
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft
File: y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft (raw, json)
Hash identifier: OPV2u50RX7+4hx7ALblUV1/WlSLD/zcJnwWuDpcoRVc=
Subject key identifier: 92:6E:0C:BC:3A:3B:49:09:75:6C:DB:81:92:4B:CC:6D:F8:C4:8B:75
Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79
Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479
Certificate serial: 0216
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft
Manifest number: 01FE
Signing time: Sat 13 Jun 2026 03:18:26 +0000
Manifest this update: Sat 13 Jun 2026 03:18:25 +0000
Manifest next update: Sat 20 Jun 2026 03:18:25 +0000
Files and hashes: 1: y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl (hash: HxFsvMHr+Ot7Tdq/9ZhZ6UoU/x/zio22oLJeNlo/EgU=)
2: B752E03A97CE11F0ADE43030C4F9AE02.roa (hash: pvNtxEebaDqgsEGcGKNlJatXfUnFwrPrh9xqF+/MFUI=)
3: A910F37297CE11F0885B0A30C4F9AE02.roa (hash: Y7hqH6AdlNN+CGQx5eSl2EAvXIdaBV9/RAugdoHMkMg=)
4: 6A0C1182CA9D11F084B0E810C4F9AE02.roa (hash: Ur2xb9scSwvGgEl+imNvKk+65kBRDU8GyWd41dxPers=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl
rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 534 (0x216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159FAF, serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479
Validity
Not Before: Jun 13 03:18:25 2026 GMT
Not After : Jun 20 03:18:25 2026 GMT
Subject: CN=6a2ccc01-5575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ed:61:79:86:88:ea:96:bc:4f:cf:da:85:82:
87:4b:01:02:7f:3c:62:7c:79:13:f4:08:dc:48:f8:
96:17:44:9d:ef:df:27:ce:e8:72:d0:72:c3:b9:d8:
74:82:28:ee:55:7a:f3:92:88:5d:5a:1b:84:2b:3f:
2c:95:71:bc:ae:1d:b9:6c:8d:66:7a:ec:49:14:a1:
17:9f:29:f6:fb:c0:ff:64:0e:d7:94:02:89:03:37:
43:df:a0:eb:90:ab:10:aa:63:e9:2f:b0:ad:a6:85:
48:66:bd:aa:50:55:bb:68:68:65:be:6c:68:56:4a:
93:91:f9:3f:59:1a:a9:e0:2c:22:2b:f7:2a:b0:6a:
c6:a5:9e:fb:0a:29:f5:cf:0a:6b:94:96:11:37:f4:
54:b1:52:c6:79:02:92:26:5e:bd:36:ff:91:d1:00:
0a:cc:32:0d:9d:59:94:a1:a2:42:50:46:6c:1f:7f:
c1:2c:3d:c8:b2:35:1f:73:ca:2a:39:a8:2e:dd:42:
dc:2d:69:16:d8:76:06:09:d2:39:84:82:d0:2f:05:
e8:25:cf:4e:d9:be:a1:53:1b:30:69:c8:61:bc:f8:
85:2b:7e:7e:09:ca:fb:d2:e6:4a:f7:ff:48:21:4c:
ce:b5:64:7a:c1:2e:a8:87:b2:d3:c4:c2:32:02:89:
c2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6E:0C:BC:3A:3B:49:09:75:6C:DB:81:92:4B:CC:6D:F8:C4:8B:75
X509v3 Authority Key Identifier:
keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:bb:90:17:5d:2a:bc:5a:13:9a:b0:ea:bc:8d:3f:e0:57:35:
98:ab:b0:83:04:b9:57:56:3b:7f:b5:92:4f:7c:6d:1c:88:34:
26:3a:45:e0:7f:f9:87:9c:cf:1c:2c:48:31:a4:21:92:bd:4d:
90:13:1d:8a:51:b2:e2:2f:18:3c:af:42:bf:44:6d:57:db:4a:
5b:41:2d:67:ba:64:10:aa:62:af:e1:a3:df:c8:f8:35:af:67:
dc:b8:06:ea:c6:2b:c1:b2:30:a7:94:b7:7d:65:f7:00:6e:44:
f0:1f:47:56:a0:eb:d8:a7:24:de:1b:eb:13:9c:7d:2f:5f:c8:
07:58:fb:44:96:1d:30:bb:fa:49:e3:9a:1f:12:4d:91:3c:df:
4b:39:11:b9:1c:92:d9:51:ee:d8:51:37:20:d2:32:09:55:e1:
d2:2d:fe:24:ce:39:ff:05:7c:a2:7a:c2:60:eb:e9:1d:0a:e4:
0e:dc:e1:c6:5a:de:d1:0a:d8:bb:55:d1:4e:7f:aa:cb:53:6b:
98:84:2c:92:38:96:ae:01:96:f8:72:ec:67:15:6a:2a:35:99:
7d:1e:3b:43:33:64:37:a5:28:0c:e3:7c:41:ec:ef:dc:13:51:
fb:9b:5b:a5:39:d8:39:e1:e0:ce:35:2c:34:f6:b9:61:af:02:
e5:a9:ef:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:02:31 2026 by rpki-client