
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
File: yl96MSHB9fmJUgx6UZcT-zpoyn4.mft (raw, json)
Hash identifier: MM1gZhbJwiDKCEv5s6qwsK3eeblHcJH+NTJVFjleUvs=
Subject key identifier: FA:4E:23:B5:7B:B4:06:65:4C:9F:19:6C:E3:BA:7D:F6:D7:64:08:8B
Authority key identifier: CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E
Certificate issuer: /CN=A919E1FC/serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
Manifest number: F0
Signing time: Wed 13 May 2026 06:32:30 +0000
Manifest this update: Wed 13 May 2026 06:32:29 +0000
Manifest next update: Wed 20 May 2026 06:32:29 +0000
Files and hashes: 1: yl96MSHB9fmJUgx6UZcT-zpoyn4.crl (hash: jB0U/Vs28Dh4Ijeh3CPe0NTtuJaYjgmHyrSzQ3TKsyg=)
2: 0A34182CE9FC11EF9D3DE972C4F9AE02.roa (hash: 5aZLhkHexwZy2OGn8j73qB9Fr54SX5MLYLq1gSETLgc=)
3: 09852FF6E9FC11EF9D3DE972C4F9AE02.roa (hash: +Guf8goiy81fZQZko9cL1+fi1M4VlxC1TorsAeBwzhI=)
4: F70CBA98E9B911EFB5B54650C4F9AE02.roa (hash: ApqLcBimI49Avn0PuHyRPruV4UszM9ORBkBlkObwqEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl
rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E1FC, serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E
Validity
Not Before: May 13 06:32:29 2026 GMT
Not After : May 20 06:32:29 2026 GMT
Subject: CN=6a041afd-0799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:09:15:e6:83:11:07:3e:67:97:5f:45:4b:a0:
6d:96:03:56:34:bd:25:d6:dd:7f:7f:93:77:32:2e:
be:04:5a:91:bd:a6:ff:14:ef:05:67:84:64:be:32:
26:86:2c:81:9a:1c:51:ed:c1:c2:ef:30:ca:e7:56:
25:3c:4b:49:58:ea:5d:33:d2:dd:24:01:5b:e1:d1:
51:31:32:f6:be:1e:9a:ec:de:c7:30:d5:8a:5a:a2:
89:24:c7:fc:37:4c:70:50:68:cb:a6:61:5b:7b:53:
78:2a:f3:da:e4:33:be:e7:bc:38:fe:6c:80:ac:a7:
b3:48:5a:e5:a3:f7:c1:48:2d:59:d5:31:c6:a3:73:
09:2f:d7:77:f5:36:0d:ba:98:7b:ae:e6:15:fc:46:
9f:5a:60:30:05:3d:7f:06:fb:ca:0e:53:89:03:7c:
9a:b4:1a:71:eb:55:93:96:6c:c4:2f:c5:f4:58:f0:
d9:52:4e:16:66:1c:c5:a6:7f:9d:cc:8b:e4:f3:91:
50:f7:f5:99:c2:b2:f8:d3:a8:10:c5:6f:a3:cb:c3:
19:0d:76:21:0a:e8:74:15:7e:86:94:4f:e4:c9:29:
6d:0f:47:25:7b:7e:45:d1:9a:f3:33:39:f7:3d:ec:
3c:06:89:47:fd:60:ad:ef:18:6a:c4:e4:59:22:b8:
77:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4E:23:B5:7B:B4:06:65:4C:9F:19:6C:E3:BA:7D:F6:D7:64:08:8B
X509v3 Authority Key Identifier:
keyid:CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:a3:c3:1a:c9:f4:9a:a8:4f:fc:ed:94:06:46:ea:cb:1b:21:
f9:0c:ab:9d:1d:2e:ef:b6:e1:82:f1:97:b9:f0:a8:6c:53:f0:
2e:e7:34:12:74:e2:41:01:47:d7:f9:61:7d:47:ca:0a:5e:42:
a5:cd:59:b3:30:2d:23:e6:ba:cc:88:3f:07:3e:05:1a:29:fe:
30:15:37:1a:32:67:1a:b5:4c:2c:72:c3:1e:33:f3:33:6a:f9:
c2:2f:75:eb:af:b3:bf:0c:5e:15:15:39:03:77:73:80:29:28:
47:bc:63:04:2a:2f:f3:1c:e2:fe:7b:ca:2e:b5:48:65:6c:1b:
bc:1d:b6:55:34:6a:4c:a5:74:59:dd:59:bb:f3:75:2b:f4:21:
b4:66:60:01:7c:fe:46:76:77:37:6d:72:a6:98:e8:d5:f8:3b:
dc:e8:c9:42:e3:d2:56:ff:4f:b7:22:13:9d:b7:25:8f:a2:25:
c9:79:01:f2:46:02:09:91:73:dc:6f:fc:87:5e:9b:ea:20:69:
69:f9:e1:22:dc:09:21:5b:38:a6:18:fd:5a:be:5d:28:ed:7d:
d5:2b:8f:37:a6:86:1f:d6:6e:7e:23:ad:9f:b8:19:4e:be:87:
d6:42:2d:56:76:cd:49:0e:00:66:88:72:1e:2d:3e:b7:a1:bc:
cf:03:04:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:50:35 2026 by rpki-client