
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft
File: YfjH66e1XnGy5rF3QJFCUdiM8KY.mft (raw, json)
Hash identifier: JNXj9QwvQFx3178QsL0e78zYJF9YlmRJgReuTFIKzr0=
Subject key identifier: 4B:1D:6C:B9:BD:17:6A:73:10:D0:4D:09:B7:A8:CF:EB:5C:B7:78:78
Authority key identifier: 61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6
Certificate issuer: /CN=A9158491/serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft
Manifest number: 010F
Signing time: Sat 13 Jun 2026 06:15:50 +0000
Manifest this update: Sat 13 Jun 2026 06:15:50 +0000
Manifest next update: Sat 20 Jun 2026 06:15:50 +0000
Files and hashes: 1: YfjH66e1XnGy5rF3QJFCUdiM8KY.crl (hash: xgDqZwIVBSHe9hCPwbx8oE8VYQOp5EcG042xd81kQzc=)
2: 5FDDEE1CE34211EF8EA0CA77C4F9AE02.roa (hash: +tOM25MCKNoZft+0ItL3rfD0x3Jm3+5ljYXYPQKuHQA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl
rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158491, serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6
Validity
Not Before: Jun 13 06:15:50 2026 GMT
Not After : Jun 20 06:15:50 2026 GMT
Subject: CN=6a2cf596-7078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:58:29:02:65:16:02:8c:d4:c2:fc:be:09:
31:20:66:a0:8f:59:f0:fe:19:d9:88:40:29:2c:66:
8a:71:73:74:9d:14:9e:c9:4c:6c:af:dc:f1:46:72:
48:3b:67:21:9f:26:23:90:0b:0e:f2:92:71:6d:15:
bb:03:8f:e2:bf:c5:2a:78:9b:53:e6:a5:b4:f0:56:
73:1b:51:81:57:3b:46:42:9f:ee:b7:0d:50:67:02:
43:b8:bd:81:a1:40:5d:e6:12:f9:fb:f3:7e:43:b5:
8e:f6:75:75:ce:e4:22:71:07:f8:66:5a:05:7d:46:
1d:35:2d:1c:00:94:42:46:be:0b:f8:cb:54:2b:24:
cc:ca:c3:3d:49:7a:91:a7:7e:ad:23:e1:74:24:80:
79:da:07:0a:5c:72:50:54:c8:a6:32:42:72:b3:e3:
17:da:15:83:dd:1c:72:b9:a3:c7:a8:94:20:6f:d9:
18:63:d3:a6:ee:8f:f0:69:b9:1c:23:fa:59:2a:e5:
b0:c7:03:90:83:9a:78:47:0f:9d:57:a7:37:9d:60:
8b:d4:a9:32:67:33:ad:0a:8f:69:d5:f5:c9:75:20:
7a:8a:81:d9:3a:2f:1d:32:a9:3d:e9:1d:30:73:c7:
f0:fa:08:30:43:1e:92:65:fe:49:6e:2b:42:3b:e8:
9a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1D:6C:B9:BD:17:6A:73:10:D0:4D:09:B7:A8:CF:EB:5C:B7:78:78
X509v3 Authority Key Identifier:
keyid:61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:35:d7:de:1e:69:05:67:90:04:fb:41:92:3e:3a:b4:9a:56:
68:5b:09:1b:b8:7e:b3:f7:8a:f8:67:04:63:76:cc:85:75:b4:
8c:da:b5:dd:b4:40:15:e3:27:a7:b4:9b:81:03:9a:f3:91:3e:
ea:c0:9c:01:a0:e2:53:16:08:28:ea:ca:de:5c:4f:14:ca:a7:
43:51:ef:3b:86:45:ba:41:fc:64:25:ea:47:59:76:85:ba:12:
65:5b:14:8e:35:c3:6d:8f:90:f0:2d:ee:18:0a:8a:de:a8:48:
7d:01:d4:0c:57:6d:ef:2a:41:90:50:c5:dc:fa:d4:52:30:48:
45:36:60:1d:cc:3a:71:78:25:65:a4:ee:e5:24:97:78:29:78:
f1:69:89:af:fb:0f:d6:3f:65:77:24:1b:ea:07:1a:cd:f6:4e:
db:a6:e0:e2:ee:42:77:40:c3:ab:a1:5e:22:f4:11:cc:5f:dd:
f4:2c:be:2d:33:07:c2:1a:21:0b:38:89:4f:e2:c5:1d:0a:d8:
bd:c3:d0:d7:b6:7e:e2:02:28:b6:7f:ec:1b:65:5e:bc:88:10:
d5:17:24:0a:af:bb:40:a9:e9:97:b6:e4:0e:54:f6:2a:9b:0e:
fd:a4:ed:2f:19:25:64:bb:be:d6:7a:7d:d8:51:cd:c3:40:79:
fa:c3:cc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:25:17 2026 by rpki-client