
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft
File: YfjH66e1XnGy5rF3QJFCUdiM8KY.mft (raw, json)
Hash identifier: DAYltFSEctiGz+jW1RigfndzKGSbPWz2zg/tfUF7cmE=
Subject key identifier: F3:8B:4E:B9:A1:CD:07:E1:7B:A6:D7:2C:1C:C9:1A:7B:3A:FA:D6:50
Authority key identifier: 61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6
Certificate issuer: /CN=A9158491/serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6
Certificate serial: 0130
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft
Manifest number: 0125
Signing time: Mon 27 Jul 2026 07:55:48 +0000
Manifest this update: Mon 27 Jul 2026 07:55:47 +0000
Manifest next update: Mon 03 Aug 2026 07:55:47 +0000
Files and hashes: 1: YfjH66e1XnGy5rF3QJFCUdiM8KY.crl (hash: U0fJMyFSF4QpfgRfuet5unFMlTYx6C/x+Z0Rejau7js=)
2: 5FDDEE1CE34211EF8EA0CA77C4F9AE02.roa (hash: +tOM25MCKNoZft+0ItL3rfD0x3Jm3+5ljYXYPQKuHQA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl
rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:55:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304 (0x130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158491, serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6
Validity
Not Before: Jul 27 07:55:47 2026 GMT
Not After : Aug 3 07:55:47 2026 GMT
Subject: CN=6a670f03-c4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:c2:3b:dd:f0:51:2f:18:a5:73:75:c8:21:
ca:2c:83:63:71:a8:d7:9a:d3:98:12:f0:f3:b7:29:
4f:cf:94:16:68:27:5b:e0:a5:81:d1:43:e4:40:63:
44:9d:35:3c:bb:42:e5:65:4d:a5:73:a1:28:9d:3d:
38:f5:bd:25:d1:6f:13:05:62:46:2a:b8:b0:19:6c:
b3:e7:a4:f2:05:0f:8e:96:4f:a2:fd:40:d9:b5:2d:
5b:e4:4c:06:a9:14:15:ce:b2:6e:48:9e:2f:27:94:
49:ae:9d:e4:ad:59:82:d4:27:ee:de:0a:63:8c:ac:
a7:fa:09:8a:b6:ba:16:5f:22:0c:e4:01:51:a2:5c:
90:41:12:a9:74:e4:3f:6b:4a:38:c7:22:3c:14:15:
8b:c4:81:f8:58:01:f0:3d:33:56:90:1c:5f:ba:30:
be:3d:72:d1:8c:fd:1f:49:50:75:c6:14:4c:cb:48:
65:22:3c:77:f4:28:e8:18:04:47:00:c1:48:71:e7:
d9:bd:f7:86:89:fa:ce:0b:78:59:4c:10:6e:d5:c5:
22:c7:7b:4f:1e:46:3a:8a:43:54:fe:fd:f7:1d:4a:
27:d3:82:98:4f:af:57:50:71:5c:16:a4:7c:ff:74:
46:a7:b9:44:33:fb:c9:02:32:9f:8d:41:25:32:d8:
bd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8B:4E:B9:A1:CD:07:E1:7B:A6:D7:2C:1C:C9:1A:7B:3A:FA:D6:50
X509v3 Authority Key Identifier:
keyid:61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:cc:c1:af:2b:f8:a4:ea:d0:96:5c:71:64:d7:f8:e8:0e:30:
28:b6:31:8b:54:e4:4f:83:43:7b:c1:aa:a0:a5:d2:bc:7c:fd:
f4:b6:b5:f1:58:3c:46:06:55:ad:ca:c3:af:75:4b:7c:af:3c:
9b:b4:9a:0f:1e:e0:68:4a:1e:13:4a:de:6a:82:6a:e9:18:70:
4c:4d:38:18:09:60:ea:f9:49:e4:08:33:1e:5b:d1:a8:79:c0:
d6:04:f7:5a:5c:d0:8e:67:63:d0:7b:89:b5:50:7b:61:d8:0f:
d2:ec:69:9c:e7:c3:d9:04:da:5e:c1:63:d4:dd:75:fd:83:54:
66:00:a8:7f:5e:ff:fd:94:f5:12:18:7a:d7:ad:39:11:13:53:
3d:75:ea:db:12:b9:99:b8:d3:10:76:f5:02:c0:44:67:17:65:
5a:02:73:f3:56:ad:03:77:e8:3d:55:a4:b5:65:55:81:e3:16:
26:e3:06:75:6c:46:86:93:71:18:28:e5:8c:f7:4a:35:2b:4b:
44:66:a9:33:cb:cf:36:0d:1c:ec:bc:90:e6:16:f2:e1:13:57:
15:22:9a:20:6b:5c:6d:43:62:65:a8:44:19:bd:1f:07:29:2b:
09:ac:2d:7d:7e:be:bf:5c:88:14:50:59:e1:e0:b0:8b:2c:12:
41:91:26:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTg0OTExMTAvBgNVBAUTKDYxRjhDN0VCQTdCNTVFNzFCMkU2QjE3NzQwOTE0MjUx
RDg4Q0YwQTYwHhcNMjYwNzI3MDc1NTQ3WhcNMjYwODAzMDc1NTQ3WjAYMRYwFAYD
VQQDEw02YTY3MGYwMy1jNGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAun7CO93wUS8YpXN1yCHKLINjcajXmtOYEvDztylPz5QWaCdb4KWB0UPkQGNE
nTU8u0LlZU2lc6EonT049b0l0W8TBWJGKriwGWyz56TyBQ+Olk+i/UDZtS1b5EwG
qRQVzrJuSJ4vJ5RJrp3krVmC1Cfu3gpjjKyn+gmKtroWXyIM5AFRolyQQRKpdOQ/
a0o4xyI8FBWLxIH4WAHwPTNWkBxfujC+PXLRjP0fSVB1xhRMy0hlIjx39CjoGARH
AMFIcefZvfeGifrOC3hZTBBu1cUix3tPHkY6ikNU/v33HUon04KYT69XUHFcFqR8
/3RGp7lEM/vJAjKfjUElMti9BwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPOLTrmh
zQfhe6bXLBzJGns6+tZQMB8GA1UdIwQYMBaAFGH4x+untV5xsuaxd0CRQlHYjPCm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODQ5MS82MERBNTNGQURG
QTUxMUVGOEJENDlGODdDNEY5QUUwMi9ZZmpINjZlMVhuR3k1ckYzUUpGQ1VkaU04
S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lmakg2NmUxWG5HeTVyRjNRSkZDVWRpTThLWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODQ5MS82MERBNTNGQURGQTUxMUVGOEJENDlGODdDNEY5QUUwMi9ZZmpINjZlMVhu
R3k1ckYzUUpGQ1VkaU04S1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaMzBryv4pOrQllxxZNf46A4wKLYxi1TkT4NDe8GqoKXSvHz99La18Vg8RgZV
rcrDr3VLfK88m7SaDx7gaEoeE0reaoJq6RhwTE04GAlg6vlJ5AgzHlvRqHnA1gT3
WlzQjmdj0HuJtVB7YdgP0uxpnOfD2QTaXsFj1N11/YNUZgCof17//ZT1Ehh61605
ERNTPXXq2xK5mbjTEHb1AsBEZxdlWgJz81atA3foPVWktWVVgeMWJuMGdWxGhpNx
GCjljPdKNStLRGapM8vPNg0c7LyQ5hby4RNXFSKaIGtcbUNiZahEGb0fBykrCawt
fX6+v1yIFFBZ4eCwiywSQZEmsg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:20 2026 by rpki-client