
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.mft
File: YeHcZf1qxNvqavowAYEqsc6h248.mft (raw, json)
Hash identifier: DubcBi/ff7ktjZrBOuO7gtbINJdGdiPyNpQtyzbwb+c=
Subject key identifier: E7:73:6F:88:2E:14:7F:34:F4:4E:DB:7A:FC:A1:21:DF:D9:90:0C:57
Authority key identifier: 61:E1:DC:65:FD:6A:C4:DB:EA:6A:FA:30:01:81:2A:B1:CE:A1:DB:8F
Certificate issuer: /CN=A9119D72/serialNumber=61E1DC65FD6AC4DBEA6AFA3001812AB1CEA1DB8F
Certificate serial: 1E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YeHcZf1qxNvqavowAYEqsc6h248.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.mft
Manifest number: 1D
Signing time: Mon 27 Jul 2026 11:18:04 +0000
Manifest this update: Mon 27 Jul 2026 11:18:03 +0000
Manifest next update: Mon 03 Aug 2026 11:18:03 +0000
Files and hashes: 1: YeHcZf1qxNvqavowAYEqsc6h248.crl (hash: pu938KJ+LhkmuUyfS5e+K5++NxP14SE//8ayT9kAqrM=)
2: 26787AF65D6D11F1AC5A3C58BE833773.roa (hash: aAazDlvlst4QJf10A0nu+4NUqP8Vp7PTtF9Qpr/s7GM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.crl
rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YeHcZf1qxNvqavowAYEqsc6h248.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119D72, serialNumber=61E1DC65FD6AC4DBEA6AFA3001812AB1CEA1DB8F
Validity
Not Before: Jul 27 11:18:03 2026 GMT
Not After : Aug 3 11:18:03 2026 GMT
Subject: CN=6a673e6c-fbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:e8:73:a3:4c:0a:fd:19:fe:17:7e:44:1c:
8b:17:33:48:ff:bd:b6:4a:c0:ae:64:12:e3:77:d9:
4e:fa:6f:28:c5:33:35:60:28:9e:7d:9c:b7:9f:84:
5e:9c:2f:a6:95:e6:42:92:4a:a1:b4:98:e9:c2:6b:
83:1c:e6:59:d7:7a:1e:ef:39:f7:aa:7d:c8:87:de:
d2:ee:1f:70:a2:cf:01:d7:2e:f2:74:b9:a6:2d:d9:
d7:df:74:f0:b9:a8:f9:61:14:bf:bf:54:73:34:bc:
96:69:93:b1:d2:30:a3:89:2e:5b:21:df:fd:c0:a2:
9d:86:1a:19:df:bc:80:c4:9c:12:0f:67:0d:0a:6e:
fd:5d:ba:80:e1:5e:c5:9c:b6:12:54:de:e5:51:d0:
4c:db:63:95:25:a2:24:78:9a:a8:7e:7d:d5:a1:c0:
db:57:cb:16:bd:b1:ae:22:60:76:dd:36:d5:4d:9d:
c2:2e:1a:0d:03:ec:30:90:a6:90:8c:4c:25:9b:87:
61:30:30:da:14:de:08:92:96:f4:44:a9:f0:90:f8:
1b:9a:97:72:02:ae:7f:fc:1d:b9:df:84:83:98:3d:
78:bc:bf:e4:19:aa:b2:be:dd:15:9d:a2:d2:93:ac:
a6:0e:e9:38:8a:51:21:6c:09:34:79:08:15:70:0d:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:73:6F:88:2E:14:7F:34:F4:4E:DB:7A:FC:A1:21:DF:D9:90:0C:57
X509v3 Authority Key Identifier:
keyid:61:E1:DC:65:FD:6A:C4:DB:EA:6A:FA:30:01:81:2A:B1:CE:A1:DB:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YeHcZf1qxNvqavowAYEqsc6h248.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:b2:f4:47:0b:e1:47:75:3f:97:c8:79:93:f5:4c:95:21:56:
3c:7a:09:4c:42:fb:bb:f1:80:02:0b:0d:1f:a4:d5:f2:64:15:
5f:b5:9b:e3:0a:e7:1a:d0:be:39:8e:45:e2:02:fc:f3:50:86:
cf:b3:30:36:5b:6d:8b:08:22:a8:56:63:ac:9d:fd:02:51:1a:
54:be:13:ed:12:12:2b:91:36:f0:7b:6e:4a:3b:39:1a:d8:00:
83:c7:b7:66:5a:4a:ca:43:a6:c2:e1:3c:b9:63:d6:9b:f3:5e:
45:79:65:e1:f3:5d:9b:af:b0:a6:1a:e8:83:2e:f4:54:a1:15:
b3:88:d1:a1:87:70:8f:6e:14:f6:5d:de:60:98:7c:44:72:da:
3b:fc:e5:c4:70:f5:c0:2e:4f:b0:eb:a1:61:66:0d:d8:ad:ba:
74:3e:71:56:5c:2f:ec:81:fc:dd:79:4e:2c:c1:b3:d8:6e:8d:
ea:24:f3:09:b4:fb:f6:f3:9e:82:a8:3f:af:b6:96:54:d8:bc:
54:61:7f:f8:b3:bd:9b:cd:8b:5a:7e:b8:24:64:6e:dd:0e:2c:
2d:9b:5d:00:d7:c2:3b:d7:c1:bc:c6:37:a0:80:30:19:c4:27:
c3:38:4c:74:3e:2b:8e:66:e3:f9:83:af:0b:61:a7:2f:8b:10:
b2:0c:24:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:19:37 2026 by rpki-client