
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
File: YsQYLAA-_Po43a9O-QT7BP5bVko.mft (raw, json)
Hash identifier: P1XJ6FMjhfaX3JvM55EVo8lFdol2NKF2aHlFuVtx3GY=
Subject key identifier: D6:3C:35:D3:D2:31:4F:28:43:05:2D:8E:EB:43:29:08:C0:5D:DE:92
Authority key identifier: 62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A
Certificate issuer: /CN=A917CE22/serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A
Certificate serial: 088F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
Manifest number: 0864
Signing time: Tue 28 Jul 2026 21:22:21 +0000
Manifest this update: Tue 28 Jul 2026 21:22:21 +0000
Manifest next update: Tue 04 Aug 2026 21:22:21 +0000
Files and hashes: 1: YsQYLAA-_Po43a9O-QT7BP5bVko.crl (hash: rHoPbhqIff9zGBqqK3VQbMQd7DK5NYJ21wMzHqfHkRc=)
2: CDA6F2D0111611EFAD808A81C4F9AE02.roa (hash: mOiKBb1fBKJiEZ/Q4F6SgNQ8FYEX0pSib9+RjzLS4+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl
rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2191 (0x88f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CE22, serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A
Validity
Not Before: Jul 28 21:22:21 2026 GMT
Not After : Aug 4 21:22:21 2026 GMT
Subject: CN=6a691d8d-4d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b9:8e:7a:72:fe:15:15:9f:0d:df:26:f3:1b:
a4:98:74:c3:1b:d0:b8:29:7e:34:63:fd:08:fb:7a:
c4:dc:99:8e:89:f1:7a:33:9c:ee:37:c1:4b:02:ec:
66:b7:3e:5c:d7:bd:48:1a:22:0c:36:9e:1d:e8:14:
1c:e5:d6:84:61:3d:a4:58:b3:eb:75:c5:fa:ba:f8:
32:12:36:87:1d:d2:b0:2c:b0:ee:95:5c:ee:8a:2e:
39:76:87:b7:a3:99:92:ae:c1:f7:2f:fb:65:ab:5a:
d1:70:b9:d0:62:d6:98:6a:6d:0f:5c:3b:da:df:2b:
19:80:cc:52:13:76:a4:dd:5d:1d:4a:21:e3:9a:e6:
5d:3f:99:b6:63:85:82:e4:6a:88:6a:f0:99:2b:1d:
cb:1d:13:71:06:fb:5f:4b:fd:72:c5:3a:12:64:dc:
44:81:b1:64:d9:87:ea:20:ec:13:85:80:39:c3:1d:
ce:2a:60:5d:53:ff:6c:1b:c6:90:97:c6:79:09:9b:
3b:fa:36:de:77:cb:e8:90:df:bf:43:9f:11:d3:1a:
90:3b:34:58:61:25:c2:73:da:ea:5a:e7:4e:56:16:
c2:d4:31:18:52:73:fb:7a:9f:50:ca:98:9e:5b:2c:
13:c5:ed:1b:42:24:a0:d3:2f:49:ce:75:b5:10:fc:
14:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3C:35:D3:D2:31:4F:28:43:05:2D:8E:EB:43:29:08:C0:5D:DE:92
X509v3 Authority Key Identifier:
keyid:62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:8a:4d:6e:82:1a:a5:a0:85:0c:cb:25:39:ff:c1:e6:6b:f8:
69:eb:3e:06:45:cc:8a:40:9e:b0:07:6b:75:05:c7:6b:c3:44:
4c:b4:b0:b0:52:70:c0:43:c2:07:da:7b:8e:92:3d:39:e0:f9:
1f:ad:8e:d9:9b:b9:c1:24:b4:19:57:97:03:b1:ba:63:24:2f:
ac:41:1c:70:54:c6:11:88:e6:da:a5:1c:4c:a9:96:8d:ad:97:
c5:7a:b4:36:c9:43:a0:5f:92:84:2b:26:c2:05:3c:90:62:e1:
12:42:a0:2f:65:26:5c:5b:39:02:ff:27:31:13:ba:e1:d0:14:
51:85:0d:57:f1:e3:0c:31:17:7f:91:fc:d6:37:b9:f5:87:33:
b8:ed:f1:cc:a2:c8:70:a2:48:6e:f7:ca:0d:9b:c7:d5:70:98:
d8:43:47:27:e1:af:16:81:50:e0:8b:c5:6b:c5:77:8c:4c:14:
20:da:65:7b:62:05:15:a4:22:ff:f0:70:54:15:9e:90:34:f2:
64:7d:da:75:42:1f:45:e0:48:80:01:4e:a0:e1:33:45:46:3d:
30:fb:ae:eb:13:81:93:70:5b:57:6e:9e:65:3e:46:0d:b1:72:
9b:d8:44:5d:d4:56:b8:6e:06:9f:ae:a7:57:de:8d:97:a3:9f:
9c:51:fa:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0NFMjIxMTAvBgNVBAUTKDYyQzQxODJDMDAzRUZDRkEzOEREQUY0RUY5MDRGQjA0
RkU1QjU2NEEwHhcNMjYwNzI4MjEyMjIxWhcNMjYwODA0MjEyMjIxWjAYMRYwFAYD
VQQDEw02YTY5MWQ4ZC00ZDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqrmOenL+FRWfDd8m8xukmHTDG9C4KX40Y/0I+3rE3JmOifF6M5zuN8FLAuxm
tz5c171IGiIMNp4d6BQc5daEYT2kWLPrdcX6uvgyEjaHHdKwLLDulVzuii45doe3
o5mSrsH3L/tlq1rRcLnQYtaYam0PXDva3ysZgMxSE3ak3V0dSiHjmuZdP5m2Y4WC
5GqIavCZKx3LHRNxBvtfS/1yxToSZNxEgbFk2YfqIOwThYA5wx3OKmBdU/9sG8aQ
l8Z5CZs7+jbed8vokN+/Q58R0xqQOzRYYSXCc9rqWudOVhbC1DEYUnP7ep9Qypie
WywTxe0bQiSg0y9JznW1EPwUGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNY8NdPS
MU8oQwUtjutDKQjAXd6SMB8GA1UdIwQYMBaAFGLEGCwAPvz6ON2vTvkE+wT+W1ZK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0UyMi8xMkZBODExQTE3
N0IxMUVCODQ2MzRDMzZDNEY5QUUwMi9Zc1FZTEFBLV9QbzQzYTlPLVFUN0JQNWJW
a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lzUVlMQUEtX1BvNDNhOU8tUVQ3QlA1YlZrby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Q0UyMi8xMkZBODExQTE3N0IxMUVCODQ2MzRDMzZDNEY5QUUwMi9Zc1FZTEFBLV9Q
bzQzYTlPLVFUN0JQNWJWa28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArYpNboIapaCFDMslOf/B5mv4aes+BkXMikCesAdrdQXHa8NETLSwsFJwwEPC
B9p7jpI9OeD5H62O2Zu5wSS0GVeXA7G6YyQvrEEccFTGEYjm2qUcTKmWja2XxXq0
NslDoF+ShCsmwgU8kGLhEkKgL2UmXFs5Av8nMRO64dAUUYUNV/HjDDEXf5H81je5
9YczuO3xzKLIcKJIbvfKDZvH1XCY2ENHJ+GvFoFQ4IvFa8V3jEwUINple2IFFaQi
//BwVBWekDTyZH3adUIfReBIgAFOoOEzRUY9MPuu6xOBk3BbV26eZT5GDbFym9hE
XdRWuG4Gn66nV96Nl6OfnFH6dA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:32:52 2026 by rpki-client