
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft
File: yl3F7VK2QLF0vjjiadTEniVnTxc.mft (raw, json)
Hash identifier: u7oDrmP46Yvgf8FRd7xUDO/zoT2Y9nJUoXsWdUCdBy8=
Subject key identifier: 63:A5:EA:BD:5D:F8:8B:EF:5D:87:D0:8B:65:AC:65:CB:76:E4:10:FE
Authority key identifier: CA:5D:C5:ED:52:B6:40:B1:74:BE:38:E2:69:D4:C4:9E:25:67:4F:17
Certificate issuer: /CN=A9127687/serialNumber=CA5DC5ED52B640B174BE38E269D4C49E25674F17
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl3F7VK2QLF0vjjiadTEniVnTxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft
Manifest number: 27
Signing time: Mon 27 Jul 2026 11:11:09 +0000
Manifest this update: Mon 27 Jul 2026 11:11:08 +0000
Manifest next update: Mon 03 Aug 2026 11:11:08 +0000
Files and hashes: 1: yl3F7VK2QLF0vjjiadTEniVnTxc.crl (hash: 8voezeIdAC8ZbbKoru/l8AdW5+1CNdmlxiUN0Yk+TmM=)
2: 76FA27AE4E0E11F190083CE1CC833773.roa (hash: va/1lyhr1y7ZVbyMMDIeDeUDTkfRGTrO+6LCCS/pWVI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.crl
rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl3F7VK2QLF0vjjiadTEniVnTxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127687, serialNumber=CA5DC5ED52B640B174BE38E269D4C49E25674F17
Validity
Not Before: Jul 27 11:11:08 2026 GMT
Not After : Aug 3 11:11:08 2026 GMT
Subject: CN=6a673ccd-d3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:aa:dd:1f:12:eb:68:6f:03:6e:4b:2f:8d:0b:
ed:d0:0e:bf:4a:99:43:9b:95:d1:84:b3:a0:5e:00:
84:91:9d:09:1b:a8:91:60:1a:c5:86:5a:71:df:c2:
2e:36:5f:5e:ea:c3:01:4c:8e:96:9e:03:91:71:24:
6b:d8:16:e4:98:dc:eb:cf:9d:2d:b0:28:c2:e6:a8:
eb:70:98:35:2b:2f:37:e8:d3:10:b3:c5:04:1b:24:
ed:ab:f1:06:9f:98:d4:57:f5:9a:3d:7b:b8:82:e8:
9b:ec:70:3f:a4:74:02:8c:3e:01:54:fe:3c:93:a7:
72:fc:94:cc:b8:34:a4:9e:d0:22:b4:af:58:12:e5:
97:d6:e6:ba:43:0b:03:5e:43:47:93:a9:1b:14:0c:
61:e9:4d:35:75:60:d2:f2:db:38:0e:6c:64:1f:76:
46:85:cb:3c:ac:1e:78:4c:6d:57:bd:bb:48:66:71:
8f:39:1c:e1:cb:3a:50:0b:cc:e9:76:b0:d4:ab:22:
8a:29:44:ae:d2:ee:a1:0b:0c:58:43:d6:eb:28:fa:
90:b6:80:75:b9:7f:68:68:81:d4:8e:85:c6:c4:c5:
90:e8:d4:09:7e:23:45:66:9a:3b:73:33:6c:77:6b:
6b:f7:27:7a:dc:c7:50:12:f1:5a:3e:56:32:5b:33:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A5:EA:BD:5D:F8:8B:EF:5D:87:D0:8B:65:AC:65:CB:76:E4:10:FE
X509v3 Authority Key Identifier:
keyid:CA:5D:C5:ED:52:B6:40:B1:74:BE:38:E2:69:D4:C4:9E:25:67:4F:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl3F7VK2QLF0vjjiadTEniVnTxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:9c:c0:38:09:fc:ac:c9:7f:4e:3f:58:87:8f:cb:59:b6:d9:
3a:4b:61:81:37:6a:f8:3f:68:65:d3:a5:2c:7a:c7:74:8d:0e:
78:6a:46:c1:af:b9:89:86:98:e8:ec:de:ab:1f:a2:28:88:81:
e6:80:8b:d2:ff:a5:d2:7c:03:90:86:e9:4b:77:82:08:c4:96:
68:40:56:d2:49:3e:67:6d:30:db:0f:ed:81:11:58:ba:82:b2:
14:c2:76:8c:bf:db:25:84:c7:01:7b:eb:dc:33:28:d1:74:ef:
11:6a:b4:17:86:b2:7d:13:06:8c:14:fe:8f:a2:2e:a2:1a:36:
44:9d:68:fc:44:28:e8:4e:f5:e9:f7:a9:b4:8d:5a:ca:b5:dc:
d9:27:00:07:36:ab:5f:6c:f4:4f:aa:a3:c0:eb:ce:9e:3a:b6:
f8:a2:4b:df:bd:26:29:ae:b1:5d:d8:cc:39:94:b2:07:a3:1d:
2f:75:3b:39:1c:44:5f:ca:7c:f7:ed:43:48:9a:85:a5:62:cb:
e6:50:a6:a4:c3:9a:ad:1a:21:92:90:48:ac:6a:8a:71:e1:0a:
53:40:30:12:72:21:0c:bf:80:36:33:7f:e7:a9:f5:81:53:0c:
66:3d:ec:d9:c0:88:3a:64:01:22:40:b7:87:b5:93:c1:78:b4:
44:dc:7f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:47:41 2026 by rpki-client