
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft
File: yukPRsIh0AstoIB61MSwZQM3Q0Q.mft (raw, json)
Hash identifier: 62gazWCiQCESLAl2hMKbMp+8A0ft6m7V7kOvUzHMBvE=
Subject key identifier: 79:9A:9D:75:29:9A:9B:45:65:61:27:32:22:FA:58:80:92:07:42:04
Authority key identifier: CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44
Certificate issuer: /CN=A9148526/serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344
Certificate serial: 0201
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft
Manifest number: 01FB
Signing time: Wed 23 Sep 2026 03:06:03 +0000
Manifest this update: Wed 23 Sep 2026 03:06:03 +0000
Manifest next update: Wed 30 Sep 2026 03:06:03 +0000
Files and hashes: 1: yukPRsIh0AstoIB61MSwZQM3Q0Q.crl (hash: ezxLXrxouaQOKT3+aHmMqaKjLKYYeuhFPOA1V/emnxc=)
2: 40F782C8B4AA11EEB330C137C4F9AE02.roa (hash: FPpOxqoZqRG2kj3GgFDrDDyQvTzjYGIWWyU3Fd62Dok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl
rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:06:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148526, serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344
Validity
Not Before: Sep 23 03:06:03 2026 GMT
Not After : Sep 30 03:06:03 2026 GMT
Subject: CN=6ab3421b-04db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:21:29:78:79:eb:d1:8a:f8:63:42:95:d0:
ad:dc:21:2b:f3:4d:f0:3b:80:69:21:06:1d:11:aa:
5f:d5:84:93:da:5f:54:be:73:73:03:ac:c6:26:e5:
ba:26:58:dd:31:7c:63:d1:7c:2f:98:ce:30:48:44:
a1:ce:5f:01:31:8f:f7:e3:99:47:c0:58:15:a5:7b:
f1:55:b4:32:a4:69:89:27:1c:43:3b:e7:eb:fd:85:
53:e5:72:c6:c3:ea:51:e4:b8:0a:39:44:93:55:d7:
a1:26:35:71:06:d2:01:40:52:7a:30:66:27:74:40:
59:5e:65:29:bf:0e:a7:67:39:02:e2:49:a1:86:85:
29:51:c7:dd:23:2a:55:37:13:2b:aa:86:8a:b4:bd:
20:87:a9:87:6b:bd:0b:78:95:23:49:33:01:b6:75:
22:9d:6c:11:a3:95:83:07:e2:14:a0:73:19:8f:74:
42:95:40:30:99:bd:62:2b:c2:38:78:be:d5:43:bd:
e2:e8:49:63:cc:e9:9d:01:ed:76:1f:a2:0d:9a:ac:
85:c7:34:e9:c3:19:b7:dc:98:16:c4:aa:ff:6f:b7:
d2:30:fa:af:fc:c5:cf:5d:13:27:9d:31:fc:93:a6:
92:46:5a:a9:0d:54:79:64:a1:d4:ad:72:e6:07:88:
e0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9A:9D:75:29:9A:9B:45:65:61:27:32:22:FA:58:80:92:07:42:04
X509v3 Authority Key Identifier:
keyid:CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:8c:1f:5b:15:a1:e7:91:23:5b:a1:98:a7:40:f6:f5:9f:4a:
5f:ac:8c:72:7f:7a:92:04:8e:4b:98:b2:d3:3d:de:58:12:3c:
65:e7:4c:f9:db:b0:d8:e5:1c:9f:6e:bc:1f:3d:db:f7:a2:f7:
01:54:5a:8f:d3:69:1b:f8:22:5f:23:e5:0a:81:f1:bb:f0:74:
95:cc:5d:7a:1e:4a:29:42:df:6b:cd:42:18:f3:21:d3:be:25:
8c:4b:c8:da:48:a3:d8:a2:d4:6e:4f:71:a1:ac:52:90:d9:8b:
6b:84:33:fd:f4:73:d0:6e:5a:d8:28:9b:e4:71:eb:e1:5b:a8:
de:a0:ca:fc:e3:64:bb:43:9b:72:3e:a9:00:a9:a0:04:2b:12:
fc:3e:c2:31:31:8f:6c:62:6b:a7:83:ff:84:9d:19:ec:78:3d:
23:dc:ff:5f:a7:d3:e3:89:3f:21:60:bd:4a:ff:65:76:a2:f9:
f9:ab:2a:6c:61:34:2f:db:83:99:09:e0:3b:72:4c:3e:de:04:
ed:4f:76:46:e4:82:80:ea:0f:81:61:91:94:d4:0f:2d:1d:09:
9b:1e:5a:65:ef:1a:c3:88:3e:0b:0b:d5:a0:5d:24:9f:73:bb:
4d:0c:d2:4d:d7:26:d5:a3:6a:96:63:ca:d5:f8:f3:0d:9a:78:
af:cf:b0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:38:30 2026 by rpki-client