
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
File: Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft (raw, json)
Hash identifier: kiUlj/Y4F5A57lyWz3e76HwO1Z4eof3H5m5XllINU/s=
Subject key identifier: 18:12:8F:0A:75:45:EB:C7:B9:CA:A6:DE:CD:35:89:71:4F:B0:F0:CE
Authority key identifier: 63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81
Certificate issuer: /CN=A9118689/serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881
Certificate serial: 01D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
Manifest number: 01D0
Signing time: Mon 27 Jul 2026 05:21:45 +0000
Manifest this update: Mon 27 Jul 2026 05:21:45 +0000
Manifest next update: Mon 03 Aug 2026 05:21:45 +0000
Files and hashes: 1: Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl (hash: tfuhtQThT1s3EaqbwZsHMeHPlaUwJoJY6rf37fHAbTY=)
2: D1D880A6C4FB11EEA30ECF34C4F9AE02.roa (hash: MByRbKBm+JUM4LT1eboClzkfZWMq5pWfRvnvdbt+Df4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl
rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:21:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473 (0x1d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118689, serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881
Validity
Not Before: Jul 27 05:21:45 2026 GMT
Not After : Aug 3 05:21:45 2026 GMT
Subject: CN=6a66eae9-52f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:f7:6d:b1:75:7f:70:ee:d9:a7:42:47:9d:
12:16:43:8a:aa:8b:7a:4a:e8:35:1f:71:50:c8:cd:
c6:7c:82:65:21:20:78:d1:52:ee:9e:75:21:15:3d:
9d:39:ba:22:50:69:f1:36:81:4d:d8:7b:c5:4a:c7:
33:22:48:34:45:93:96:69:0d:60:db:dd:ec:dc:97:
31:90:3c:87:27:86:5b:3e:14:52:28:8f:42:c5:53:
08:20:69:e4:98:81:80:04:3a:18:56:07:de:fc:cf:
ea:9d:79:32:cf:13:b8:74:26:30:b3:f7:b0:2e:0c:
ba:0c:52:4a:88:cc:14:56:3f:d7:3c:56:1c:28:35:
8a:e9:63:ca:bf:b4:04:dd:92:33:4c:86:2b:28:bc:
04:6d:63:8b:6b:c9:01:3d:e7:c7:8c:94:12:f0:38:
10:1d:09:a1:0d:e3:9e:84:a4:83:29:16:26:33:80:
21:99:f4:1e:3f:45:32:ae:a6:e8:eb:38:84:8f:7f:
08:0a:f8:34:3b:cb:74:7b:07:39:c8:16:07:29:02:
8a:c7:22:72:9f:cb:95:f1:22:69:31:8e:28:7e:11:
76:c6:79:66:51:b7:2d:df:48:0c:87:3b:81:5d:d9:
f7:f6:be:ed:a9:d8:b6:ff:d3:3c:2d:04:0a:df:a8:
e1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:12:8F:0A:75:45:EB:C7:B9:CA:A6:DE:CD:35:89:71:4F:B0:F0:CE
X509v3 Authority Key Identifier:
keyid:63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:34:c3:e3:4d:ff:5e:4a:3b:05:e7:8d:30:85:32:72:d7:26:
17:1c:a2:a4:d6:84:3f:10:ee:83:e8:3a:b3:a8:c7:64:8f:f0:
32:fd:8f:22:08:97:db:ee:23:6f:51:41:95:fb:e5:95:1b:eb:
56:bf:d2:f0:53:6f:f6:91:d4:3b:68:74:44:d7:b2:96:c8:2f:
e0:a2:b3:4c:f9:0a:da:87:6b:62:a4:1b:f3:0b:c8:e7:91:b3:
21:7e:e2:d6:8b:58:aa:87:e8:c9:2c:44:4d:5f:fa:ff:59:f7:
db:07:76:0a:43:fc:8f:c6:eb:27:54:35:ac:00:52:dd:e4:f1:
c1:9a:19:9c:7b:01:97:44:9e:e6:43:8c:7d:fb:19:61:7a:90:
f9:e2:f2:33:64:15:af:1d:fb:26:90:d0:55:7d:7d:f4:01:f3:
df:5e:a0:5f:4c:c0:b8:a8:b4:a4:43:ef:8d:d5:11:c5:98:92:
77:4a:c3:7e:de:54:3e:80:a5:c3:50:6c:cd:98:89:66:c2:16:
2d:89:76:21:ea:33:c3:e8:6b:cb:c7:8d:6f:77:43:44:a6:23:
87:ad:31:b3:33:0b:04:6e:c7:0c:2c:fb:9b:39:ff:e6:bd:1c:
ce:76:bc:ba:2e:af:38:24:25:e4:83:4c:d2:78:10:82:98:8e:
e9:e6:ea:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:30:38 2026 by rpki-client