
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
File: YeQBev9HdnE8_cggXML7IXhGK6E.mft (raw, json)
Hash identifier: OPHPThWMwD3Rsjx/KyhBrKb4H7fT71lt+1LcW37Q6hg=
Subject key identifier: E2:3D:0C:F5:6B:CF:6D:04:57:3F:33:98:8D:5E:2B:B2:72:3C:53:87
Authority key identifier: 61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1
Certificate issuer: /CN=A919A824/serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1
Certificate serial: 0AF5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
Manifest number: 0AE3
Signing time: Tue 12 May 2026 19:28:20 +0000
Manifest this update: Tue 12 May 2026 19:28:19 +0000
Manifest next update: Tue 19 May 2026 19:28:19 +0000
Files and hashes: 1: YeQBev9HdnE8_cggXML7IXhGK6E.crl (hash: fblGFXYdb9+WiwK6UC0g1qAaoXg9JEmifCVF9XIoS2E=)
2: E3DD6362787A11ED89732760C4F9AE02.roa (hash: vve9hwKv+mYDRAl8TbHYr+BUbKVZsWenZHWGJC3Di3g=)
3: 1B2FD0247B3511F0AB5E9728C4F9AE02.roa (hash: Q1rC4uxku9zNUGZfldpV6C2HUrRjj+DFtRhXQLJUhNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl
rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2805 (0xaf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A824, serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1
Validity
Not Before: May 12 19:28:19 2026 GMT
Not After : May 19 19:28:19 2026 GMT
Subject: CN=6a037f54-feb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:7e:79:88:83:2e:73:d0:fc:46:7d:8c:d5:
d8:ab:64:3f:1b:05:83:55:27:ab:f3:5a:f3:77:53:
31:71:30:96:9a:b7:47:35:5f:4a:3d:66:3d:78:cf:
72:44:b1:6f:b3:09:1b:ff:ee:58:88:9f:01:b1:33:
cc:96:2c:5d:0e:70:91:c1:b8:2c:49:30:34:e8:e4:
6a:8e:bd:fc:9c:6c:ca:ab:de:77:e0:b5:38:fb:55:
97:00:f7:e0:8e:32:b2:ba:83:98:20:b4:c9:1b:6d:
5d:98:af:da:d2:4a:59:25:ea:7e:43:f5:9e:4b:1b:
98:1d:c9:70:54:02:a8:17:39:be:d4:d3:7c:f0:68:
34:44:d1:d3:4d:be:d8:cb:97:9a:61:d6:aa:d3:e1:
4e:3f:72:85:a4:cd:47:37:a8:d6:a2:8e:5c:98:2b:
49:b5:2c:1a:2f:49:d9:b9:7f:d3:dd:c1:66:3a:6b:
cd:e8:4d:6d:31:22:59:6a:a9:aa:44:25:06:e7:39:
38:5d:bf:4a:92:18:c2:40:ed:74:e2:99:83:1b:f4:
db:c1:8d:b3:13:73:d8:92:c5:cd:16:db:ad:31:6b:
0c:d9:f4:12:88:1e:66:3e:3a:6e:33:2e:fb:1b:03:
08:fe:60:2a:32:86:52:00:dd:a8:b6:c6:26:63:8a:
dc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3D:0C:F5:6B:CF:6D:04:57:3F:33:98:8D:5E:2B:B2:72:3C:53:87
X509v3 Authority Key Identifier:
keyid:61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:55:29:63:ed:39:97:12:4a:21:09:ce:26:8b:c7:37:dc:ce:
d2:9d:af:fa:25:5f:19:26:c7:97:97:22:7c:76:71:2d:20:21:
ed:6e:63:80:a8:e6:53:1a:d8:8f:f8:e5:bf:df:d1:35:5e:24:
a9:29:3a:44:e6:fd:4d:06:31:c7:b1:c5:61:ff:5a:19:5e:83:
30:9c:47:df:d5:e3:62:a9:68:34:87:17:85:37:4f:13:4a:32:
ee:55:2b:ff:c9:4c:d5:c1:d2:fd:27:ad:50:8e:dd:4d:0a:4c:
c8:e0:63:19:bc:05:c9:07:74:9d:ff:b4:ac:c5:04:fc:a7:00:
54:d2:b4:78:bd:19:55:5d:f6:6b:a1:45:af:9b:71:c1:98:74:
29:87:99:bf:23:c2:be:47:9f:ce:df:5e:c3:b4:71:8c:24:e0:
5b:55:c2:35:18:ec:bc:f5:f0:f3:e7:62:b3:ab:3e:3c:82:b5:
e6:f6:16:23:8f:25:58:0b:58:46:99:09:9f:d2:8e:55:00:38:
3f:0a:0c:33:bc:47:d6:4a:3f:02:11:56:cc:49:70:22:13:05:
4c:88:08:8b:21:4c:b9:26:ef:56:06:2d:fd:28:c3:e5:a8:3d:
18:77:7f:12:8f:ed:ea:f0:23:6e:03:b2:a8:22:e8:5e:68:9a:
c4:91:66:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:22:28 2026 by rpki-client