
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
File: ygBwrFIB1vandapSXVPY4zDjIJY.mft (raw, json)
Hash identifier: nsET4lXQaAv5I0k9vLDNTPhI15zdrNZ7c34V77RyhF0=
Subject key identifier: 30:A9:A8:FB:6D:23:DE:C8:DA:6B:8B:96:08:C1:E8:44:79:4D:47:D2
Authority key identifier: CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
Certificate issuer: /CN=A9116907/serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096
Certificate serial: 02A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
Manifest number: 029B
Signing time: Sat 13 Jun 2026 01:46:01 +0000
Manifest this update: Sat 13 Jun 2026 01:46:01 +0000
Manifest next update: Sat 20 Jun 2026 01:46:01 +0000
Files and hashes: 1: ygBwrFIB1vandapSXVPY4zDjIJY.crl (hash: 0a9zpuafjqm09kHulFGZbFNPu2mZxubrNqC09TBLG58=)
2: EF9D5BBCE94211F08F77753A3C6F56BC.roa (hash: Q1RfYknRnpFb4jNQ61WjgyCjXaW4u7sCYH8KXBu1k40=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl
rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680 (0x2a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116907, serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096
Validity
Not Before: Jun 13 01:46:01 2026 GMT
Not After : Jun 20 01:46:01 2026 GMT
Subject: CN=6a2cb659-57ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cc:4e:c2:54:a0:5c:d2:8d:90:fd:68:9f:29:
6a:8a:e4:57:bd:b1:6b:aa:74:ae:ef:81:b2:b8:8b:
c3:34:b7:bd:cf:0d:ec:c1:64:57:f1:4d:95:b2:4b:
cc:8f:4b:c5:25:32:4a:04:c2:e7:e1:25:5e:4a:8d:
4e:23:e8:cc:0f:79:4b:56:31:c2:fa:15:37:b8:99:
80:81:47:0e:f3:73:54:90:93:09:ca:90:53:ac:3d:
cf:37:dc:28:48:8b:dd:a7:29:25:57:b9:46:92:93:
71:98:2a:fc:98:97:44:14:32:af:44:ee:2a:0d:95:
04:75:6e:c7:88:d9:9d:6b:20:ce:9b:9a:56:d1:2e:
10:57:42:e7:a5:b3:2a:86:7b:89:f2:d9:d8:89:8c:
c8:b7:08:26:16:ae:7c:d0:9e:9f:b6:bf:3b:b5:ea:
30:11:ac:71:b8:42:22:d9:c4:9c:b4:a0:46:6a:68:
bc:fd:5e:d1:82:d2:6d:d9:5c:db:98:ca:04:aa:6e:
ab:ad:2a:63:e2:43:f6:ce:5c:fe:48:d1:2d:da:9b:
8f:49:1f:a6:75:05:85:d9:53:68:cb:14:d4:ee:84:
df:3b:c8:d8:f0:7c:ab:de:52:da:d0:1f:c9:d4:32:
b3:3b:b1:88:83:6d:0b:a7:24:2f:14:e9:07:66:6a:
a5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A9:A8:FB:6D:23:DE:C8:DA:6B:8B:96:08:C1:E8:44:79:4D:47:D2
X509v3 Authority Key Identifier:
keyid:CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:7c:1c:48:b7:98:85:38:ea:e4:2a:c5:47:7a:e9:ad:3d:cf:
e7:89:b7:9c:af:13:6c:8b:35:b3:96:b6:c7:f5:a8:90:5d:3c:
47:18:6e:f1:c9:74:d8:7c:ae:c5:34:90:28:56:48:5f:24:99:
00:c5:0f:c2:e8:19:99:21:f6:7e:6a:4f:a9:cf:75:fa:46:e0:
2c:73:39:04:26:43:4e:55:03:0e:38:dd:e8:3b:ac:3f:11:3a:
ab:37:f2:f9:d0:0a:6f:39:fa:ff:1a:0e:2b:88:02:af:26:db:
e8:30:dc:f7:12:42:d1:a8:de:e0:9c:5a:ad:7d:67:96:ec:09:
d7:62:76:f6:2b:1b:17:fa:c5:ea:6c:c5:c5:79:4f:81:ef:2b:
d9:3e:f7:ac:c9:dc:b7:ef:54:b2:e7:0f:60:d6:50:47:b1:4a:
c5:25:af:0e:73:68:05:24:86:52:3c:00:cd:91:44:24:66:f2:
10:69:1b:a6:c5:38:c1:a8:01:d3:d9:b8:a7:68:e0:e0:60:81:
4d:6f:98:26:45:38:d3:aa:03:f2:6c:97:ae:b5:11:47:7b:b4:
5d:c9:e9:a5:90:c8:72:37:1f:54:9e:bd:df:4e:a1:22:16:58:
c5:0a:c0:48:94:ff:f1:96:eb:2f:98:c0:84:4d:d5:f9:8f:62:
8a:36:bb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:53:24 2026 by rpki-client