
$ rpki-client -vvf rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
File: YQihMheWwWwmFLdc14tfV5DNrQE.mft (raw, json)
Hash identifier: b5DwD/JqS5R1riIEblQJtuZTB6ncVd3TUgFz6KTJA90=
Subject key identifier: C6:9B:8E:7B:7F:BD:96:94:7B:42:8E:B7:3B:67:E0:6C:35:B6:86:A5
Authority key identifier: 61:08:A1:32:17:96:C1:6C:26:14:B7:5C:D7:8B:5F:57:90:CD:AD:01
Certificate issuer: /CN=A914ACC8/serialNumber=6108A1321796C16C2614B75CD78B5F5790CDAD01
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
Manifest number: 24
Signing time: Mon 27 Jul 2026 11:12:45 +0000
Manifest this update: Mon 27 Jul 2026 11:12:44 +0000
Manifest next update: Mon 03 Aug 2026 11:12:44 +0000
Files and hashes: 1: YQihMheWwWwmFLdc14tfV5DNrQE.crl (hash: Sfn9dfd2PRPLOi55o7aZOySAz6c8xWRVlf2sGhY1V8w=)
2: D5B3126E534B11F1B99ADA8D94833773.roa (hash: sXd+41/gn4hIOq0ToYPsxHfLlqQrww+estsIf7WIWOE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.crl
rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:12:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914ACC8, serialNumber=6108A1321796C16C2614B75CD78B5F5790CDAD01
Validity
Not Before: Jul 27 11:12:44 2026 GMT
Not After : Aug 3 11:12:44 2026 GMT
Subject: CN=6a673d2d-fefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c3:b5:9e:1f:15:01:b3:77:57:87:c5:5c:bc:
f7:dc:54:ae:f9:73:c2:68:0f:7b:b6:20:5e:43:2d:
39:c7:27:b2:0e:51:0c:75:f4:7d:a8:8d:72:07:25:
3a:46:c1:42:b5:05:8d:3b:4f:64:c4:0a:6f:c4:bf:
b2:43:b0:77:0e:22:be:77:b7:ee:89:2c:46:af:05:
01:fd:88:16:09:c2:da:e6:0a:ee:50:d3:72:04:04:
3d:7c:ab:85:24:4b:cc:65:65:23:df:a1:38:9c:9f:
83:94:07:21:79:96:69:bb:43:16:7f:62:76:88:05:
1b:e8:45:a8:c7:e7:3f:b5:22:87:68:16:fd:2a:e1:
5e:9f:bf:65:37:f1:da:fe:96:ff:9e:d6:07:40:3e:
4d:4e:a0:4d:88:8d:11:c2:bd:4c:b3:e8:ba:7e:e5:
ee:49:23:f8:f1:63:de:24:07:f5:29:be:ed:f3:47:
4d:be:2c:c1:47:c1:b7:60:4d:92:0e:74:29:0a:a8:
8e:67:7d:d5:cd:e5:d5:c3:23:f4:09:e6:6d:f6:65:
18:31:ab:75:17:3c:99:05:f0:79:e9:c1:82:0d:f1:
d9:80:55:cd:f6:2d:48:ff:78:f6:d9:d8:d0:b7:19:
ab:8d:05:04:c4:f3:9b:38:26:bb:6d:42:64:53:2f:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9B:8E:7B:7F:BD:96:94:7B:42:8E:B7:3B:67:E0:6C:35:B6:86:A5
X509v3 Authority Key Identifier:
keyid:61:08:A1:32:17:96:C1:6C:26:14:B7:5C:D7:8B:5F:57:90:CD:AD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:b5:03:6b:37:b1:cb:e4:86:92:ef:b8:12:8e:cc:d8:ed:31:
c9:a8:30:4a:ff:f7:f1:3d:36:e2:e4:36:92:92:2f:62:7c:44:
f3:64:f3:7c:29:c9:8c:31:76:18:1d:43:88:72:d5:ea:2d:57:
17:77:99:94:f7:89:c1:b0:28:57:ae:4f:cb:ac:16:de:33:10:
ab:83:d4:33:0b:3e:2a:6a:39:5a:e2:55:ad:fa:79:a1:7f:03:
18:54:81:1a:e9:ee:8a:99:5d:6e:69:ee:bd:ea:5e:ad:7a:0c:
f6:0b:5e:1a:5b:ee:5f:b7:14:5f:7b:a0:7f:15:4a:47:6e:cc:
3d:a9:19:bf:23:4e:94:70:82:f0:2e:c7:9b:5c:a9:56:c3:62:
fe:27:07:6b:c4:d4:c0:5f:bf:26:63:b2:9d:4d:63:73:47:2c:
63:1c:4e:0c:f3:9f:0f:a4:22:03:79:2a:b2:a4:a2:b4:f5:65:
33:f3:b6:fc:5a:50:82:92:67:f4:ac:a8:85:83:9b:a4:5f:85:
c7:75:32:98:91:ec:9e:4d:60:98:98:7a:a6:ae:4a:ea:d8:3f:
b8:9e:a8:5b:00:10:48:a5:77:da:03:e9:e3:6a:4e:43:f2:52:
65:2b:c3:23:c3:54:ef:01:2c:75:85:eb:34:50:b8:ae:ab:c9:
d4:7d:da:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:34 2026 by rpki-client