
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
File: Yja2yVcFRCapTOamlDI45v5tH1Y.mft (raw, json)
Hash identifier: +h2XNu1PDWnGO1gGhoTh8FwxXKnla1yVHnaGeTbsBVY=
Subject key identifier: 68:73:45:1C:8A:D3:2B:11:3E:62:31:52:48:2D:0E:B0:7B:06:4D:7E
Authority key identifier: 62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56
Certificate issuer: /CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56
Certificate serial: 04B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
Manifest number: 04A9
Signing time: Mon 27 Jul 2026 00:56:07 +0000
Manifest this update: Mon 27 Jul 2026 00:56:06 +0000
Manifest next update: Mon 03 Aug 2026 00:56:06 +0000
Files and hashes: 1: Yja2yVcFRCapTOamlDI45v5tH1Y.crl (hash: xdhwcdg2MJDh8RNV5qU16B9jxn65cdbIR9+iDWi8i+4=)
2: 8B626F5487C911EC908CE327C4F9AE02.roa (hash: UJpA5zEw7YjHmI7sbnVaspAGcZB71kOVdtEMUuEsETo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl
rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1200 (0x4b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D655, serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56
Validity
Not Before: Jul 27 00:56:06 2026 GMT
Not After : Aug 3 00:56:06 2026 GMT
Subject: CN=6a66aca7-477e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:51:d1:83:c3:d4:ef:16:6e:06:ef:bd:ad:46:
20:bb:3a:ca:bd:6e:77:19:db:b7:1e:79:79:0c:11:
fa:9f:56:c1:7b:1b:55:55:26:a9:b1:53:ba:dc:07:
e7:fd:88:56:77:ca:ea:b8:bd:7b:73:46:e8:88:d6:
6f:24:e5:a8:f1:5e:85:9b:22:29:cd:c6:1d:ae:e7:
27:17:77:ea:ee:a3:b5:c6:d9:f7:64:79:68:57:bf:
52:c8:bc:95:cd:2c:73:f1:cd:b5:98:40:4c:f7:b0:
29:57:93:07:55:81:d4:5f:cc:be:3c:2d:49:ff:31:
77:f3:31:f0:42:05:84:2c:d9:0f:4b:e4:59:83:bd:
bf:e8:3d:e0:1c:20:62:26:f0:db:4d:48:3a:06:d8:
87:ba:8d:8e:78:29:08:d9:ec:02:11:86:21:53:ae:
b0:dd:aa:85:d1:e4:85:dc:1e:79:c6:17:23:60:ae:
3e:99:b7:18:d5:6f:48:6c:14:5e:7a:72:b7:8c:61:
f4:f2:ba:1a:07:54:f0:a5:2c:02:2c:00:f8:5a:46:
f8:2a:61:80:1a:a6:aa:f9:46:8f:69:b5:1f:c1:11:
7a:27:1b:70:22:0d:d4:9b:6c:b0:0c:af:9d:8b:68:
bc:cc:c4:68:0a:a9:1c:0d:d1:61:87:e3:b6:dd:8a:
4d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:73:45:1C:8A:D3:2B:11:3E:62:31:52:48:2D:0E:B0:7B:06:4D:7E
X509v3 Authority Key Identifier:
keyid:62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:78:07:52:e0:30:62:c4:b5:cb:e5:47:10:c2:4d:97:d5:9b:
8b:86:05:49:e1:3d:c4:88:e4:ca:be:60:dd:e8:eb:1d:64:b5:
a2:a4:ff:ba:fa:71:d6:3d:09:cf:6d:c3:9d:14:3d:59:d9:5b:
95:3e:a0:67:93:86:92:d3:9c:25:df:e1:5d:d6:a6:f7:b8:92:
85:32:6b:d9:2d:b0:d9:51:3c:61:8f:8c:1d:5c:ab:74:3d:2b:
ca:fe:9e:8b:f4:e6:7c:89:6a:fb:0f:c0:49:00:85:6e:07:58:
f6:2f:fb:34:de:64:2c:d2:46:59:54:30:9a:28:67:96:1e:82:
c9:c4:21:3e:c9:d1:63:24:f4:67:42:8e:06:c6:b4:9f:2e:30:
e0:f7:7e:be:0f:ee:dc:b0:20:fa:62:45:b0:8d:a5:4e:e8:df:
c4:1d:6f:60:aa:74:38:6d:e3:ed:62:21:f4:0c:59:5b:05:47:
40:f1:06:7a:a1:f7:e3:f0:8d:5b:c8:dc:10:12:e9:d9:3c:81:
4b:f9:82:56:22:0d:a9:a2:4f:a5:5e:e2:ef:8d:6d:3d:4b:0b:
6c:24:64:d4:c2:2e:d4:ab:bd:51:0d:62:57:54:81:9b:7a:8d:
30:1d:2e:9f:41:32:ca:18:58:8f:8b:5d:1b:77:6a:59:27:a6:
fe:6b:14:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:53:25 2026 by rpki-client