
$ rpki-client -vvf rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft
File: Y95vcfGNmpNam-HMuvW_7sCodvg.mft (raw, json)
Hash identifier: Z01LocDGRumNJOWtv/VbZ4bYMdphubKgSclYA8FmIi4=
Subject key identifier: 97:80:AE:7F:71:19:BA:0E:46:6B:E6:2E:91:B6:FF:7E:04:97:F5:44
Authority key identifier: 63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8
Certificate issuer: /CN=A912250C/serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8
Certificate serial: 01F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft
Manifest number: 01E9
Signing time: Wed 17 Jun 2026 03:33:09 +0000
Manifest this update: Wed 17 Jun 2026 03:33:09 +0000
Manifest next update: Wed 24 Jun 2026 03:33:09 +0000
Files and hashes: 1: Y95vcfGNmpNam-HMuvW_7sCodvg.crl (hash: I5Gy3ahWa4KzvE44CgDMGH8OtvYMlaFO72xhxCbRRBg=)
2: 845CB214C4CB11EEBCFEE782C4F9AE02.roa (hash: Qera6cb4hW7ZQ0YN5X9z0T9vL9IxqpRFf9/A33iIrFA=)
3: 7283E2F6C4CB11EEBEB1AE82C4F9AE02.roa (hash: PGgD/Bnz2WyZgRruvBfPNZNU3tBkg7F/up4YO2r/1lA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl
rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912250C, serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8
Validity
Not Before: Jun 17 03:33:09 2026 GMT
Not After : Jun 24 03:33:09 2026 GMT
Subject: CN=6a321575-582e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:55:64:7a:8b:7e:ca:05:1f:53:79:8d:8e:6b:
88:ec:b8:0a:89:7a:e9:dc:bb:d2:9b:f9:60:18:48:
a6:75:00:42:ac:63:3c:fa:25:8e:ac:0b:5f:7d:6a:
f8:7b:63:4e:ce:02:d6:3d:11:dd:64:d5:7a:96:16:
0d:4a:20:1e:0c:41:b1:d5:7b:6c:41:c1:2b:ad:c1:
1b:28:e1:4d:bc:c3:81:a1:e4:b3:32:07:b5:7d:d7:
ae:cb:4b:f7:69:d9:c2:38:42:d1:45:39:f3:d1:e9:
8d:6d:44:4b:43:60:8d:4b:f5:fc:c0:5b:dd:ef:b6:
d7:e9:ab:5a:51:11:aa:b7:05:b0:90:f7:27:f3:62:
db:0c:85:cd:21:81:69:01:7c:e5:bf:ed:80:87:7a:
33:40:a3:d8:06:ab:df:89:1f:33:57:37:b5:a0:c5:
46:fa:24:98:7b:8a:2c:f5:3f:ef:87:05:11:73:a8:
b1:9f:a0:cf:28:2f:7a:29:a7:71:64:41:bb:87:27:
1b:6a:2f:b0:d5:3c:20:16:14:a4:76:78:bb:46:bb:
96:9b:d8:67:29:31:f1:ad:fd:b0:1c:8c:e9:53:22:
fe:5b:8f:f4:1e:ad:b8:9c:8c:be:c4:f2:75:fd:50:
e1:c7:49:0e:03:75:b5:c5:75:d5:1c:70:61:d9:75:
d8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:80:AE:7F:71:19:BA:0E:46:6B:E6:2E:91:B6:FF:7E:04:97:F5:44
X509v3 Authority Key Identifier:
keyid:63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ab:30:6d:14:3f:64:f1:dc:d0:ef:cd:fd:7a:78:2b:16:46:
fb:a3:e7:a3:76:ae:ee:42:63:46:9f:7f:98:c5:2e:6a:7c:22:
12:61:6d:10:1e:43:18:27:99:68:a7:89:d7:54:24:5d:40:8a:
d3:b0:75:b7:de:18:bd:b8:41:5c:1c:40:42:17:4c:4c:f1:35:
7f:a3:42:b9:02:34:54:b5:d7:86:8c:97:26:82:bd:a1:65:ae:
31:ff:52:49:47:ec:9f:21:cd:be:53:31:cc:c1:cf:04:0f:25:
29:79:ea:f5:f4:5a:19:16:db:b4:2a:d2:b0:19:29:ed:72:99:
61:cc:03:ff:08:bf:29:87:b1:99:23:c4:67:41:9e:7d:ee:ba:
7a:6a:96:a2:ae:d6:7b:90:73:5f:c9:29:c1:0d:85:09:19:9a:
76:4a:26:28:e8:22:ce:e3:ff:e0:ef:da:95:15:b0:34:45:47:
30:3d:f1:ae:ae:e2:78:03:f0:0f:14:89:e2:dc:79:f5:82:b5:
57:26:2a:1a:9f:17:0b:2c:ec:d6:fb:35:10:5b:ff:63:b7:d7:
af:b0:79:0c:bd:50:f9:34:91:02:79:a3:55:e9:32:a0:dd:65:
d1:69:74:0b:ab:99:ed:74:a2:9e:49:64:59:af:dc:8c:e3:87:
56:55:53:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:04:21 2026 by rpki-client