
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft
File: yhlef9JZjYWjbJnsSBs1dMBuOxc.mft (raw, json)
Hash identifier: pMrD40APd9wBe7hHXFv3D0mpyHQvzOLNYwFfCo36UcU=
Subject key identifier: 84:DC:D0:B2:CA:E9:64:9A:4A:92:6C:1B:DC:41:65:13:6B:65:E1:29
Authority key identifier: CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17
Certificate issuer: /CN=A919DA63/serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17
Certificate serial: 08DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft
Manifest number: 08D3
Signing time: Wed 22 Jul 2026 20:52:45 +0000
Manifest this update: Wed 22 Jul 2026 20:52:44 +0000
Manifest next update: Wed 29 Jul 2026 20:52:44 +0000
Files and hashes: 1: yhlef9JZjYWjbJnsSBs1dMBuOxc.crl (hash: J2PL18tzi+3Beiu7itjM03PDwig6UQDkTItMxl7FAvs=)
2: B65C355AE1E411EAAD5D8545C4F9AE02.roa (hash: a0ikFcPtz4uKTdxcDLlrrrB8ZBAu38Rn0L19Tx4gd1Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl
rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:52:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2267 (0x8db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DA63, serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17
Validity
Not Before: Jul 22 20:52:44 2026 GMT
Not After : Jul 29 20:52:44 2026 GMT
Subject: CN=6a612d9d-2ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:dc:b0:7e:13:df:d7:82:66:05:d8:1a:e6:
82:0c:63:8c:3f:2d:11:76:7d:28:a7:a1:34:32:bc:
3d:8e:2f:c1:e1:04:03:a1:20:4f:b0:a5:a8:14:59:
b4:db:a7:9b:95:3f:60:dc:d0:f2:db:bf:96:16:7b:
51:3c:a6:52:09:5a:69:ce:ca:74:a8:d9:2c:5a:ee:
eb:72:42:43:5a:0f:84:32:bc:b2:7e:c5:7e:72:21:
69:90:ae:d9:c3:65:7c:76:94:0e:f3:d2:dc:e8:b3:
ca:1e:2a:d5:b5:20:e4:33:01:f5:16:b2:ec:0c:c5:
07:0e:32:7c:c0:6d:94:58:43:8a:86:bf:03:eb:69:
fc:60:01:9f:52:48:ab:93:6e:b2:b3:48:40:c6:40:
65:72:d4:6b:15:0e:26:73:2c:5c:ed:f7:23:76:08:
60:53:44:70:66:34:81:5a:a5:94:8f:c9:60:4c:de:
63:1f:70:2f:11:2d:a5:cf:e2:f5:c2:35:25:81:5c:
1e:f9:d7:87:ac:da:5b:22:2d:03:09:77:2f:52:50:
b1:db:5c:a7:3e:91:b7:fa:1c:82:f4:50:6a:70:81:
0e:55:8a:10:7a:93:e4:a8:ab:ae:6f:c4:20:c8:0c:
15:66:c2:99:0b:d6:aa:2b:d8:35:0e:82:c1:3c:a7:
10:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DC:D0:B2:CA:E9:64:9A:4A:92:6C:1B:DC:41:65:13:6B:65:E1:29
X509v3 Authority Key Identifier:
keyid:CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:0a:c0:24:39:a0:b9:45:09:bc:20:07:cd:e4:b7:64:ff:42:
e0:1f:ff:b2:c3:3d:43:17:cc:7d:65:e9:51:25:b7:89:bb:e4:
df:55:d3:9d:ac:cf:1b:ec:27:bb:bd:d0:03:23:1d:7f:d8:d3:
42:4e:1d:49:f6:cc:17:dd:4c:62:64:08:56:96:a8:6f:8b:5e:
ef:d5:e8:62:3b:4b:4a:ca:73:00:f8:29:2b:44:05:c0:65:2e:
e8:35:1f:90:8c:df:81:15:ee:e7:4c:fe:31:78:89:f0:e1:31:
9d:bf:a8:c3:b3:3c:0b:6d:f7:57:97:26:03:ba:f4:7f:05:0b:
b2:58:c6:15:49:fc:51:7c:74:08:c3:7e:11:76:e9:53:3b:df:
e8:52:ef:14:64:bd:db:3a:7e:fd:fb:7e:b0:c5:1b:f4:d8:69:
01:76:3f:64:46:e4:a4:05:21:54:03:cd:94:7d:c0:af:12:71:
e0:b6:bc:36:31:e0:a0:61:98:49:fc:00:d8:ae:0b:24:b4:ef:
cd:df:83:d4:fd:c1:22:b6:71:9e:30:1e:62:46:c2:ec:a5:9a:
84:e1:76:c5:ae:a7:75:6d:ac:b1:92:b4:09:61:5b:79:18:98:
da:88:e2:26:4c:28:f4:d2:9f:d7:0b:ac:e6:3e:c5:59:0b:d1:
0b:ca:be:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:20:02 2026 by rpki-client