
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
File: yyk1oUeLT4tEYxANsulbBlRAZ3M.mft (raw, json)
Hash identifier: 1xpJZaWMdpWFdNqpSJ0bnWVmHULWNRx1NaEd6bsLlG4=
Subject key identifier: 79:47:4B:1D:D0:0B:C8:DB:28:B2:DE:D6:19:22:9E:11:BA:CC:68:E2
Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
Certificate issuer: /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
Manifest number: 019A
Signing time: Mon 27 Jul 2026 06:05:41 +0000
Manifest this update: Mon 27 Jul 2026 06:05:40 +0000
Manifest next update: Mon 03 Aug 2026 06:05:40 +0000
Files and hashes: 1: yyk1oUeLT4tEYxANsulbBlRAZ3M.crl (hash: GeyzgFSVwNJcdhCCvjjJ+pR4C1PhznrYS0VyB/Wt2Mg=)
2: 76601C1C23E611EF92A9097CC4F9AE02.roa (hash: IV5neT5fvrEfaGYFt5jPMxG9PaLe4Tnwc926KjM/xSo=)
3: 680D797023E611EF8165F17BC4F9AE02.roa (hash: dAU1goqR7eXbVxXE2s6EOPd+tQKFat1qMstDa6Ugbus=)
4: 0A7FC90CEED311F096B1F0A4736F56BC.roa (hash: vzVQBVMmwkmKLF9gw2qbd+GWfUXHzR09NVFTQu0OTDQ=)
5: D14D6710936711EFB8A6457CC4F9AE02.roa (hash: Qiz09qw18Q7itjGB4hEAftD52hr4YhZFhmDLsy4591Q=)
6: 75E10ADA23E611EF92A9097CC4F9AE02.roa (hash: J8JvI737IcwyzOv4zv6SR8Qx/PymvBvHR1EoEe3p9Ms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl
rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:05:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156F14, serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
Validity
Not Before: Jul 27 06:05:40 2026 GMT
Not After : Aug 3 06:05:40 2026 GMT
Subject: CN=6a66f535-3fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:30:16:47:58:f1:fa:2c:c6:f4:3e:53:0a:
7c:73:27:f3:2a:3a:6e:45:7e:dc:5f:6d:13:9d:c1:
92:90:f8:4d:64:36:71:3b:67:b8:a7:cf:45:42:8d:
30:bb:43:ab:6c:b5:dc:dd:35:0e:28:dd:cf:35:dc:
ec:23:3d:71:04:e2:fc:ee:47:3c:d5:a3:19:a8:31:
61:bd:e1:4d:23:5f:85:99:d7:6a:76:26:a2:1c:38:
7d:e4:3a:e5:e7:6b:af:da:ea:63:4a:ff:f9:fd:b4:
73:35:7b:1e:87:83:b3:f6:07:45:bb:41:79:c0:6f:
ef:e5:36:c0:c2:f4:a0:bb:56:85:8c:20:d8:2a:49:
ae:37:12:b0:6a:ee:5e:20:ae:72:88:1c:56:f4:9e:
70:c9:28:96:a4:f9:fa:15:03:b8:d0:11:c2:9a:09:
3d:61:6e:cd:11:b6:eb:ee:4c:15:92:b8:5d:ba:a9:
5d:d6:64:3e:1b:a0:6e:a8:0e:6a:87:32:ef:6b:1f:
14:17:0c:b5:74:93:eb:a1:63:97:8a:c7:f3:0f:52:
2f:9c:ab:54:54:96:1e:30:b5:fc:1e:57:67:a2:36:
45:55:d0:f4:3e:ba:ac:2b:40:bd:1a:07:62:b6:0f:
96:71:13:eb:4a:1c:26:54:00:74:92:e7:9b:1c:e0:
43:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:47:4B:1D:D0:0B:C8:DB:28:B2:DE:D6:19:22:9E:11:BA:CC:68:E2
X509v3 Authority Key Identifier:
keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:12:e9:93:e8:a4:27:cd:14:e8:63:81:2b:72:0f:0e:d9:b7:
c7:e4:a8:d1:28:25:6b:f6:7f:e9:8c:6d:57:5b:3d:2e:fe:b7:
da:d3:68:7e:82:be:59:7c:fb:16:cc:5f:26:2e:37:88:16:7d:
a8:1f:b3:2c:00:06:02:12:7f:95:87:37:88:56:9c:c1:5a:a7:
eb:c9:df:60:db:fd:99:d3:6a:4e:62:0c:97:fd:e4:c2:46:ed:
09:cc:74:cc:1c:1f:58:90:3c:a5:83:15:25:fa:ba:7a:c6:ef:
46:b5:1f:e9:4b:8c:c3:74:75:4c:12:83:ae:5c:65:3f:7c:97:
31:5d:a8:4e:3f:f3:0e:44:07:dd:af:45:e0:3b:a6:98:64:78:
43:71:da:13:95:e2:f6:fc:1c:bc:b5:75:26:8e:95:d6:3f:fd:
f0:b1:ad:0c:38:a0:09:c8:f2:b9:95:8e:09:77:04:b9:d0:9f:
71:a0:50:b5:c9:04:dd:5f:92:fc:ce:ac:ad:bb:d8:c1:9d:4f:
97:40:fe:47:6f:3e:af:a8:72:f7:b7:b6:90:53:f0:58:fa:95:
d2:da:4d:33:8c:bc:80:76:ff:d0:e2:fd:2a:77:bc:ee:20:39:
60:05:d3:07:d7:9d:c4:56:63:09:3a:7a:6a:96:7d:08:5a:f9:
74:22:e5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:02:15 2026 by rpki-client