
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
File: yLK8O4qx665KdD-Q2Mih39HUzhc.mft (raw, json)
Hash identifier: Hk6bNvEuZ7RNTSkczCfZ38cfvtvxG+lcXl40JjGE2sA=
Subject key identifier: AB:A5:A4:06:A7:6E:E8:F8:56:B9:A8:D5:11:44:C3:7E:7C:C0:17:BC
Authority key identifier: C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17
Certificate issuer: /CN=A9113493/serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
Manifest number: D7
Signing time: Thu 11 Jun 2026 09:00:11 +0000
Manifest this update: Thu 11 Jun 2026 09:00:10 +0000
Manifest next update: Thu 18 Jun 2026 09:00:10 +0000
Files and hashes: 1: yLK8O4qx665KdD-Q2Mih39HUzhc.crl (hash: rwbrPInhEhq3yn1dy5atKvV8R1N8bQGG8qTltzPB1Nk=)
2: 758E8E941EFA11F0A6533A31C4F9AE02.roa (hash: 3KZYWiJqZH8n9U/9eCnSUD7SavXQ/Ekzxh7yjVvlx04=)
3: 8C19B3A21EFD11F0B822DF56C4F9AE02.roa (hash: TSbzXgPkumBg0cDwPI2XndJNJ0jn2eg2lDv16RkcG74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl
rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 09:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113493, serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17
Validity
Not Before: Jun 11 09:00:10 2026 GMT
Not After : Jun 18 09:00:10 2026 GMT
Subject: CN=6a2a791a-7bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:8a:93:3a:60:2d:18:10:e7:b7:dc:40:a6:
c1:e5:83:ce:a6:f8:87:7e:7b:ff:98:82:5c:14:7f:
be:e7:fb:d2:fb:c5:20:ed:4f:ff:69:1b:1b:69:d9:
36:5c:25:4d:c9:2f:c6:15:f3:d9:ba:5b:6d:13:b5:
92:b9:c6:6c:d4:41:2f:ac:dd:2d:f8:5d:2e:36:f1:
18:d6:24:b5:be:2d:e0:fe:50:2f:70:c1:33:3b:db:
e7:da:cb:39:9b:d3:70:1a:2b:1c:e6:82:cf:32:fc:
2e:64:c4:58:5e:15:26:43:9c:72:b1:01:7f:86:67:
7a:bf:ec:ff:74:7b:ae:bc:ca:aa:20:ce:29:71:a2:
b8:4d:11:89:0b:bf:a8:02:f8:bb:bf:81:a5:a1:90:
59:d3:a1:23:ad:1c:35:64:9e:0f:d8:f2:1d:f0:79:
ac:ef:01:e6:53:37:ba:cd:df:cb:c3:f3:67:1e:ea:
8e:35:8b:f7:38:ab:40:78:ac:14:23:16:f0:98:50:
75:92:92:40:64:91:79:ed:20:b5:64:67:23:9d:68:
d1:55:1b:8a:40:06:bf:64:2e:83:5f:2f:f9:ba:eb:
c9:ac:dc:1f:4e:69:2f:7c:e8:09:ef:0b:6c:ff:91:
21:4c:f4:77:0d:79:1c:98:79:de:32:0e:31:bf:ab:
71:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A5:A4:06:A7:6E:E8:F8:56:B9:A8:D5:11:44:C3:7E:7C:C0:17:BC
X509v3 Authority Key Identifier:
keyid:C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
f4:e6:97:cd:0b:57:ed:a5:f1:84:d4:36:38:27:79:ce:1e:76:
f6:da:54:7a:d6:9d:90:aa:76:95:77:73:3b:8e:76:a3:ba:a0:
73:92:48:54:1b:ad:75:f5:f3:71:0c:ae:b4:9a:7f:d9:23:34:
b2:d7:f4:0b:63:30:f5:2d:f3:a6:42:60:f0:54:e8:65:2c:c0:
0e:32:3a:d8:4e:f4:15:29:14:a8:63:ec:c7:69:87:0b:77:5f:
66:b3:69:3b:53:ff:05:01:8f:38:db:8d:15:c2:d4:34:89:ae:
a8:b4:09:1e:e8:cf:87:ef:6e:f2:d5:e5:87:cf:af:2c:ac:1b:
0f:9d:c1:f2:c2:78:0b:cf:ca:5d:b8:97:63:8e:e7:dc:bb:65:
30:f7:65:c8:64:f6:aa:b4:8e:6f:9d:a7:4a:4c:6b:6b:d0:f8:
0f:6b:bb:0d:fd:ed:57:27:59:23:b5:80:d3:27:e9:f9:d5:25:
d7:ea:d4:b2:d9:f2:9f:f6:fb:e5:22:d6:a6:7f:a9:13:12:b2:
a8:3b:df:a8:28:bc:9a:52:c2:e2:b1:b8:5f:0f:e0:fb:16:e4:
9b:45:89:3c:6c:18:0e:37:bb:1e:c6:c8:b3:8e:64:21:42:da:
cc:f1:32:35:51:9d:91:be:85:e6:f3:f9:60:64:e8:7d:66:8e:
14:5e:42:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:34:19 2026 by rpki-client