
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
File: yCt7N51v7So8MMRTfg-HzLYIIus.mft (raw, json)
Hash identifier: ZRMFQGR4ftAyCikJYT6zLQ9XQqFL3fquUdaFkdZQcj0=
Subject key identifier: A7:D5:1A:7C:1F:1A:6B:8E:F1:DB:83:9B:49:B2:41:47:BF:A8:47:3D
Authority key identifier: C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB
Certificate issuer: /CN=A917EB96/serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB
Certificate serial: 0232
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
Manifest number: 0228
Signing time: Sat 13 Jun 2026 02:43:39 +0000
Manifest this update: Sat 13 Jun 2026 02:43:38 +0000
Manifest next update: Sat 20 Jun 2026 02:43:38 +0000
Files and hashes: 1: yCt7N51v7So8MMRTfg-HzLYIIus.crl (hash: DKcVxsmEwqCSVa+v8dV13mR/Hd/RMHdIX1xYoSfVKwY=)
2: 348BAEE41C2D11EEB362491FC4F9AE02.roa (hash: yocmNFy5AmrqEw3U7DjRD1ZXBRbgklEi4nFkGSGg5fE=)
3: B50ECD32A57E11EEB4533738C4F9AE02.roa (hash: Z9dMHKPPJ4AwtBBzPO0B7QfeY06QQPe693ePWyaMLDg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl
rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562 (0x232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EB96, serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB
Validity
Not Before: Jun 13 02:43:38 2026 GMT
Not After : Jun 20 02:43:38 2026 GMT
Subject: CN=6a2cc3db-0ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:7e:68:2e:b8:17:c1:9a:e9:b0:f9:5f:e5:
54:c7:6c:54:87:ab:ba:62:56:c9:ee:6e:38:45:ed:
c5:1d:0e:e5:d9:d6:9b:63:a8:3b:3f:c3:01:7e:0e:
c2:ac:de:7b:ab:f0:09:66:29:90:39:f1:b5:c1:b6:
ff:37:e9:bf:57:10:60:9f:19:f3:7f:1d:7a:d5:3e:
f3:4d:5e:97:7a:c8:a0:8a:34:6d:52:41:6b:20:32:
d0:a0:1a:15:9f:f3:31:7c:51:85:d4:a8:02:10:39:
2a:d9:45:1e:9a:e5:9a:e2:78:61:b9:ad:4d:dc:70:
9e:51:ac:e8:8f:39:70:89:6e:34:9b:9f:01:2d:27:
09:80:ba:e5:83:85:60:e6:00:4d:8a:e7:79:1d:9f:
39:be:8f:72:08:64:f8:44:eb:b3:ae:a6:13:09:d5:
45:86:bd:7c:bb:cd:50:bb:7f:c6:3f:75:2e:94:0f:
6b:77:f4:3e:6c:c6:1e:17:ac:c1:5c:01:0d:95:59:
d0:e2:e2:cd:41:ea:2c:28:65:23:d0:65:85:9c:0f:
65:59:34:2a:a6:40:ae:45:de:78:05:d9:96:fa:92:
bc:3c:05:01:83:04:f8:1c:4d:d8:ae:8a:b4:0c:fe:
68:3a:8f:79:73:22:fd:70:64:53:f3:0a:00:1d:ff:
09:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D5:1A:7C:1F:1A:6B:8E:F1:DB:83:9B:49:B2:41:47:BF:A8:47:3D
X509v3 Authority Key Identifier:
keyid:C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:20:a9:7c:aa:20:0e:2c:66:dc:54:69:2d:c0:ca:af:90:f7:
9a:73:a6:62:45:7b:59:92:ee:d5:1d:45:d8:aa:60:e3:3c:58:
1e:ca:d6:39:e6:fa:ad:ab:66:cd:7a:e4:98:02:d2:e7:b6:94:
df:24:a4:0c:90:72:16:f2:c7:7b:c1:46:3d:a2:d0:e5:bb:6f:
d0:03:0c:cd:78:e5:61:5f:12:68:91:4b:a8:c7:ec:87:6a:49:
82:1d:35:cf:62:09:63:f6:51:e4:b2:f3:5b:65:bf:c9:30:cf:
02:5f:96:33:aa:fc:6b:0e:72:2e:ae:97:a5:59:1f:2e:c0:23:
d2:79:8f:c8:e1:9b:0a:27:4b:ea:a8:b8:b0:fa:0f:01:b1:29:
b0:35:7c:9f:71:76:ce:50:45:c8:71:47:6c:c2:f7:9f:ed:1a:
ce:47:50:3b:f4:d3:a6:ea:ba:bc:71:36:49:25:08:72:32:1d:
7c:73:c3:4f:6e:18:a8:29:85:34:8b:f5:26:67:87:1c:4a:09:
c6:4b:03:4e:91:e4:af:8a:7a:fb:ce:8d:5f:f3:57:12:8c:b0:
a7:e6:46:64:36:04:a7:f7:87:9f:bb:62:cc:3c:02:38:55:88:
40:96:45:b0:9f:b9:96:44:c7:42:f4:04:c4:94:59:5b:4a:43:
0e:6e:3e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:22:57 2026 by rpki-client