
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft
File: YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft (raw, json)
Hash identifier: M7VIZCehs/lRXagkMJzkvv90sZ1iD2eObMHpEYoQqcM=
Subject key identifier: AA:80:1F:AF:73:D0:E9:FA:FA:65:53:31:15:0B:B2:20:EC:43:E7:51
Authority key identifier: 61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A
Certificate issuer: /CN=A9171D16/serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A
Certificate serial: 01DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft
Manifest number: 01DD
Signing time: Mon 27 Jul 2026 05:08:08 +0000
Manifest this update: Mon 27 Jul 2026 05:08:07 +0000
Manifest next update: Mon 03 Aug 2026 05:08:07 +0000
Files and hashes: 1: YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl (hash: rT8GW7pHWd9kIQnVRzpsWWvCanOHcZ9a8Fv1MMjYHmY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl
rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477 (0x1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171D16, serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A
Validity
Not Before: Jul 27 05:08:07 2026 GMT
Not After : Aug 3 05:08:07 2026 GMT
Subject: CN=6a66e7b8-d07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d4:0a:3c:be:3a:8d:99:b7:d8:72:19:9f:7a:
31:34:14:87:73:26:81:0c:63:42:dd:4e:de:1a:d8:
02:50:75:66:6a:e3:b8:b3:83:46:e2:76:a7:27:30:
36:e4:d3:18:ac:d3:fa:90:31:4e:6a:3c:0b:42:c9:
bf:21:3e:24:94:71:dd:bb:a9:b4:a3:94:53:08:9e:
3a:06:08:46:c8:61:90:28:10:15:12:df:fe:32:21:
f3:0d:bc:1a:8e:f7:47:e8:e2:d4:1d:ec:df:fe:48:
8b:8e:76:ae:47:b8:ba:b0:54:41:43:ae:98:2f:dc:
a8:f1:06:81:cf:ca:e5:e8:9d:8b:26:0a:00:96:97:
1c:e8:ba:25:88:c5:57:37:d5:5e:f4:8f:1b:3e:95:
f9:0a:fe:3d:a7:e9:89:07:5a:1b:f4:4f:3c:f3:cd:
62:d6:92:10:5e:da:b0:79:ff:19:e5:0a:23:39:1d:
35:84:fa:58:eb:99:69:c2:d4:dc:f8:b1:66:c5:9b:
20:6d:28:5f:b0:3d:b6:1d:a8:74:8c:ce:0c:e4:63:
50:84:1f:ab:97:bc:f9:64:2a:2e:48:05:a3:91:5c:
d9:b8:1a:2b:e1:bf:b6:06:2b:34:c7:bd:52:a4:0c:
78:52:ee:d0:19:c9:04:2e:96:c9:96:c6:77:35:17:
ea:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:80:1F:AF:73:D0:E9:FA:FA:65:53:31:15:0B:B2:20:EC:43:E7:51
X509v3 Authority Key Identifier:
keyid:61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:56:9b:15:18:c2:ca:21:96:52:03:bf:ca:24:17:88:74:a1:
45:38:dc:b1:cf:d5:bd:35:76:25:8b:af:44:49:c9:3b:3c:2e:
7c:a4:b7:56:8a:f8:98:35:e0:e4:04:71:b8:c9:c0:85:2b:8e:
bc:b2:b1:1e:59:2c:16:85:87:45:f9:cc:7e:44:44:a0:44:bf:
0a:2d:70:4e:43:ce:28:10:14:e1:a0:b4:64:80:b4:49:e6:bf:
b0:24:36:fa:11:d1:ac:a0:45:86:7c:9e:2e:e3:11:a8:f8:65:
4a:62:cf:bb:de:7f:a2:5f:b3:08:1d:90:c2:3f:2b:f8:d8:89:
7f:d7:95:4b:b6:c2:8c:b8:42:a0:13:f3:fa:db:ad:53:3d:88:
4a:89:f2:0e:c4:70:3f:c5:c3:80:14:82:9f:c3:15:bf:ca:9a:
b1:b5:02:0d:93:10:79:0e:30:21:70:8f:76:13:1a:8f:b7:f6:
70:50:7d:09:05:0f:1a:38:1c:ff:d3:6a:78:bc:78:f3:23:55:
84:1a:e6:06:85:b7:fd:2c:fb:9a:aa:8d:8b:29:74:35:4b:af:
64:4a:85:0e:fe:b9:c1:43:b9:03:38:25:e5:37:cf:b9:72:ef:
02:86:7d:be:c8:1d:40:3c:62:45:ce:aa:37:2b:b9:18:2c:6e:
f0:7c:37:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:59 2026 by rpki-client