
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft
File: Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft (raw, json)
Hash identifier: IOg4D6K3yk7X/mklMxhV0F0GZxT0gelR9uKaG/nX70Q=
Subject key identifier: E3:48:5D:C4:6E:33:EC:2C:FE:2C:D1:FF:27:0E:51:9B:C7:22:9F:5A
Authority key identifier: 63:F3:59:A6:9E:DC:38:63:48:6F:46:D6:14:1F:9B:5C:01:43:23:FB
Certificate issuer: /CN=A9110C2F/serialNumber=63F359A69EDC3863486F46D6141F9B5C014323FB
Certificate serial: A8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft
Manifest number: A5
Signing time: Tue 22 Sep 2026 14:52:51 +0000
Manifest this update: Tue 22 Sep 2026 14:52:51 +0000
Manifest next update: Tue 29 Sep 2026 14:52:51 +0000
Files and hashes: 1: Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl (hash: 8pzl2y+Lo+F13K7RoJGoU5cHoUD/oPupwyigrCDraEY=)
2: 357B8ABEC67F11F08B0CE042C4F9AE02.roa (hash: nw9otOiCwQ8wtLQCh0wMrV+Kd/Ck+Jle9oO9lFGDeX0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl
rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C2F, serialNumber=63F359A69EDC3863486F46D6141F9B5C014323FB
Validity
Not Before: Sep 22 14:52:51 2026 GMT
Not After : Sep 29 14:52:51 2026 GMT
Subject: CN=6ab29643-1f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:8c:dd:3e:84:6c:94:5e:a7:8d:9b:24:44:
57:a0:81:87:14:2c:50:82:05:09:54:83:40:79:68:
cb:8d:6a:43:a6:3b:89:69:bf:85:e0:f9:c6:c6:5f:
af:88:c6:bb:ec:ab:fa:62:cc:d5:92:71:a8:0e:f4:
35:35:44:d5:82:94:43:f9:ee:1c:be:e8:ed:ae:d5:
7a:16:74:fa:62:eb:b1:29:3b:45:dc:15:62:21:46:
fd:38:3e:fd:0a:da:a9:39:6d:06:c9:bb:73:16:d1:
41:fe:11:80:47:b5:df:c6:c9:e4:dd:7e:fd:38:10:
7b:8f:fe:6e:47:93:78:13:eb:da:de:ae:ab:3b:8a:
7c:1b:84:e4:d7:40:10:58:4a:4b:a1:5c:bc:2e:34:
d3:f7:04:15:c8:02:0e:5e:1a:01:66:b2:ca:1d:3b:
e2:86:67:85:a7:0a:ed:b3:67:5d:42:61:f7:5a:e1:
97:c8:20:7d:45:9a:ab:74:6b:7e:0c:bb:32:8c:7c:
b8:df:0c:f8:8a:3a:25:de:be:3e:65:a3:25:70:98:
61:1d:13:75:10:f8:fd:4a:0c:5b:5d:7d:24:bb:b9:
e2:3d:b0:cf:ac:54:e0:8d:4e:c8:89:05:cf:0c:7d:
06:c7:6a:ab:19:f8:da:d0:6f:e8:d0:95:56:f0:ac:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:48:5D:C4:6E:33:EC:2C:FE:2C:D1:FF:27:0E:51:9B:C7:22:9F:5A
X509v3 Authority Key Identifier:
keyid:63:F3:59:A6:9E:DC:38:63:48:6F:46:D6:14:1F:9B:5C:01:43:23:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e2:71:13:36:9f:9d:ed:f5:58:1a:e5:85:1b:d8:81:02:3a:a3:
8f:13:7f:b7:8a:e4:77:ce:9e:38:d7:d5:e6:42:3a:de:b5:1f:
24:b2:8c:9a:ee:9f:14:72:31:b7:9d:8b:db:86:f1:d0:de:92:
80:75:c6:ea:e5:6b:a4:b6:ea:eb:bd:ee:5f:c9:5a:af:db:a4:
3c:dd:a2:5e:3c:3d:5e:11:3b:40:f4:29:72:50:98:85:71:d0:
d0:66:e7:3a:ca:e8:23:21:cb:a9:9e:8b:d2:42:f4:d6:88:68:
72:ea:fa:1c:cf:af:6b:1e:2d:db:d2:29:5b:ad:06:93:f9:dc:
ac:32:3f:ed:18:e9:63:9a:1e:d5:1c:99:b2:4e:1d:fc:20:3c:
7e:78:a0:da:0c:39:09:a9:fd:e9:fd:5b:28:80:74:0c:b6:d8:
6b:ca:5c:f4:4c:cb:ea:54:10:96:78:94:16:83:2e:a6:76:07:
cf:08:3f:0b:fe:9f:58:22:77:f3:66:39:cb:3c:22:65:94:33:
b1:04:ff:97:39:07:6a:dc:50:51:39:63:af:2a:e5:d3:fc:25:
96:30:b6:d5:65:5b:5f:99:aa:cb:3e:24:b1:b6:4d:d8:ea:5d:
85:43:a0:1a:f4:2b:e0:ce:93:82:22:23:7c:f0:f8:69:25:fb:
79:2d:34:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:37:26 2026 by rpki-client