4C:CB
X509v3 Authority Key Identifier:
keyid:62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:4b:d9:cf:7a:5c:10:bb:da:d6:90:52:27:b5:49:ef:4d:3d:
ee:c0:2f:11:5e:cc:62:bd:da:b6:01:57:0b:18:b3:05:40:42:
6e:d0:63:5a:68:d4:71:32:d8:1d:bb:98:8d:7b:3f:ed:2e:32:
fb:be:a0:58:3a:2d:30:55:cc:c3:5f:7e:3b:ff:a0:d6:56:ec:
1d:0c:80:29:81:ea:64:da:f8:97:62:1b:0f:7f:7d:a8:4d:60:
15:83:87:81:17:9d:c8:2c:56:96:ed:df:4e:62:08:81:eb:e1:
bc:ec:2f:74:88:e6:89:e8:5e:17:db:ca:cd:15:83:23:bc:f6:
06:f0:d6:01:a6:f5:68:4a:0b:e0:a4:80:74:fd:39:7e:50:f6:
80:26:e0:66:4d:fb:2b:7c:f0:32:e7:64:d5:c6:2e:1e:b9:fc:
53:b7:1f:86:5d:34:c8:5a:03:cb:bb:76:49:fc:01:c0:c9:f7:
3c:a4:59:fc:62:c2:ba:f7:96:e6:5e:28:9f:dc:85:2c:4b:82:
02:f7:dd:84:fe:a3:37:d9:c0:14:84:a8:f9:e0:31:51:10:7e:
4b:29:f8:0f:4e:6a:db:68:3a:ab:8f:ff:e1:5a:23:86:e1:c3:
77:14:88:3f:e8:38:20:d3:27:4d:d2:37:5d:24:4d:70:71:20:
f3:b8:c3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:45 2026 by rpki-client