
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft
File: yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft (raw, json)
Hash identifier: FDEJgz9sxl4qQPnVL5tSX2Ralf8x0vf7s53UaUkRngQ=
Subject key identifier: 41:0F:26:8E:13:A6:56:2D:14:59:E2:87:88:4C:A6:69:56:B9:13:B0
Authority key identifier: C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0
Certificate issuer: /CN=A917E1FA/serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0
Certificate serial: B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft
Manifest number: B3
Signing time: Mon 11 May 2026 07:17:39 +0000
Manifest this update: Mon 11 May 2026 07:17:38 +0000
Manifest next update: Mon 18 May 2026 07:17:38 +0000
Files and hashes: 1: yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl (hash: EtsBrNYX3Z6M78zTIIPqZwYsEYIDTy9u4uWwKegYrjU=)
2: 7354ACC0472811F0ADE2D44BC4F9AE02.roa (hash: znoNuAslfVcaeYT9Qtb9J+D936zhsxuFnvCQ4z32+wE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl
rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FA, serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0
Validity
Not Before: May 11 07:17:38 2026 GMT
Not After : May 18 07:17:38 2026 GMT
Subject: CN=6a018293-f35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:96:49:5d:cd:18:37:6e:1f:3f:10:ea:ad:
3d:40:be:3e:95:28:e3:29:47:04:23:14:29:c8:49:
06:fe:bf:8a:ab:44:8e:b5:7f:0e:fa:f1:10:bd:75:
97:87:de:fe:39:d1:54:09:de:59:1c:36:e9:d1:1a:
97:eb:d9:49:9b:33:03:21:3e:75:ff:bb:a3:62:34:
8c:f7:79:1b:ab:1d:32:cc:95:dc:f3:d4:67:06:21:
57:55:b3:06:4d:07:31:93:d7:e4:08:25:db:4f:bf:
21:01:80:ca:5a:74:4f:10:ea:b9:ca:df:c0:c8:ae:
ba:ce:cf:f8:90:13:f9:8b:0c:5d:ef:bf:02:42:0a:
35:8f:fb:f6:62:b5:8d:83:1d:b2:aa:5e:d5:08:f5:
c9:d6:fd:61:d8:25:fd:36:a7:b4:9c:55:c7:99:44:
fe:8a:b6:57:18:2e:f1:13:51:19:7f:df:2d:d0:81:
f8:0c:cb:fa:e8:18:65:75:0a:83:60:83:24:44:e3:
0e:ff:7e:db:d5:b0:5f:1b:87:69:db:9b:a2:d9:db:
53:e2:a6:81:67:56:58:95:d1:5a:97:b3:0f:57:9f:
1f:43:b2:62:f3:dd:7d:b4:74:89:80:d4:8a:63:84:
af:ad:7e:d8:04:d7:33:7d:9c:81:2d:4b:b9:05:b2:
c5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0F:26:8E:13:A6:56:2D:14:59:E2:87:88:4C:A6:69:56:B9:13:B0
X509v3 Authority Key Identifier:
keyid:C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:c2:3f:25:86:1e:83:72:f9:18:8c:ed:02:39:de:3f:ce:f7:
78:70:4b:87:7e:d6:42:7a:76:dd:38:d9:4b:7a:e8:1c:9c:0c:
c4:c6:3a:43:e7:9d:10:1e:d9:f1:3e:9a:d7:54:bc:44:a7:a4:
a7:17:92:eb:77:7d:24:cf:66:f9:0a:66:8d:d7:a1:08:a9:e5:
f1:2a:61:bd:71:ff:0a:45:60:32:91:1e:08:4c:96:6f:4d:79:
a2:c8:46:88:6b:ad:4b:83:fb:40:e9:9a:f0:f8:df:c7:68:50:
fa:e8:15:00:1c:e5:3d:7e:c8:cf:11:1b:5e:b0:e6:5c:a4:8d:
1f:59:50:50:9d:96:3e:e3:7f:a6:1b:6b:e0:28:f3:e5:5c:46:
2f:f3:c0:35:a4:0b:b3:39:6d:0b:a4:86:ff:b0:a5:3f:5f:f8:
45:f0:63:a2:28:9d:3f:13:4a:b2:6e:52:43:1a:aa:41:83:d5:
d6:6b:dc:aa:b5:87:ff:d1:de:3b:1c:f9:4c:8c:a1:db:6b:24:
cd:07:a9:48:cb:af:34:f1:73:b8:71:ab:9c:04:81:16:4b:52:
b8:0d:ff:40:b3:3a:6b:f4:a9:91:0b:05:90:f4:b0:90:9e:42:
95:90:88:65:43:b7:7e:bd:12:5f:9b:8a:8b:0d:a1:bd:0b:cb:
01:38:b1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:05:36 2026 by rpki-client