
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft
File: y-PSoWWxlLlY7sO2qURXdyo6CSo.mft (raw, json)
Hash identifier: 5XmtzUMNQ0VVfTMi63TTRvEf48kgf7emVuoFpqOSBko=
Subject key identifier: 23:EA:1B:1A:7A:33:CB:0C:A3:26:CB:8D:C7:81:0D:35:10:EE:77:88
Authority key identifier: CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A
Certificate issuer: /CN=A9154FE7/serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A
Certificate serial: 090E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft
Manifest number: 08F2
Signing time: Sun 26 Jul 2026 20:54:08 +0000
Manifest this update: Sun 26 Jul 2026 20:54:08 +0000
Manifest next update: Sun 02 Aug 2026 20:54:08 +0000
Files and hashes: 1: y-PSoWWxlLlY7sO2qURXdyo6CSo.crl (hash: hGPE8MCpDTsckn4HjmLF8gPkdqn1TdG2+oVGrkBLYAk=)
2: 4B3AC7DC5FC811ED869A6956C4F9AE02.roa (hash: gwFMK8dXQ0BUy50EitJsxHltkOumkaciXIm9wu0O67s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl
rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 20:54:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2318 (0x90e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154FE7, serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A
Validity
Not Before: Jul 26 20:54:08 2026 GMT
Not After : Aug 2 20:54:08 2026 GMT
Subject: CN=6a6673f0-6b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:f1:31:17:33:76:51:02:99:e2:35:68:60:
98:69:29:0c:ee:e2:6b:30:76:cf:3b:2c:82:1c:0f:
59:0d:7d:1b:8b:34:29:7c:ad:eb:2f:c3:79:7e:d4:
a5:02:7c:42:25:62:2e:2a:c5:83:3e:1b:13:0e:0c:
14:b3:04:8a:4e:ef:be:b0:5a:28:f3:04:0d:8e:60:
95:a5:4c:98:89:0a:b3:29:2d:b6:c1:f8:07:aa:41:
2e:53:3e:0f:d2:17:ff:3e:57:d7:6d:5a:7a:c4:8e:
18:f9:dd:89:dd:28:e7:ba:04:22:11:c3:51:0e:23:
f7:6a:ec:44:e9:0e:36:6f:22:21:af:fc:38:32:18:
66:30:42:56:31:0b:ae:e4:62:a2:70:72:ae:a2:a9:
7a:72:04:b5:d0:a7:fc:79:20:c1:42:47:60:db:34:
0a:cf:1f:cc:8e:2a:f5:57:1d:ef:e8:61:30:dd:5e:
87:ff:99:5e:7b:89:2a:9f:fd:a0:d5:26:37:bc:3b:
1e:af:65:f8:a2:6c:67:53:8b:65:a9:08:c1:27:7e:
40:7a:6b:e1:89:2a:41:39:fe:c3:de:c6:ea:6f:4a:
6b:86:b3:f3:b1:b8:ad:76:e3:20:c4:9a:b5:a1:c5:
33:33:34:ce:7e:0f:58:d1:4c:bd:8e:0a:62:6c:8f:
87:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EA:1B:1A:7A:33:CB:0C:A3:26:CB:8D:C7:81:0D:35:10:EE:77:88
X509v3 Authority Key Identifier:
keyid:CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:aa:12:6f:7a:de:e2:16:6a:88:e7:10:89:8e:f4:70:60:bc:
29:77:40:72:69:9f:68:02:a0:ae:f8:54:36:0b:e1:f7:81:fc:
28:20:13:fe:d1:38:8e:ca:8f:f0:a6:72:aa:e8:b5:8b:aa:99:
f8:88:c3:88:da:9c:4e:52:e9:30:e3:ab:8e:b8:0d:bd:a9:ec:
7b:16:ce:fe:20:00:dc:48:73:ea:c7:28:cf:ae:a9:41:6d:7b:
27:40:1c:7e:f0:f2:25:55:0b:b6:52:4c:7c:6a:c5:cc:24:3a:
ab:b1:1a:2c:a0:9f:bc:e4:f7:f1:f6:21:11:26:66:a5:2f:1a:
e6:e7:9b:74:f9:17:60:0b:b8:c8:1f:69:ba:2f:48:c7:83:d4:
6b:cd:f0:c3:29:d2:d1:92:a0:44:fe:a4:d4:f5:d6:ac:e7:1b:
ed:86:6e:bb:79:b6:0c:c0:0b:41:0d:a3:ab:20:33:67:4a:d1:
7e:c3:9e:b9:37:58:02:56:44:ef:b2:a3:eb:a9:6b:5d:f3:2e:
f5:8f:2d:70:16:5f:b2:27:4a:b9:ba:af:55:ec:fd:d6:2e:32:
d9:ef:59:db:4b:ca:64:a3:14:e9:58:d9:01:ce:01:5a:97:1e:
9e:bd:f0:ff:cd:e9:07:a3:c9:e2:68:ac:42:c1:da:76:f0:57:
74:7d:14:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:05:30 2026 by rpki-client