
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
File: YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft (raw, json)
Hash identifier: TbdF+ARU+TURUEwul72Jf2WXCLSef8ARbKPGV2K4gX8=
Subject key identifier: CA:A4:AB:61:03:CC:8D:8E:B2:C3:31:EE:14:D7:0E:C3:D8:83:BA:EF
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Certificate issuer: /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial: 0212
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
Manifest number: 0203
Signing time: Mon 27 Jul 2026 04:41:56 +0000
Manifest this update: Mon 27 Jul 2026 04:41:56 +0000
Manifest next update: Mon 03 Aug 2026 04:41:56 +0000
Files and hashes: 1: YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl (hash: U9srvx+P6vRTneETnokeLirm/RFCpwvaOf7SGqoYfz8=)
2: CE24A9DE739411EEB8BAE858C4F9AE02.roa (hash: 1ypTR4tpjHhybEU79OLgj9vwi7cGiaHW8fChke9PVj0=)
3: CDB51BDC739411EEB8BAE858C4F9AE02.roa (hash: wNyWzcRKJYqMachMShaQ5xH7ilqP4KvZkktUsCzRUfA=)
4: CD34C770739411EEB8BAE858C4F9AE02.roa (hash: qZE2RJVXRkOaQUu308Ogy2i4oQQi5FTddemUiT3SAjM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:41:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Validity
Not Before: Jul 27 04:41:56 2026 GMT
Not After : Aug 3 04:41:56 2026 GMT
Subject: CN=6a66e194-c11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:f3:05:0a:29:f0:59:a7:48:30:95:83:5c:
d7:45:f1:80:8c:e4:e3:a1:ca:7b:33:6e:9d:ca:a7:
3c:48:71:2a:3f:49:b4:16:9c:fa:8e:50:8f:2f:fa:
fb:d4:6e:3f:fe:26:20:96:a5:69:1e:39:cd:95:ad:
cc:99:18:f4:63:96:d9:6a:6c:83:23:9c:21:3f:de:
f6:68:18:d6:89:91:a3:7a:ed:cb:55:d0:60:bb:a0:
96:ac:af:9b:7c:ef:31:eb:21:b9:59:47:87:2c:31:
52:e4:60:bf:33:92:bf:d5:6b:72:d4:44:85:6b:12:
83:24:a9:a5:16:1e:ea:91:66:a2:e3:25:98:42:64:
0a:a5:62:9b:88:1b:f6:d3:77:22:8a:25:10:e8:0e:
63:a7:2d:df:46:08:6d:5b:69:45:04:81:18:fe:c2:
6c:db:91:cd:44:10:7e:a6:93:f3:ca:21:4b:84:c7:
0d:84:7f:62:f8:e5:5d:1d:31:eb:fd:64:d5:8c:2c:
25:b1:51:ab:7f:94:f4:c0:c0:cd:11:ef:ed:65:68:
9e:94:2b:ca:a0:f7:6f:34:fe:56:b9:56:79:2d:7e:
8c:d9:06:73:2c:f4:1b:68:80:33:94:0a:08:20:8a:
19:6a:fb:b2:9a:f4:a6:ab:df:43:9d:b6:64:ae:7e:
20:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A4:AB:61:03:CC:8D:8E:B2:C3:31:EE:14:D7:0E:C3:D8:83:BA:EF
X509v3 Authority Key Identifier:
keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:98:bb:8f:3c:c6:fe:dd:04:80:97:e3:54:54:bc:b0:6c:f1:
e1:9b:78:e0:54:8f:b9:7a:c6:7c:ea:30:fe:92:1e:b5:0b:ec:
20:bd:6d:8e:43:52:e0:61:ee:55:63:26:62:8d:16:0d:da:d2:
36:06:6d:e8:dc:74:d8:90:91:90:21:e6:8f:2c:e0:f5:5c:18:
73:25:5f:d6:0f:fc:40:32:3a:73:d9:cb:d2:53:13:c9:11:b0:
6b:77:ec:1b:24:2c:6a:80:f9:2b:39:1d:54:88:2b:df:25:5b:
ec:b3:e7:c0:1a:b4:02:14:e4:43:e7:68:ff:61:0d:d9:e0:9e:
71:4b:66:36:5a:d4:7d:d2:30:62:aa:f0:93:d8:6e:44:5f:e6:
cf:90:f5:57:ef:0d:96:e1:49:6e:73:c1:e2:da:d2:7b:b5:35:
b9:f0:55:61:e2:88:a2:3e:ff:35:e3:25:fb:8f:1c:b3:60:fd:
33:11:b4:9f:e4:3a:b8:a8:21:e8:02:fc:4b:d1:95:68:bf:09:
c2:68:92:ba:22:5d:9b:03:72:37:50:cd:53:46:df:38:7d:6b:
f0:b3:fa:20:05:95:8f:0c:4b:80:66:47:a3:b8:d0:6e:68:6f:
17:7a:be:83:53:29:88:2d:d0:0c:47:c8:56:51:6a:22:50:bd:
55:55:2e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:10:34 2026 by rpki-client