
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
File: YBi5hcOZywcxwWNM_ktHkS8q9dE.mft (raw, json)
Hash identifier: gfTHyM+EflXNoWAuVzY6/UwpvRSOJujoqNCoWVueMK0=
Subject key identifier: 38:26:95:D5:AF:B5:5E:34:94:0D:B0:67:9D:A4:59:BC:AA:B7:CF:44
Authority key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
Certificate issuer: /CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Certificate serial: 02F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
Manifest number: 02E8
Signing time: Sun 15 Nov 2026 01:07:40 +0000
Manifest this update: Sun 15 Nov 2026 01:07:40 +0000
Manifest next update: Sun 22 Nov 2026 01:07:40 +0000
Files and hashes: 1: YBi5hcOZywcxwWNM_ktHkS8q9dE.crl (hash: m0PzKgH0Ka6PrBtlhEktNc8OX7mQoltmEJ6FdMtT/L0=)
2: C386C06A706211EDA9CCDB76C4F9AE02.roa (hash: tSM9UI8Nun2AOG+Ik7kE9gWzPNKVQk3XnwhRrm6CZDE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 01:07:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 752 (0x2f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183BA5, serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Validity
Not Before: Nov 15 01:07:40 2026 GMT
Not After : Nov 22 01:07:40 2026 GMT
Subject: CN=6af905dc-7dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:d3:1c:65:43:b8:97:20:5b:93:d1:03:7b:
20:94:f2:4a:b4:f4:18:c4:a0:94:57:35:66:c1:8b:
91:dd:fd:06:29:00:38:38:f2:a7:3d:b5:82:59:98:
c6:1e:15:0b:97:7c:ff:b3:8c:4c:c3:10:19:9b:64:
77:60:aa:a5:1a:90:11:4f:b8:94:ea:33:f6:1c:6a:
d8:74:8a:d7:af:9e:7c:b4:7b:2c:8d:be:ff:cb:18:
f0:01:bd:4e:01:f3:38:36:fd:ec:ba:c3:e1:f9:40:
cf:df:0f:e6:e6:7a:25:5b:16:a4:99:c9:da:13:b1:
83:a1:2f:2f:f0:51:47:27:a2:fc:d6:b5:e2:6e:c7:
6d:1c:81:b0:c6:f1:47:88:5e:66:24:eb:5f:2d:26:
da:e4:31:0f:5d:a2:18:a1:4d:1b:67:96:bb:23:02:
b4:e7:d6:02:4a:b2:3b:86:7c:f8:c2:f4:3d:15:ea:
5a:13:74:c2:ea:14:3c:b5:a7:00:1b:47:33:81:f9:
4e:bd:6a:cc:e2:e4:7a:72:18:da:07:d6:56:5d:1b:
48:df:e8:8f:d8:d2:bb:75:40:68:9d:b8:3e:de:09:
3f:f2:2c:83:c8:03:c3:66:f4:75:45:c6:0d:17:99:
ce:ac:83:81:10:ae:5f:8b:ca:cc:6b:ee:eb:c6:c1:
a7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:26:95:D5:AF:B5:5E:34:94:0D:B0:67:9D:A4:59:BC:AA:B7:CF:44
X509v3 Authority Key Identifier:
keyid:60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:be:e7:ab:52:10:1b:bf:c5:f0:35:41:76:d2:d7:fd:21:5e:
af:68:26:3f:13:c0:24:19:10:47:c4:11:e9:75:75:4c:da:1c:
8c:41:7e:66:10:e0:e8:d3:3b:26:df:df:79:73:2a:f1:ed:00:
5d:ae:73:b7:b4:6d:66:e4:93:da:73:31:1d:f4:ad:9f:8f:3a:
39:b9:20:63:33:08:cf:af:31:fb:b4:14:42:83:f1:b2:c6:87:
47:1a:10:9a:bf:16:2d:23:09:77:d2:8d:cc:c4:05:23:3e:e8:
33:2b:d1:61:88:fa:ab:56:7e:d8:e0:08:b1:c6:45:17:16:66:
24:a8:73:d8:f4:39:6c:50:8c:64:29:eb:92:ac:8f:4f:01:86:
be:2b:10:cd:f0:66:eb:59:11:19:8d:23:e0:0a:f3:a5:a7:86:
42:4b:dd:0a:11:07:50:56:2c:39:5c:38:ab:58:48:2b:69:61:
1b:e4:9b:51:b8:6d:0a:c4:1f:a8:57:bb:8c:2d:4f:97:fc:5d:
26:9f:4d:b3:0b:5a:7a:89:db:88:14:fd:20:06:8a:a3:ae:dd:
ec:18:fa:42:6b:3d:1a:7f:aa:83:24:bf:3b:56:a7:9b:02:8e:
1d:56:40:1b:fc:3b:ba:39:22:25:e1:85:d5:48:00:85:dd:3b:
ba:ff:3d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:44:22 2026 by rpki-client