
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
File: YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json)
Hash identifier: capO7wa+2Za0/YAtjXaGtsG7nbdaaKp/Tm+QshFkSZI=
Subject key identifier: C7:87:B8:44:E3:88:B9:A3:79:E6:42:D5:12:5E:45:FD:52:C5:28:52
Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Certificate serial: 059F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
Manifest number: 0586
Signing time: Mon 27 Jul 2026 00:15:00 +0000
Manifest this update: Mon 27 Jul 2026 00:14:59 +0000
Manifest next update: Mon 03 Aug 2026 00:14:59 +0000
Files and hashes: 1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: Njp7IDYAVhT98nzwuqAN3UyPc87HRX7bA+Gt7j/viCU=)
2: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: MCVYIDVOykTmNbo90DABkV8onNjQjPmA4NHqWOQwZM8=)
3: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: 79TNb9upWSGm9yBDGngscbHy7jvkh/bVgSJa7W+FYrI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl
rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1439 (0x59f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Validity
Not Before: Jul 27 00:14:59 2026 GMT
Not After : Aug 3 00:14:59 2026 GMT
Subject: CN=6a66a304-bcdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bc:67:3d:b2:05:d6:d2:6f:9f:9c:5b:41:67:
14:23:db:35:03:db:ec:9c:64:89:80:67:4a:e5:ed:
be:a2:dc:ab:09:bc:eb:f1:19:35:00:a9:18:58:65:
de:ca:00:18:ce:85:d5:52:fa:3a:0f:47:18:1d:3f:
8a:2c:b2:ca:df:27:ea:84:8d:44:9f:72:81:d2:18:
fd:78:4e:45:ac:09:5a:72:02:00:44:73:8c:e2:65:
b4:9f:76:8f:6e:5e:42:9c:83:b2:e6:3a:95:4b:d4:
bb:e9:64:35:5b:e8:34:f1:dc:b2:2c:24:72:a1:ab:
44:a4:e9:16:92:fa:50:cc:14:94:4a:c1:74:8d:d3:
8c:11:09:ce:30:a8:fd:5c:46:07:7a:d7:d4:92:8a:
c5:0e:a6:08:72:ed:66:b9:69:40:87:1e:38:31:c4:
96:c1:b4:2f:6b:44:b8:71:df:0a:af:56:7b:12:9e:
a8:bd:0e:79:c2:41:3b:b3:ca:01:98:ba:43:9a:06:
32:b5:ed:6d:3d:2c:fb:b5:33:cf:25:f3:77:05:dc:
60:02:5d:45:30:e1:1c:f4:4c:20:0a:08:c8:0f:2c:
5f:99:17:15:06:a4:53:4e:d1:d6:46:d4:7a:04:18:
38:92:65:41:11:77:12:29:40:56:8e:c9:6d:5d:28:
ce:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:87:B8:44:E3:88:B9:A3:79:E6:42:D5:12:5E:45:FD:52:C5:28:52
X509v3 Authority Key Identifier:
keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:44:d5:d0:d5:02:36:0d:22:a2:28:49:bb:0f:7a:82:5f:ed:
74:84:02:e2:a2:62:31:de:6e:a6:cc:f9:b7:b8:d8:48:45:29:
7e:6c:0f:ee:f7:45:9b:cc:e7:2b:3a:49:de:9b:e4:66:1f:47:
71:d8:3d:b1:cf:a1:36:17:2f:3f:e3:3c:d4:d4:dc:ed:0c:ce:
1d:7b:68:2c:dc:90:e4:02:c4:cc:fa:d8:0d:8f:58:59:6a:90:
7a:e6:87:12:5b:6c:cf:5f:e3:3e:7e:48:d7:e1:e6:55:bc:57:
e4:69:13:9e:7a:da:84:e1:41:80:b3:a1:ff:98:52:a5:99:88:
8a:e6:25:25:10:b4:6c:7c:5b:c1:44:b6:63:e7:81:53:4c:1a:
41:3d:97:17:77:5a:64:39:cf:be:50:d8:9d:0f:50:97:bc:d3:
72:47:7d:62:3e:cd:f0:04:fa:6c:20:04:d0:bd:93:49:c8:6f:
b3:db:55:f2:f2:69:55:f5:53:f7:a9:85:63:cb:ba:ac:12:91:
af:f2:63:90:6c:f1:73:16:cc:08:3b:7a:47:1b:7e:58:06:36:
5a:8b:ae:01:9e:cd:ee:8f:4e:cc:06:fa:26:28:74:46:6a:b9:
c3:63:fb:a0:88:fb:3e:02:01:5a:60:f0:a6:71:36:a7:a4:de:
d0:b3:8b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:31:33 2026 by rpki-client