
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
File: yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft (raw, json)
Hash identifier: JO0JXq+nk0xkoFHJcA1cgv1b1vUAICGpopZ8Fii0Fdw=
Subject key identifier: 40:1F:B4:7D:A1:5B:B1:6C:94:85:40:EE:01:9C:5D:39:DD:37:CE:87
Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86
Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986
Certificate serial: 0F0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
Manifest number: 210D
Signing time: Fri 12 Jun 2026 17:05:29 +0000
Manifest this update: Fri 12 Jun 2026 17:05:28 +0000
Manifest next update: Fri 19 Jun 2026 17:05:28 +0000
Files and hashes: 1: yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl (hash: Ao2to+nJQyXE5fDV7UH84uHgoozOOX5PvHgX50ePcfs=)
2: BFD96CC4C5CA11EEBFA07341C4F9AE02.roa (hash: 26/ZWw4oGoeZ9a+NcjUDBpBzIAmsMFcj5eQrlSJbZiE=)
3: 70F15C5CC5CA11EEA9DD0141C4F9AE02.roa (hash: eigTt3Trg0Mmz7fJV2kqmCJ3wyWoOHb+0O4sij8n0rA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl
rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3851 (0xf0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B06C, serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986
Validity
Not Before: Jun 12 17:05:28 2026 GMT
Not After : Jun 19 17:05:28 2026 GMT
Subject: CN=6a2c3c59-d329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1b:8f:74:e3:8a:57:ed:2e:07:c8:15:61:2b:
0d:fb:9b:4e:1d:04:d0:e4:5b:99:a5:c1:93:62:7b:
f1:30:23:b5:4d:e8:25:f3:2a:93:34:47:ec:03:ce:
c1:d9:4a:11:63:84:97:ad:b1:53:50:37:1c:29:9c:
f0:c9:dc:95:93:64:7f:94:3b:08:ac:29:d5:5d:81:
e0:f5:02:1e:a3:72:47:dd:28:26:aa:ff:18:21:22:
f6:2f:46:dc:f8:5c:2e:08:fe:9f:6b:b3:52:43:6b:
78:ba:0a:52:75:ea:08:44:e8:8f:1d:bf:ab:37:0f:
8d:a5:bb:78:6c:b5:7a:4a:9b:0b:68:ce:b1:5e:e2:
44:7b:f7:0d:7e:35:18:9a:71:cc:6a:62:ca:de:3d:
ec:13:95:3b:a7:cf:87:01:d1:37:e8:8c:6f:f8:cc:
8e:80:c4:94:e8:7b:70:2d:e2:42:33:68:cd:45:17:
b5:ca:6f:87:23:8e:e2:2d:55:05:d8:17:1d:e7:6c:
e1:b1:e7:56:96:c0:93:b9:4b:9a:8d:b5:ca:26:c7:
e3:d1:d6:d9:1a:9d:7b:5b:ab:54:f3:7a:73:b0:d8:
b3:2c:e0:cd:e0:ef:c6:79:69:41:25:40:8c:e1:93:
69:92:5e:06:b8:c9:f1:cd:0c:12:81:db:70:3d:7a:
fb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1F:B4:7D:A1:5B:B1:6C:94:85:40:EE:01:9C:5D:39:DD:37:CE:87
X509v3 Authority Key Identifier:
keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:0c:b2:9e:2a:a0:57:a3:1d:03:28:c5:fe:e3:30:0f:22:05:
60:de:52:45:f4:5d:c1:67:7c:4d:18:2a:db:13:c8:48:8a:94:
79:1f:b6:1c:9e:eb:61:cd:e0:79:17:d5:fc:87:5d:67:e5:dd:
5a:f4:b5:6e:dc:84:86:62:ea:86:63:70:ea:d0:b0:74:2b:ac:
a6:e0:43:21:8b:30:e5:7a:e4:1d:f9:93:fb:95:48:15:b6:60:
c7:ef:e4:a6:cc:84:6c:3c:ba:43:e7:d8:ca:11:1b:8f:d4:77:
cb:02:c4:d8:34:30:c2:45:73:c3:83:39:a4:a9:44:6f:e4:ef:
98:fe:de:c4:9b:d1:f7:31:00:b5:b0:f6:38:c5:35:e0:e9:5e:
4a:6a:3d:9e:8e:05:b1:f0:df:87:d7:66:5d:eb:05:1e:6e:73:
a1:f5:e8:5d:af:fd:99:4f:6d:a8:eb:61:e2:26:81:4c:d4:b8:
f7:9a:62:a3:fb:93:a0:b2:23:06:b5:ad:d3:99:a4:a3:a5:fc:
52:4d:91:2f:db:e4:9a:de:99:64:2c:a0:75:85:8a:92:43:65:
5a:89:9c:7c:fd:b6:fe:4f:ce:1d:5a:eb:80:6f:60:03:00:a3:
ec:4f:37:55:51:d3:5a:95:65:1c:b3:38:9d:13:99:f5:ca:09:
b7:11:e5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:56:38 2026 by rpki-client