
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
File: YmmU0Zdivg-YhPpO8NymbD9TAqg.mft (raw, json)
Hash identifier: cs6FQBOEJcMKiqtGtzBiat2RoW9Saq4ReLID4aZ9oXE=
Subject key identifier: 3F:C9:40:04:90:7F:58:5D:3B:34:09:3C:87:C9:BE:E7:B5:58:A2:C8
Authority key identifier: 62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8
Certificate issuer: /CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8
Certificate serial: 1C57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
Manifest number: 1C3D
Signing time: Tue 28 Jul 2026 16:18:13 +0000
Manifest this update: Tue 28 Jul 2026 16:18:12 +0000
Manifest next update: Tue 04 Aug 2026 16:18:12 +0000
Files and hashes: 1: YmmU0Zdivg-YhPpO8NymbD9TAqg.crl (hash: QbacenTmLXt+wq8rANAgIBruuh3rfiGioxlOm9YAPG4=)
2: B8F865A2147B11E7B5BEC457C4F9AE02.roa (hash: L7DWBL32H6f/RwujbTDFVJWqhVPyJvTq/sa1OY01Oko=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl
rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7255 (0x1c57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157E6E, serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8
Validity
Not Before: Jul 28 16:18:12 2026 GMT
Not After : Aug 4 16:18:12 2026 GMT
Subject: CN=6a68d645-13f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e7:13:93:22:78:72:aa:fb:f1:48:82:53:db:
72:48:b9:cc:8a:87:e1:7a:48:d1:2b:e7:77:65:2a:
4b:be:cb:76:f8:26:6f:2f:80:fc:15:49:6b:67:99:
74:3c:9e:8d:6b:df:42:1b:60:0c:1a:c3:df:51:06:
8e:2d:f4:9f:7a:d7:0a:84:6f:39:21:1b:1b:13:83:
84:f1:db:83:6e:6d:9c:4b:92:bc:da:0d:8c:10:b6:
85:89:8b:47:a0:c5:72:42:84:19:2e:36:0e:6a:05:
d5:13:02:0e:ce:8f:4f:04:17:79:6d:d1:ef:0c:a7:
02:69:1f:54:3e:7b:76:69:88:f2:a5:db:a3:bc:9a:
6c:16:03:11:ec:29:9a:84:a2:c4:68:1c:04:cf:66:
14:3b:f4:d2:ce:88:e6:37:12:c1:60:8c:08:86:15:
7c:d3:8b:5e:83:f6:e4:e5:05:a1:32:7b:17:ce:5e:
d3:e1:10:04:4a:3f:11:69:c0:ad:b1:4c:9f:aa:03:
0e:bf:41:46:c7:2b:05:6f:3e:cf:4d:f4:00:54:d7:
7d:c9:ef:2a:db:3e:7e:16:d9:ce:da:27:84:53:45:
42:e1:6d:75:23:b1:03:47:84:b2:54:a0:39:8e:57:
cd:b9:ce:17:3a:dc:0c:33:f0:d4:01:4d:07:0b:5c:
63:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C9:40:04:90:7F:58:5D:3B:34:09:3C:87:C9:BE:E7:B5:58:A2:C8
X509v3 Authority Key Identifier:
keyid:62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f7:bb:30:52:56:10:d0:64:24:27:09:3f:26:6a:41:1b:f2:
c5:cc:91:aa:b5:b2:81:83:85:20:0d:f8:6e:f2:94:bf:d8:74:
23:5e:cd:f6:86:53:0e:5f:0f:1f:80:7e:0c:0e:45:e1:94:55:
32:64:59:e6:26:28:f5:8b:a5:fe:74:1d:a5:5a:d4:8d:0a:29:
cc:6f:79:f8:7a:39:44:85:82:3f:33:dd:e8:b2:5b:79:c9:cf:
21:f1:3b:63:69:1f:d5:9d:8b:8d:3e:5c:a9:7d:03:c9:d1:32:
59:76:48:63:ed:47:fe:c4:b5:e7:eb:62:bc:8b:8c:ed:67:2d:
c4:41:d7:fb:14:5c:c6:31:63:07:b8:5c:74:a2:34:0b:4a:96:
f0:e4:74:8f:c8:0e:34:42:b7:37:b9:07:ac:87:d9:c1:68:5c:
89:df:d3:8f:a3:ed:e8:5a:be:d0:dc:84:d0:4b:34:f8:31:52:
a6:3d:88:60:fb:bf:40:43:0c:7d:e6:dc:1a:a2:fe:41:2d:a6:
6c:56:90:70:51:1c:93:61:84:51:d9:fb:e6:45:cc:f5:e0:99:
a1:6a:55:86:63:be:b5:fc:76:18:a0:06:d9:ff:47:38:dd:7b:
54:30:4a:20:98:b2:37:30:0a:4e:68:3c:75:f7:17:c7:08:c1:
5b:f6:00:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:58 2026 by rpki-client