
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
File: yl96MSHB9fmJUgx6UZcT-zpoyn4.mft (raw, json)
Hash identifier: 7WdEeFsM4sFAw8g8n2vmN2N1o+5y8OrUOFyAOyS9Yzw=
Subject key identifier: C0:EC:DA:4A:C3:28:83:53:7F:8B:AB:2C:E5:84:22:0D:B5:9F:23:A2
Authority key identifier: CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E
Certificate issuer: /CN=A919E1FC/serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E
Certificate serial: 0111
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
Manifest number: FF
Signing time: Sat 13 Jun 2026 06:19:49 +0000
Manifest this update: Sat 13 Jun 2026 06:19:48 +0000
Manifest next update: Sat 20 Jun 2026 06:19:48 +0000
Files and hashes: 1: yl96MSHB9fmJUgx6UZcT-zpoyn4.crl (hash: Z2XYeCffPgR7LF3OSE5oxKtAKcjuAlntK+5eOfhieJA=)
2: 09852FF6E9FC11EF9D3DE972C4F9AE02.roa (hash: +Guf8goiy81fZQZko9cL1+fi1M4VlxC1TorsAeBwzhI=)
3: 0A34182CE9FC11EF9D3DE972C4F9AE02.roa (hash: 5aZLhkHexwZy2OGn8j73qB9Fr54SX5MLYLq1gSETLgc=)
4: F70CBA98E9B911EFB5B54650C4F9AE02.roa (hash: ApqLcBimI49Avn0PuHyRPruV4UszM9ORBkBlkObwqEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl
rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E1FC, serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E
Validity
Not Before: Jun 13 06:19:48 2026 GMT
Not After : Jun 20 06:19:48 2026 GMT
Subject: CN=6a2cf685-49e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2c:00:00:df:ea:06:eb:a3:f1:bd:9e:11:11:
ee:94:0c:09:00:28:60:62:be:c1:b3:69:51:a4:3c:
4a:5a:52:f7:08:06:24:ae:92:06:6b:2e:8a:c5:e1:
9b:16:f7:c5:7e:ad:8b:88:dc:85:31:94:0d:50:77:
f5:51:55:8f:f8:67:92:3a:94:2c:c2:fc:f9:48:36:
61:8a:6e:84:32:e1:4e:48:90:a9:33:cc:45:f4:c0:
5e:2f:4c:84:cf:fc:f4:57:ae:1e:25:8c:1d:82:ef:
86:4b:4c:fe:f0:98:c4:a0:65:29:09:e1:d2:b3:f5:
95:13:22:d4:1a:64:03:7b:04:73:ba:d4:fa:27:c3:
07:2e:a2:86:ca:9c:e2:d5:dc:2c:05:46:34:19:df:
8a:e3:bb:6e:da:df:30:45:93:6e:9b:3f:b0:e1:33:
58:e7:8d:50:c2:96:49:34:3e:0d:41:13:86:f1:86:
4d:11:36:dd:8b:4b:18:6a:c3:63:58:e8:1b:8c:92:
23:cf:ae:8f:e6:47:06:8a:d6:52:7c:bd:95:0a:ba:
48:d4:37:89:97:18:83:be:6f:fa:fb:60:c9:fc:0d:
41:e7:a7:8f:c6:7f:c3:41:41:f0:39:31:44:2a:70:
6a:c9:0d:9e:ff:60:3d:d1:51:63:38:f0:be:33:98:
b5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EC:DA:4A:C3:28:83:53:7F:8B:AB:2C:E5:84:22:0D:B5:9F:23:A2
X509v3 Authority Key Identifier:
keyid:CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:8f:0a:b5:df:15:d8:c8:c1:3b:d4:4e:39:9d:00:5a:ba:3d:
46:48:a9:a1:9a:9e:85:e9:5c:c4:4b:4f:c5:65:d9:5a:bb:3b:
87:02:b6:73:ad:6a:da:fc:81:89:73:e3:e4:cb:eb:f0:ce:18:
29:fa:aa:bb:3b:2b:88:d6:17:91:31:69:f6:91:59:f9:5f:dd:
ee:c4:db:7e:35:6b:47:91:e4:60:a9:d5:d0:89:ce:4a:af:8d:
07:d2:b7:0b:e6:96:5c:f8:04:17:3b:02:e8:ee:22:08:7e:cb:
7c:e0:a9:0d:d4:ce:c9:6d:82:21:66:4e:67:25:48:29:b1:0c:
c3:98:c9:51:76:19:7d:f9:77:ef:90:6e:a3:3c:b9:1e:a0:f4:
f7:d6:6b:54:16:1a:b2:75:88:73:ae:48:e5:13:22:ab:6b:58:
67:86:cf:96:17:b9:3a:d6:b1:9e:5b:35:17:7a:65:5f:af:37:
6c:68:b2:45:84:1e:f5:77:cd:90:9d:25:c6:66:34:54:ec:91:
09:13:9a:6a:ec:8f:c8:7d:8e:65:70:7a:d7:59:11:cb:d4:9d:
63:78:fb:3d:d1:e0:7d:85:3e:4a:ea:1a:f8:fb:11:91:6f:c1:
5f:f4:4b:a6:55:36:af:4d:57:b5:89:aa:31:16:59:34:b5:0e:
67:0a:3e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:36:31 2026 by rpki-client