
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
File: yozvXh2MPaWsm67lsZbvBmCaOVk.mft (raw, json)
Hash identifier: vN3LOtIYfvxV/qzUDHCIQuI+83/SptyTKyJMCkEUVyk=
Subject key identifier: F8:DF:20:9C:A3:89:D4:2E:EC:62:B6:63:73:96:1F:DC:72:07:CF:A8
Authority key identifier: CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59
Certificate issuer: /CN=A911B5BA/serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959
Certificate serial: 0C04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
Manifest number: 0BFB
Signing time: Tue 28 Jul 2026 19:05:35 +0000
Manifest this update: Tue 28 Jul 2026 19:05:35 +0000
Manifest next update: Tue 04 Aug 2026 19:05:35 +0000
Files and hashes: 1: yozvXh2MPaWsm67lsZbvBmCaOVk.crl (hash: DPhDcrd/MHrG09lzv0o55AJI3lmG+vSuTMmr7gz5WSc=)
2: 410BAD2095F011EFA9137C67C4F9AE02.roa (hash: nsk1UqBSMxXhAmerfIUuT9a9NoDkCJE2EAsvPLMgex8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl
rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3076 (0xc04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5BA, serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959
Validity
Not Before: Jul 28 19:05:35 2026 GMT
Not After : Aug 4 19:05:35 2026 GMT
Subject: CN=6a68fd7f-ae35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:73:fe:37:b3:99:29:48:fb:59:93:bb:ad:
5e:1c:4a:22:a9:76:48:3e:92:1c:cc:73:4d:25:39:
27:5d:f9:42:36:1f:d9:34:e6:73:9a:f5:9e:97:a0:
f6:74:6f:1a:21:7d:db:eb:c3:15:cc:28:5f:0b:eb:
8f:93:9c:ed:fb:70:b5:1c:4f:0a:60:3b:30:d3:f7:
7e:2d:68:a6:58:45:3a:ab:a6:c1:96:3c:56:c8:41:
7e:6a:c9:ed:50:3b:86:9a:54:a2:d7:9e:ea:4d:82:
db:4d:5d:44:7e:d2:30:aa:51:ae:04:26:70:5f:2a:
bc:8c:b7:d9:d3:7d:39:17:4a:44:fd:a7:26:c1:bc:
41:3e:d5:b7:dd:53:c3:87:7b:9f:f5:38:1e:c9:42:
18:3e:f8:45:db:ba:c8:72:e3:07:6b:6d:39:83:8a:
56:b5:b0:3b:d8:f1:91:bb:81:bb:8b:89:fe:a0:1c:
a4:c1:5a:7d:8a:aa:67:e0:0d:fb:44:91:96:4e:02:
fd:cc:30:70:1b:64:dc:c7:47:8a:ce:8f:f5:2b:68:
12:f9:fd:76:78:c4:08:b2:91:38:fb:a5:37:22:b8:
23:b4:51:6f:12:41:b6:85:d4:e1:c5:c5:bb:d6:f8:
ce:0a:42:ac:36:06:75:77:f3:4e:8b:73:1f:ce:40:
c3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DF:20:9C:A3:89:D4:2E:EC:62:B6:63:73:96:1F:DC:72:07:CF:A8
X509v3 Authority Key Identifier:
keyid:CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:33:e5:83:57:0a:0a:fc:1a:7f:5e:07:03:e8:60:1c:f3:c8:
6e:3f:25:84:d2:a9:7d:53:e8:35:24:c3:aa:0f:6f:e1:4e:31:
06:88:1f:44:67:78:73:07:c3:c3:b6:36:57:1d:d4:58:2d:62:
2d:bf:fd:4d:9a:9c:3f:00:29:92:6a:e7:61:9b:94:d5:a2:4a:
52:3b:9c:d8:49:fe:8f:35:53:27:0e:bb:73:de:f3:a2:9d:91:
88:f4:45:52:b2:bf:3a:23:62:88:f6:03:c6:6e:8e:67:c6:a6:
78:b8:ab:3b:d5:ab:73:92:84:c3:2b:ce:58:37:bf:21:ec:b0:
b1:b3:a9:ab:2a:22:4f:ac:33:44:72:ab:55:89:87:5d:55:18:
68:da:18:51:8a:ab:1b:aa:ce:74:d3:a2:1b:b6:5a:e9:59:c8:
b8:b9:02:6d:ae:36:a2:a5:51:23:29:47:70:98:ae:ad:12:b3:
8f:27:a8:4f:b1:17:d1:d8:8d:16:a6:6e:2c:0c:34:8c:83:ca:
4f:e6:4c:48:67:af:b7:cc:e0:1b:47:94:f4:81:13:84:1a:37:
45:26:33:4f:4f:0d:f5:50:18:d8:0b:c1:7a:e2:86:d2:e2:0f:
da:47:3c:a2:1e:cc:88:ce:5b:f7:19:bd:2d:e2:b6:08:e7:ac:
23:39:83:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:23:19 2026 by rpki-client