
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
File: YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft (raw, json)
Hash identifier: XYNiw8lp2OQ6ZsiEwmG8DdIjp9qn2hh6NK2aUtfaSIo=
Subject key identifier: 65:EB:C1:00:03:2A:AC:13:06:C2:38:57:A4:DA:DA:D8:4C:C8:CF:6E
Authority key identifier: 60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5
Certificate issuer: /CN=A917799C/serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5
Certificate serial: F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
Manifest number: EC
Signing time: Mon 21 Sep 2026 06:26:00 +0000
Manifest this update: Mon 21 Sep 2026 06:25:59 +0000
Manifest next update: Mon 28 Sep 2026 06:25:59 +0000
Files and hashes: 1: YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl (hash: LyaeUzBM52aioIJT0kZKGinO0+ClfH0wePjc4HV7a6Y=)
2: 05939A1C554611F09F737331C4F9AE02.roa (hash: gUXNFVaxSQufYdqyGN4kaVGgCYgVtungC4DrMnEIpG0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl
rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:25:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917799C, serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5
Validity
Not Before: Sep 21 06:25:59 2026 GMT
Not After : Sep 28 06:25:59 2026 GMT
Subject: CN=6ab0cdf7-615e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f6:68:cd:4b:2d:ed:0d:cb:15:35:a3:da:02:
62:fa:7e:15:f3:31:bb:1b:87:be:b0:f3:e5:92:4a:
35:df:de:89:03:38:ab:99:79:d5:bd:29:04:a9:3c:
38:35:92:de:f9:d6:01:0a:05:a7:be:0b:12:b0:cf:
c7:36:7b:fd:e1:13:54:3e:2d:0c:18:c4:1c:5a:38:
aa:ed:b5:07:43:f7:7b:01:99:67:3e:fd:ff:b8:5c:
e8:bb:0d:d3:83:69:e1:fe:0f:0b:76:7d:d7:76:b3:
46:22:59:36:70:5a:25:91:4f:5a:88:cc:8b:d5:d0:
c2:e1:ca:52:4b:49:18:ba:ee:f4:5a:85:fa:40:23:
0d:c0:18:16:aa:79:7b:d4:40:4e:fb:ce:a8:50:03:
be:98:b9:b7:1b:81:83:d5:2e:61:59:68:72:6b:14:
c2:a0:20:27:cf:5c:14:0a:b5:73:4d:df:1a:81:d6:
33:e5:2a:06:8c:84:c2:0b:53:27:ff:de:8f:05:db:
d2:ad:9e:74:e8:c8:97:c5:00:5f:de:e9:24:b3:d4:
68:b2:e5:98:a6:fa:08:21:ba:57:85:a6:ad:60:5e:
b5:0b:5a:f8:78:96:3d:18:af:87:04:59:d3:36:ae:
9c:b7:6f:ed:43:dc:dc:3e:3d:7d:ef:f3:30:74:0a:
ce:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EB:C1:00:03:2A:AC:13:06:C2:38:57:A4:DA:DA:D8:4C:C8:CF:6E
X509v3 Authority Key Identifier:
keyid:60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ca:6b:63:58:80:d0:11:c9:9c:00:0f:ee:92:1b:eb:7c:0e:
99:ae:23:e6:42:0c:e2:ce:5c:1d:0e:dd:a1:da:f4:71:f2:98:
36:88:4a:57:a0:d5:7a:d9:15:2d:53:64:ce:4c:96:25:74:37:
01:ba:ba:62:59:87:bd:51:66:70:11:e7:a2:9d:08:cb:e7:bd:
d6:71:4f:0e:80:d2:a1:83:be:17:c5:a2:4a:65:a8:0e:37:32:
82:41:b5:7d:7f:01:d3:77:1e:75:bf:05:97:18:28:22:a9:c2:
7d:f7:2b:60:f0:63:90:3a:eb:7c:95:35:17:3a:17:be:a3:95:
86:78:c2:7c:eb:e7:f7:fb:1f:07:55:49:29:02:3d:4e:83:dd:
a4:23:b7:98:77:ff:98:99:6c:1c:7f:5e:a4:71:fb:71:f3:c7:
8e:c5:fe:ec:48:60:b5:52:87:f0:94:43:fa:df:e6:e0:37:c0:
22:ad:88:be:bf:ad:d3:41:52:15:64:4b:ba:bd:10:2c:98:78:
97:b0:f9:66:09:e5:2d:6f:ba:fd:ad:d6:58:40:60:f3:3a:7c:
01:37:99:7e:e8:20:2b:36:95:72:73:ff:78:d2:8d:a1:d3:f7:
9d:09:58:6c:02:42:2e:90:34:26:71:d5:cd:5f:c0:84:cf:1e:
84:d7:17:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:34:08 2026 by rpki-client