
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
File: YWPctdU7SHLhWVY-kPxeQa0ALC0.mft (raw, json)
Hash identifier: BFPZ77DlQ7+vyiuW2Z7+xgJMZBH5LLRBj30vbvLiiRw=
Subject key identifier: 39:A7:14:0E:19:70:0D:5E:97:4C:56:99:D5:57:57:95:7F:2A:2D:2A
Authority key identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D
Certificate issuer: /CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
Certificate serial: 055D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
Manifest number: 0551
Signing time: Wed 29 Jul 2026 00:05:53 +0000
Manifest this update: Wed 29 Jul 2026 00:05:52 +0000
Manifest next update: Wed 05 Aug 2026 00:05:52 +0000
Files and hashes: 1: YWPctdU7SHLhWVY-kPxeQa0ALC0.crl (hash: miizPSr9mzjJIf1CWdCSqWXs4kI+AATixHShlw/Cyss=)
2: BDE72518479C11EC8861323FC4F9AE02.roa (hash: voztcrzhiVsnEEDAL+kh/aaIgcYKoM5wE79GPvMJ4lw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl
rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 00:05:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1373 (0x55d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174282, serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
Validity
Not Before: Jul 29 00:05:52 2026 GMT
Not After : Aug 5 00:05:52 2026 GMT
Subject: CN=6a6943e1-31e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:5e:8b:25:eb:29:dc:79:cd:ac:90:6e:90:
d4:9f:aa:9a:66:cd:ae:c0:a3:a1:b2:a6:0c:4c:35:
a4:e3:10:c4:7c:b7:b7:88:e8:a3:fc:d2:c8:00:68:
a3:e8:dd:27:d5:0e:29:1b:48:96:a2:8b:ee:03:73:
1a:df:43:b2:f2:8d:1f:2f:ba:13:eb:22:89:1d:0e:
f3:d5:06:a9:91:c1:d0:44:02:18:e1:9a:49:c3:c7:
d9:1b:27:65:f5:53:d6:57:29:0f:06:8e:61:5f:da:
97:6b:92:30:0f:ea:bc:56:5f:fd:cf:3d:92:7c:a6:
1e:fc:9e:48:38:87:7e:e5:ea:af:7e:72:eb:3a:53:
57:5e:08:96:22:de:41:7b:e1:ec:9b:4a:a6:d0:6e:
a9:82:89:68:ec:52:0e:52:94:28:84:73:04:98:ed:
15:2c:52:ea:9a:60:c4:aa:bd:32:72:57:0a:72:5f:
ad:2b:b7:df:00:2f:90:b1:32:bb:d7:74:7b:b7:79:
4f:dd:16:51:19:bf:07:10:17:0a:b0:31:4a:e1:6d:
8a:b0:4a:68:d2:35:b1:31:bb:de:db:4d:07:dd:5d:
4d:72:13:57:81:f2:b8:61:5b:81:24:8f:21:ac:ba:
9c:be:26:3b:5a:90:18:1c:26:0d:5b:97:90:32:cd:
7d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A7:14:0E:19:70:0D:5E:97:4C:56:99:D5:57:57:95:7F:2A:2D:2A
X509v3 Authority Key Identifier:
keyid:61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:8b:4b:4c:22:1a:bb:f7:b6:0a:46:99:b8:73:56:0b:b0:34:
8c:ff:fa:f9:74:5f:cd:b1:5a:e8:38:34:77:e6:1a:91:39:50:
46:3d:87:76:bc:56:2a:02:4b:be:92:ec:43:7b:8c:ad:26:22:
3f:e6:c3:7c:08:9c:4b:dd:0f:0c:64:1b:cc:d1:a7:de:50:ca:
73:ff:ba:54:85:4d:ec:77:d0:42:37:0a:ec:90:77:2a:21:18:
54:e8:7d:84:25:ce:07:d8:8d:cd:2b:30:ae:c5:de:41:8f:d2:
39:a5:42:88:2b:ca:35:3b:e6:38:87:b0:d3:bf:f3:50:96:e0:
a0:cd:cd:3a:c8:18:ff:84:d4:18:6e:83:b4:12:6e:c9:aa:45:
2b:8e:be:40:12:37:1b:03:46:3c:5d:d6:56:ea:88:05:16:4f:
3e:e5:48:a5:08:f9:c1:97:d5:5d:4b:6f:99:72:d5:7c:96:bd:
7e:90:d1:46:34:d2:06:b1:93:88:47:21:97:3a:ec:7b:7c:46:
90:79:49:2c:9d:a1:dc:99:c1:d3:3d:f2:e7:73:1b:d4:8f:20:
b4:2a:6c:5e:e9:7b:d7:8f:da:b7:51:31:73:6a:4a:04:38:8d:
18:4d:86:42:bc:46:4a:2d:c7:98:c8:c7:88:ad:60:73:59:e3:
b0:ba:5d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:09:11 2026 by rpki-client