
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
File: YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft (raw, json)
Hash identifier: xGAuQNpFZNyqynjLMTR+QCaVXG/pSJXtFOI0SpMrJEE=
Subject key identifier: 1F:CC:33:20:11:8B:1B:51:DD:8A:6C:7B:63:B3:2E:68:E0:38:4B:DB
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Certificate issuer: /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial: 01C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
Manifest number: 01B7
Signing time: Sun 01 Mar 2026 04:41:07 +0000
Manifest this update: Sun 01 Mar 2026 04:41:06 +0000
Manifest next update: Sun 08 Mar 2026 04:41:06 +0000
Files and hashes: 1: YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl (hash: PpqeppEGox+9N541d21gBZIE3YTdPbCw/SuyPO8OEzE=)
2: CDB51BDC739411EEB8BAE858C4F9AE02.roa (hash: ikqljjgT32Bw6a9RQR87GqhQE/+HrZgU1EsHnARenbE=)
3: CE24A9DE739411EEB8BAE858C4F9AE02.roa (hash: ZJiErtj7JD3f7pzyajmZVPN6isJjBUZ76oGPIUUVwBY=)
4: CD34C770739411EEB8BAE858C4F9AE02.roa (hash: rPDc7wA9YBNlcWlKBr0IYLRQFab23zFVZPlqITK1zkE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Validity
Not Before: Mar 1 04:41:06 2026 GMT
Not After : Mar 8 04:41:06 2026 GMT
Subject: CN=69a3c363-e825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d0:dc:d5:ea:95:10:58:7b:62:a9:ed:ad:b7:
86:f0:9a:01:3b:76:69:70:92:98:78:0d:02:33:00:
d6:ac:13:11:cb:90:d5:6e:e1:b9:ff:5b:f5:4d:97:
ff:84:02:6c:0a:6a:55:71:62:c2:7a:b0:3c:53:3e:
54:8a:a6:9c:4b:a3:33:76:ac:22:9e:61:c7:48:90:
ba:ab:10:0a:5e:e3:4e:f3:16:8a:1d:97:50:c9:d2:
84:17:c0:88:62:c8:1f:52:99:f8:cc:d1:13:f2:2c:
dc:e7:ad:0a:48:87:ee:ea:b9:64:97:14:ef:58:7e:
82:ed:5b:3f:57:8f:cb:25:a0:62:4e:75:b9:9b:3e:
7d:0a:de:4c:e0:3c:4f:fc:45:d4:c7:56:e9:f2:32:
19:ac:78:fb:87:15:d5:f2:d6:0f:95:65:44:50:f8:
26:c0:c5:4c:55:0a:0e:0c:1b:e7:af:b9:bb:35:c1:
dc:2e:cb:c9:48:74:a3:bf:96:aa:80:d6:5e:f3:43:
56:0f:cc:02:63:32:08:5f:2a:16:3f:dd:64:8a:12:
9e:f1:25:ff:d1:62:40:fd:fa:ab:bf:69:b9:42:ff:
ef:34:67:f5:aa:4b:6a:a4:6b:e9:05:a3:f2:2d:95:
7a:4c:96:3e:95:66:58:32:dc:8b:b5:79:b7:a6:cf:
66:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CC:33:20:11:8B:1B:51:DD:8A:6C:7B:63:B3:2E:68:E0:38:4B:DB
X509v3 Authority Key Identifier:
keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:48:5f:cd:d4:4b:3e:60:ed:42:c8:dc:d9:f7:c2:40:0b:82:
48:43:a8:70:6f:09:16:37:72:bc:4a:4a:8e:cf:bc:52:92:50:
fd:2c:ee:5d:fa:8e:60:be:f5:5c:b3:d2:9a:2c:d4:02:8e:db:
0c:bb:e5:24:c2:76:0b:da:1f:b1:1f:c5:65:67:d9:b5:de:68:
54:ba:cb:db:90:ea:74:29:d6:85:90:bf:35:6e:87:00:ba:d0:
32:d7:49:a0:c9:b9:5a:8e:2c:1c:0e:f9:b9:51:8e:dc:47:54:
ac:3d:f6:b7:a8:2f:19:90:f1:bb:84:9a:7d:24:97:bb:92:a3:
56:0d:e7:f8:3a:32:a8:e2:de:3a:ee:0a:df:02:c6:46:1f:57:
bb:04:6e:d5:38:0c:b9:84:64:2b:55:51:58:7d:68:5d:1f:36:
25:56:15:f0:c6:bb:9b:a3:9c:e3:0f:93:b2:7a:28:4a:58:d9:
ec:88:49:4e:2a:d5:87:61:e6:c2:77:67:d3:57:a2:cf:f8:08:
2a:0f:e7:59:a6:17:35:6d:d5:72:67:66:df:63:f2:42:5a:63:
dc:1a:99:4a:a1:17:9d:90:2b:14:2b:b9:9d:9b:be:b5:71:01:
44:b4:a9:65:ad:e2:38:7e:9d:0a:e5:47:d4:05:40:75:9a:ee:
ca:c8:c0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:49 2026 by rpki-client