
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft
File: yT-PYPBn4kwb_PI7LPQivVhkvss.mft (raw, json)
Hash identifier: ipIuyW4WG8+xRErHgK/e+ch68weU1pRURKOfcmgchcE=
Subject key identifier: A9:BC:CD:01:C2:9A:D0:D8:55:C8:A1:D8:40:71:83:84:32:89:9C:62
Authority key identifier: C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB
Certificate issuer: /CN=A915E4A4/serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft
Manifest number: B0
Signing time: Mon 27 Jul 2026 09:15:20 +0000
Manifest this update: Mon 27 Jul 2026 09:15:20 +0000
Manifest next update: Mon 03 Aug 2026 09:15:20 +0000
Files and hashes: 1: yT-PYPBn4kwb_PI7LPQivVhkvss.crl (hash: Xoqwv1uETKRYNNLjHs/vfvdeHlJTVoHjytkRzalmg8w=)
2: 7452F54C7D7D11F09C982A7CC4F9AE02.roa (hash: JrWQTIVZFI8a0pln7P+m0meftjgxZRSu/Rs2hLgG4ZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl
rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E4A4, serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB
Validity
Not Before: Jul 27 09:15:20 2026 GMT
Not After : Aug 3 09:15:20 2026 GMT
Subject: CN=6a6721a8-9a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:84:7c:ec:49:91:0a:4d:89:b5:06:96:6a:e4:
91:a2:59:b8:df:39:a2:c3:50:d0:3f:68:5b:3a:49:
af:9a:b8:e4:00:d6:1a:49:6b:67:fb:4b:af:ed:36:
bb:ee:8f:fd:fb:d1:0c:38:2e:3a:01:09:58:71:cb:
cb:12:9b:36:d8:4d:92:8e:22:25:c9:58:1c:38:a7:
61:eb:5c:bd:d1:48:73:b5:4c:8e:33:e2:e0:2e:1a:
92:4d:d8:10:a4:66:28:7f:67:f5:3a:85:4b:9e:ee:
2e:d2:c0:63:3e:ed:9b:15:58:62:fe:10:5f:69:df:
32:49:a1:44:7d:6a:62:f0:31:5d:28:01:0c:00:e2:
63:ba:37:8e:64:0b:ee:89:f5:a6:db:5d:28:e7:8e:
24:5d:54:c4:65:52:57:01:a0:05:f0:4d:ec:a3:6f:
f1:4f:51:aa:6c:d3:37:5d:8a:71:4a:ec:46:9f:bd:
7f:1a:bd:8c:71:a2:7a:c7:7f:ac:e6:f4:e6:c2:34:
3b:e2:c2:3c:21:55:6e:e6:84:47:f1:aa:f0:13:3d:
d8:97:db:13:a8:a0:2c:a7:62:ba:f8:b9:51:26:54:
ce:b5:8f:ca:7b:e4:60:83:c8:f9:41:55:63:16:38:
b8:14:ac:ec:76:0b:ae:06:3d:66:ee:a2:fd:98:34:
20:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BC:CD:01:C2:9A:D0:D8:55:C8:A1:D8:40:71:83:84:32:89:9C:62
X509v3 Authority Key Identifier:
keyid:C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:cc:3d:f9:4b:8c:dd:8a:d2:4c:f0:2f:b5:0c:07:55:00:94:
80:d2:53:29:90:06:1a:38:22:52:c9:88:49:fe:e4:5b:1b:df:
ee:fe:7a:64:85:6e:50:a9:bc:e9:6b:49:fc:32:55:ec:e3:e1:
db:19:e7:42:57:88:7c:03:61:5f:00:84:56:89:cc:4c:13:d7:
02:f1:de:f4:2f:79:d3:62:6f:77:9c:9a:b0:d5:56:83:4c:e4:
72:ee:04:8c:db:29:de:ec:31:5f:76:07:27:8a:f9:fc:b9:7e:
c2:41:f0:ba:9c:66:26:0a:81:5c:16:e0:eb:51:aa:b1:10:25:
8d:77:a7:05:6b:09:d3:71:71:d7:b2:e1:31:65:40:d0:eb:c0:
f3:9e:fa:b7:8a:30:b4:60:b7:34:41:7d:f6:4d:0c:c3:00:bb:
5f:35:56:22:2f:b2:c2:13:2e:52:a3:85:04:b2:75:34:b3:24:
6a:f6:6c:c5:28:d3:9a:ca:5b:53:f3:e3:66:e2:8d:e0:c7:74:
3f:3b:33:01:5a:9c:42:5b:e2:9f:30:7c:07:21:63:1d:11:20:
a5:97:a0:3a:7d:e4:a1:bd:2c:9f:4c:a0:f0:c0:b9:7e:a6:25:
af:7a:f0:2f:62:58:80:b8:08:00:3f:5a:ad:9b:0a:3d:2a:1b:
97:2d:46:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUU0QTQxMTAvBgNVBAUTKEM5M0Y4RjYwRjA2N0UyNEMxQkZDRjIzQjJDRjQyMkJE
NTg2NEJFQ0IwHhcNMjYwNzI3MDkxNTIwWhcNMjYwODAzMDkxNTIwWjAYMRYwFAYD
VQQDEw02YTY3MjFhOC05YTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAh4R87EmRCk2JtQaWauSRolm43zmiw1DQP2hbOkmvmrjkANYaSWtn+0uv7Ta7
7o/9+9EMOC46AQlYccvLEps22E2SjiIlyVgcOKdh61y90UhztUyOM+LgLhqSTdgQ
pGYof2f1OoVLnu4u0sBjPu2bFVhi/hBfad8ySaFEfWpi8DFdKAEMAOJjujeOZAvu
ifWm210o544kXVTEZVJXAaAF8E3so2/xT1GqbNM3XYpxSuxGn71/Gr2McaJ6x3+s
5vTmwjQ74sI8IVVu5oRH8arwEz3Yl9sTqKAsp2K6+LlRJlTOtY/Ke+Rgg8j5QVVj
Fji4FKzsdguuBj1m7qL9mDQg9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKm8zQHC
mtDYVcih2EBxg4QyiZxiMB8GA1UdIwQYMBaAFMk/j2DwZ+JMG/zyOyz0Ir1YZL7L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTRBNC9FQUIxN0JGNjdE
N0MxMUYwOTZFNTk1NzlDNEY5QUUwMi95VC1QWVBCbjRrd2JfUEk3TFBRaXZWaGt2
c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lULVBZUEJuNGt3Yl9QSTdMUFFpdlZoa3Zzcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTRBNC9FQUIxN0JGNjdEN0MxMUYwOTZFNTk1NzlDNEY5QUUwMi95VC1QWVBCbjRr
d2JfUEk3TFBRaXZWaGt2c3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv8w9+UuM3YrSTPAvtQwHVQCUgNJTKZAGGjgiUsmISf7kWxvf7v56ZIVuUKm8
6WtJ/DJV7OPh2xnnQleIfANhXwCEVonMTBPXAvHe9C9502Jvd5yasNVWg0zkcu4E
jNsp3uwxX3YHJ4r5/Ll+wkHwupxmJgqBXBbg61GqsRAljXenBWsJ03Fx17LhMWVA
0OvA8576t4owtGC3NEF99k0MwwC7XzVWIi+ywhMuUqOFBLJ1NLMkavZsxSjTmspb
U/PjZuKN4Md0PzszAVqcQlvinzB8ByFjHREgpZegOn3kob0sn0yg8MC5fqYlr3rw
L2JYgLgIAD9arZsKPSobly1GOg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:40 2026 by rpki-client