
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft
File: YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft (raw, json)
Hash identifier: 4OPcyMPvCbnz1c/3IWsSk1w7bVQtRk+OErzHLumRBbM=
Subject key identifier: C7:95:86:E6:5F:EF:DC:8B:29:8F:00:DA:5E:41:71:DB:5E:16:A8:5B
Authority key identifier: 61:FA:70:86:81:1C:B0:3F:CB:94:C3:16:CF:EE:AD:88:9A:85:27:F7
Certificate issuer: /CN=A918E3C0/serialNumber=61FA7086811CB03FCB94C316CFEEAD889A8527F7
Certificate serial: 2D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft
Manifest number: 2B
Signing time: Fri 17 Apr 2026 08:29:28 +0000
Manifest this update: Fri 17 Apr 2026 08:29:27 +0000
Manifest next update: Fri 24 Apr 2026 08:29:27 +0000
Files and hashes: 1: YfpwhoEcsD_LlMMWz-6tiJqFJ_c.crl (hash: HzcwEdBAraqKBz/U/KSW2ac0uAob8prnR+MqIb7H+mE=)
2: 3F6F4A1A01B211F19B62C4E66C6F56BC.roa (hash: tMHj5+/ILv6Qo4xWUT+IoiNMESbwl2vJsPhAT7WrKns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.crl
rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E3C0, serialNumber=61FA7086811CB03FCB94C316CFEEAD889A8527F7
Validity
Not Before: Apr 17 08:29:27 2026 GMT
Not After : Apr 24 08:29:27 2026 GMT
Subject: CN=69e1ef68-301b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a0:d8:f8:53:6a:ef:a8:df:c9:96:2a:12:86:
5c:5d:74:08:2a:f1:37:36:fd:4c:e0:86:60:4c:7e:
28:49:2b:91:32:ae:9c:ef:18:98:0a:7c:50:fe:ae:
8a:a5:1f:67:6c:3c:06:cb:12:bb:7e:c0:80:97:24:
c0:76:0b:ca:4b:06:cc:4a:c3:16:78:b4:fc:77:f1:
ba:6e:2c:45:05:1e:45:2d:31:0b:71:d5:27:36:fb:
9f:8c:36:f3:00:07:44:0f:af:3d:64:59:07:48:41:
1b:cc:00:2d:41:87:87:fa:eb:26:a3:53:f1:07:80:
12:48:21:8a:57:94:d9:8d:a1:b2:d6:cc:45:49:95:
6c:af:6f:f1:96:0f:27:0a:4a:85:ae:53:3b:0e:63:
f3:5d:76:0f:b6:cc:93:3a:97:55:26:5c:25:15:b8:
f9:0e:c4:e1:04:5a:ed:58:06:8f:f7:f1:07:35:3d:
0d:5a:03:ce:1f:74:17:7b:7a:52:c0:c6:dd:02:80:
a8:88:c3:b6:77:e7:86:0a:5a:fc:45:22:21:aa:79:
89:36:8f:5e:43:6d:fe:bc:af:ed:b7:ac:72:21:55:
19:bc:c0:b8:71:55:c9:f7:6a:b4:a9:40:27:ad:af:
fd:62:03:77:1c:8f:7f:11:8e:eb:d5:9d:51:92:be:
f0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:95:86:E6:5F:EF:DC:8B:29:8F:00:DA:5E:41:71:DB:5E:16:A8:5B
X509v3 Authority Key Identifier:
keyid:61:FA:70:86:81:1C:B0:3F:CB:94:C3:16:CF:EE:AD:88:9A:85:27:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e9:93:cd:01:47:03:a1:bf:e0:59:d4:99:ed:68:a2:57:bc:63:
cd:52:68:0e:a3:d9:6f:d8:95:11:3f:99:8b:54:b6:e3:6a:29:
df:22:37:db:45:65:06:7b:5c:21:9f:1a:ea:fe:98:07:a5:01:
ab:1f:7a:77:05:e9:b4:c2:b6:cc:a2:5a:0b:e0:1a:95:96:ce:
39:9b:ff:1c:11:c5:f9:e4:9c:cd:e6:74:40:a4:c8:14:71:61:
24:73:6b:98:5a:89:03:17:88:0a:13:0a:2c:6e:21:9c:13:6c:
87:7b:fd:4a:0b:68:f1:97:5c:bb:7a:41:c6:a1:9a:df:52:01:
22:ff:3e:80:6d:5d:62:28:a7:6f:de:59:1f:ef:e5:6d:6d:c2:
c0:ae:02:29:05:68:e3:53:2b:32:cd:cc:2f:67:eb:0e:da:a9:
5a:74:86:47:2c:4f:d6:dd:c5:ec:43:f7:f8:64:59:8c:16:74:
61:23:a2:28:2e:d5:f4:63:f8:e2:60:f6:3d:01:a2:da:85:97:
d8:c4:4a:c3:22:62:cb:4b:2c:38:2c:f9:56:18:2b:1c:02:cc:
29:f3:70:8f:54:e8:fc:2b:03:b0:71:9c:00:ed:9e:85:f9:84:
c3:50:29:de:69:1e:3c:0c:6a:d1:e2:65:f2:ca:c0:b7:7b:f8:
c5:5d:dc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:51:42 2026 by rpki-client