
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/yQAUCbkkczpO3wFaUtzUE8xJuFA.mft
File: yQAUCbkkczpO3wFaUtzUE8xJuFA.mft (raw, json)
Hash identifier: 6TmAqXnAYRSYVsGESOz8nWYjYBMB6hdcPyRKggD3WvM=
Subject key identifier: 90:22:72:D4:2F:49:71:19:7A:7E:D5:9C:6A:41:89:46:B6:94:79:7D
Authority key identifier: C9:00:14:09:B9:24:73:3A:4E:DF:01:5A:52:DC:D4:13:CC:49:B8:50
Certificate issuer: /CN=A9110DC8/serialNumber=C9001409B924733A4EDF015A52DCD413CC49B850
Certificate serial: 19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQAUCbkkczpO3wFaUtzUE8xJuFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/yQAUCbkkczpO3wFaUtzUE8xJuFA.mft
Manifest number: 17
Signing time: Fri 25 Sep 2026 09:13:37 +0000
Manifest this update: Fri 25 Sep 2026 09:13:36 +0000
Manifest next update: Fri 02 Oct 2026 09:13:36 +0000
Files and hashes: 1: yQAUCbkkczpO3wFaUtzUE8xJuFA.crl (hash: ZQn7MV/zEc8C7+qMVNE2IWCsNIHsdPATsiMiITNnFe0=)
2: 3EF53D4AAC4A11F199EB65634211F970.roa (hash: FSEebEPFVWkVjoqVliVL4Vc0nC/1o7SgkRxMZgCnPtM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/yQAUCbkkczpO3wFaUtzUE8xJuFA.crl
rsync://rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/yQAUCbkkczpO3wFaUtzUE8xJuFA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQAUCbkkczpO3wFaUtzUE8xJuFA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 09:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110DC8, serialNumber=C9001409B924733A4EDF015A52DCD413CC49B850
Validity
Not Before: Sep 25 09:13:36 2026 GMT
Not After : Oct 2 09:13:36 2026 GMT
Subject: CN=6ab63b40-c589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ba:71:69:a1:8b:37:4b:b0:03:32:88:b7:e6:
69:cc:d0:48:99:80:62:c1:5c:2b:5e:cc:40:57:4b:
94:a9:a8:72:dc:5f:1f:bd:db:0e:d3:ea:fe:ba:4d:
dc:f3:b6:fe:4a:ac:77:cb:59:1c:09:f4:e7:82:43:
d3:2a:27:5f:98:b2:83:74:eb:3c:53:35:60:fb:07:
77:25:c0:4d:cf:53:ab:44:7f:04:91:48:b6:5c:9a:
2e:42:7b:3d:1f:f7:74:d6:62:4a:4b:37:e9:ef:7d:
be:b3:84:ba:27:ab:9d:f7:7b:f2:43:e8:d6:dc:3d:
01:c5:c4:0f:f3:d6:0c:a6:6e:95:87:d8:83:aa:8a:
36:fc:33:1a:a5:27:86:6c:5c:ee:d2:86:fe:8e:a2:
5c:86:93:38:1b:c5:57:63:db:b9:a2:3a:c7:72:38:
5a:4e:8f:06:f0:24:94:76:ec:21:8e:c0:ba:3e:63:
e1:52:e1:79:86:ba:5c:da:d4:8e:c1:4b:59:ec:5f:
a7:3f:f4:1d:55:1b:3d:c7:6c:7e:6b:e4:36:86:85:
f0:37:40:1f:47:c4:b8:ec:ff:8f:d0:79:a7:89:5f:
86:fb:ee:ab:30:74:29:a6:f3:30:3a:70:b5:4b:f0:
8d:23:ee:ce:c5:0d:52:32:2e:0e:63:6c:a4:4d:78:
81:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:22:72:D4:2F:49:71:19:7A:7E:D5:9C:6A:41:89:46:B6:94:79:7D
X509v3 Authority Key Identifier:
keyid:C9:00:14:09:B9:24:73:3A:4E:DF:01:5A:52:DC:D4:13:CC:49:B8:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/yQAUCbkkczpO3wFaUtzUE8xJuFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQAUCbkkczpO3wFaUtzUE8xJuFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/yQAUCbkkczpO3wFaUtzUE8xJuFA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3b:7a:81:03:6b:ac:dc:66:26:e1:e6:ea:89:f3:f1:5f:44:
b2:e6:7f:52:49:98:4f:6c:2a:69:ff:53:0e:c7:57:67:e9:83:
4e:9c:a9:65:33:19:3e:bf:a0:a1:61:d5:1b:99:d4:55:2c:aa:
ee:97:bb:5b:cd:61:38:db:8a:86:ad:48:3f:f9:ac:b5:50:da:
f2:f0:c5:7a:34:d9:b9:91:bb:96:0f:77:00:ae:81:7d:f9:8a:
3b:3e:0c:34:0d:66:fc:f6:2c:ba:eb:50:fa:62:f7:12:a3:ea:
7f:72:1e:db:e5:eb:64:d0:e5:57:2c:e2:3f:6b:d7:fb:d6:33:
01:f8:fd:67:65:c0:d6:d9:52:9d:52:40:45:18:a8:9e:f0:75:
53:31:76:38:f4:de:6c:2b:9c:18:fa:00:6b:76:83:f3:90:96:
03:65:0d:a9:36:04:08:f1:82:ee:32:0e:89:30:43:cd:9b:07:
6c:91:37:61:4d:33:40:ef:2d:08:71:f0:81:c1:1b:25:63:40:
94:34:b0:51:83:b2:cc:f0:83:69:50:83:a7:05:7a:52:44:9e:
67:a7:f8:eb:7a:75:e8:34:c7:06:61:59:db:f8:14:f9:a8:71:
8e:b0:19:be:18:97:ad:48:ca:2a:ef:c8:fc:17:c4:79:38:7d:
b1:b5:3e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:39:25 2026 by rpki-client