
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
File: ycx5T_y0zfLZ373rdjgJuH0tj1c.mft (raw, json)
Hash identifier: 5nRnsHPIgVI2ZfWB43T9gHAKrEofoxZZLsxxe0wr5oM=
Subject key identifier: 9E:F8:12:53:F2:82:7F:AB:97:A4:85:80:11:FC:CC:6D:5C:AA:9D:C1
Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57
Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
Certificate serial: 25E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
Manifest number: 25BE
Signing time: Tue 28 Jul 2026 15:49:39 +0000
Manifest this update: Tue 28 Jul 2026 15:49:39 +0000
Manifest next update: Tue 04 Aug 2026 15:49:39 +0000
Files and hashes: 1: ycx5T_y0zfLZ373rdjgJuH0tj1c.crl (hash: uB4RrQdJyCkXwOGL8L2TbZ2FPmBRU/lZk6BvnIzoZ3s=)
2: DD1070A286EE11F19E006003A7EE528E.roa (hash: QPNTaIBBW5Pm+ub/7yqeRjvgU5bEwV0xP9GlYoD4++M=)
3: 6690D57486FE11F194514C90ABEE528E.roa (hash: srPJd4xUL6/Vf1zKO1/lDgBKkQ8LR7aRoLfFW6QTLcE=)
4: 04CC562A444E11E88204061CC4F9AE02.roa (hash: wmIlAIzm5QzVVCvvxLGcZrrzi/YZeMwXo33dKH+RNko=)
5: 297BC4140D4611E794585E2FC4F9AE02.roa (hash: Oip4/ft1E//qtYhxFVUiNdrRQdmZE92k2cuDNa4P3q0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl
rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9701 (0x25e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
Validity
Not Before: Jul 28 15:49:39 2026 GMT
Not After : Aug 4 15:49:39 2026 GMT
Subject: CN=6a68cf93-7540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:f5:94:dd:25:45:d9:24:05:25:00:46:db:
b2:02:62:8e:3c:bb:4c:09:9d:8c:7f:18:d8:00:63:
4a:af:62:57:f4:4f:1b:2e:01:a5:0f:6a:27:a7:1f:
02:69:61:5a:50:46:49:36:95:5f:b2:84:10:ec:be:
f4:10:08:79:e9:2d:21:d8:24:3d:44:a9:bd:24:14:
74:4c:12:e7:26:19:47:a9:c5:37:2e:55:c5:74:51:
47:37:29:e8:9b:74:23:88:9e:a9:1a:9e:4d:67:60:
d9:bf:72:57:a8:ae:8f:57:92:1e:4e:61:87:5b:b6:
33:9a:c9:42:6e:5b:95:db:f4:2c:54:7a:ce:0c:72:
c5:77:f2:11:3d:5f:a6:3a:9a:8f:98:e5:81:fc:fa:
9d:6b:ee:94:d7:4d:c8:30:9f:b0:c9:f5:9e:04:1e:
43:a9:92:a9:33:5b:04:54:66:78:ea:58:0e:e0:64:
8d:0b:37:c3:5b:7b:b5:90:e7:d3:4a:11:a0:03:5d:
58:bf:cd:f3:8d:3e:16:47:c6:4e:3b:89:bd:6b:f5:
0d:9c:78:82:aa:ff:90:07:36:07:a1:d4:10:cf:2d:
36:2b:ff:86:a7:cd:9f:8e:19:09:f4:90:82:e9:3f:
26:24:e2:0e:f3:ac:d7:cd:81:28:13:9b:65:65:c6:
26:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F8:12:53:F2:82:7F:AB:97:A4:85:80:11:FC:CC:6D:5C:AA:9D:C1
X509v3 Authority Key Identifier:
keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:cc:66:c8:bb:14:9d:e0:96:2f:d9:74:e7:1f:ab:7c:c3:54:
fd:34:6e:48:c9:f0:57:ab:4f:4d:36:d7:75:f4:d5:1b:ed:ab:
ca:f5:6f:e2:12:e0:78:a3:4d:84:0d:52:ac:91:f7:3b:2d:ce:
60:e2:0d:96:42:b8:ea:88:0a:ab:a6:d7:67:3b:e9:86:c1:25:
7d:06:ed:08:52:ac:c2:d6:a7:38:34:bd:89:87:b8:de:01:be:
11:42:b1:54:59:f2:08:ee:d5:d6:63:02:f5:16:cc:5f:e7:b6:
f3:34:7a:ec:9d:ed:97:82:b1:11:d8:fb:82:fb:19:c8:9a:50:
66:68:95:1c:8e:d9:ea:b2:ec:c3:a5:30:f0:46:26:d7:4b:0a:
92:5a:7c:9a:6a:6b:ca:c3:a1:4a:75:15:da:77:d9:f4:11:db:
13:76:06:31:9a:d3:d5:39:81:8d:dd:8f:9e:ec:16:0e:19:4f:
ef:85:88:7b:0e:84:f4:18:e1:01:7b:28:a4:95:6d:9b:98:18:
db:de:9f:97:f5:cc:8d:19:6c:cd:69:bc:54:05:04:fe:ef:bf:
55:4f:9d:7c:a2:8d:97:eb:db:e0:ff:95:2f:9d:57:9a:b4:a7:
5e:3c:a5:18:7d:aa:c0:85:f5:37:8d:46:bd:54:fe:73:02:35:
8c:3b:2b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:48:42 2026 by rpki-client