
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
File: yyk1oUeLT4tEYxANsulbBlRAZ3M.mft (raw, json)
Hash identifier: 1bWMSbSqDHlZ9couC1zpi/ncaBamvzHeHeDBiPlUqS4=
Subject key identifier: BE:A1:E5:93:6E:74:59:C2:9E:51:18:CA:3F:EA:DE:68:90:A0:9A:F7
Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
Certificate issuer: /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
Certificate serial: 0177
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
Manifest number: 0166
Signing time: Fri 17 Apr 2026 04:36:12 +0000
Manifest this update: Fri 17 Apr 2026 04:36:11 +0000
Manifest next update: Fri 24 Apr 2026 04:36:11 +0000
Files and hashes: 1: yyk1oUeLT4tEYxANsulbBlRAZ3M.crl (hash: sgmbyNmD2bzDepWEs/m6bIW0Cqrv/Dxpe8rCB0YuoIA=)
2: 0A7FC90CEED311F096B1F0A4736F56BC.roa (hash: 7+vMXmZRIYIKIxBz5RQMdseZAdAsObbhTp7dlt06B0M=)
3: D14D6710936711EFB8A6457CC4F9AE02.roa (hash: sO0aVU0cFwGpTz0cQ9IUqdHUM9QV4sMVuL+bslRBxPA=)
4: 75E10ADA23E611EF92A9097CC4F9AE02.roa (hash: 6ECFRbdi/OwcVFk5I96YrsKDQE1WQn7CfR1VvBkvdok=)
5: 680D797023E611EF8165F17BC4F9AE02.roa (hash: aW25kEfOm3Y6z0dJwR8QkAiS+sy9HyUcqVGhB3onEl8=)
6: 76601C1C23E611EF92A9097CC4F9AE02.roa (hash: JflVdPBidB0mm33Bgl8MOrVtKlhbLqttKFMf8YGitR8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl
rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156F14, serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
Validity
Not Before: Apr 17 04:36:11 2026 GMT
Not After : Apr 24 04:36:11 2026 GMT
Subject: CN=69e1b8bc-f4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:23:49:1d:d5:f8:3f:22:0a:20:f9:7b:7d:
a6:98:01:f2:5d:72:b3:be:73:db:5a:5c:68:4d:9b:
79:56:c6:69:59:3b:7c:40:e5:7e:8c:09:0b:cf:24:
0a:04:08:5d:96:be:21:5c:bd:c7:9b:1b:ef:2d:9f:
77:9c:33:a5:a5:46:e5:e2:2d:d9:14:52:f8:d3:d0:
b8:ac:ac:28:a2:a2:cc:c2:46:2b:31:9b:e0:30:18:
bb:82:d2:8d:8a:32:da:bf:b8:ba:6e:17:4a:99:89:
fe:f8:4a:1e:46:1f:41:cc:72:ef:f9:c1:4c:79:18:
c6:3a:59:ea:ad:c2:7a:ba:42:ca:20:04:92:f7:47:
86:2a:a1:1b:c8:96:96:05:bd:23:a0:b5:11:b1:f4:
97:eb:d2:c8:76:71:6c:dd:e1:68:ff:f2:19:7f:79:
91:53:c9:23:ca:ce:1e:3a:ca:9b:52:f0:2d:f2:60:
7a:31:5a:74:2e:35:21:06:6b:68:af:87:03:1f:92:
a5:e7:bd:51:b4:a5:91:1f:49:1e:d9:58:bc:3e:d8:
19:aa:28:a8:fe:1f:8a:43:c9:95:00:90:a9:b9:a5:
d6:e5:11:ee:01:46:d1:66:62:c7:10:4b:69:07:a0:
2a:13:12:9f:20:e1:9b:7f:c7:7e:43:f0:95:2d:97:
da:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A1:E5:93:6E:74:59:C2:9E:51:18:CA:3F:EA:DE:68:90:A0:9A:F7
X509v3 Authority Key Identifier:
keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:01:bf:40:6a:28:88:62:c3:54:82:ff:01:ed:cf:d5:e2:3a:
39:79:95:04:ed:29:ee:c5:d4:6d:44:53:21:f4:67:21:23:97:
fe:4e:86:32:1e:ae:8c:6f:11:99:8f:5f:dc:9b:66:8f:4d:db:
4e:31:c9:21:f0:5b:74:c9:22:fd:08:b6:5d:fe:ec:2b:69:f3:
c6:71:e6:1c:de:34:82:f4:42:1b:25:5d:e3:12:fe:90:f5:d7:
8b:db:5f:1b:94:cc:3a:33:d8:39:9d:31:50:6a:81:73:08:c7:
7c:1f:7b:42:6c:ac:8d:6b:72:d2:5c:80:5d:76:75:a4:54:4f:
28:e9:cc:1d:ed:5c:9b:57:81:8d:41:96:df:c6:39:02:00:59:
c9:12:fd:4f:df:13:0b:e5:bd:11:7d:9f:e1:63:4b:75:43:b8:
fd:70:1b:ad:51:3d:67:82:fd:c3:c6:74:ad:c1:69:cc:9b:4c:
1e:47:20:b7:48:a1:7c:58:5b:56:61:4b:34:02:50:e0:88:0d:
73:5a:0a:82:0d:9a:fb:98:51:a4:10:e6:41:3c:c7:8a:6a:f7:
3d:1f:13:b3:34:5b:a8:97:8d:da:77:3a:8a:22:e7:03:b1:af:
91:0b:51:c2:ea:4b:c1:cc:2b:3d:66:a3:88:3f:ed:21:3f:22:
ab:b4:7c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:02:06 2026 by rpki-client