
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft
File: yNpkCWcTSBB928ixg_VavykxJVY.mft (raw, json)
Hash identifier: EW7Wd4GrMbZYdFB3MP8gU1Ulo1sxAp9cD4qSf6P87zc=
Subject key identifier: 22:BF:AA:8D:13:F6:2F:F2:6B:66:2F:D4:7A:49:FA:BE:E6:66:51:00
Authority key identifier: C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56
Certificate issuer: /CN=A9120974/serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556
Certificate serial: 1147
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft
Manifest number: 1147
Signing time: Thu 24 Sep 2026 17:12:33 +0000
Manifest this update: Thu 24 Sep 2026 17:12:33 +0000
Manifest next update: Thu 01 Oct 2026 17:12:33 +0000
Files and hashes: 1: yNpkCWcTSBB928ixg_VavykxJVY.crl (hash: UeYUl/ActVtt6AQB8N8HyTll+Yr8UAPGh2/wZm5XFRA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl
rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4423 (0x1147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120974, serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556
Validity
Not Before: Sep 24 17:12:33 2026 GMT
Not After : Oct 1 17:12:33 2026 GMT
Subject: CN=6ab55a01-8533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:ee:f5:da:26:be:c5:70:f1:fa:77:67:5e:
fb:eb:43:6a:9b:b2:0c:64:b9:8c:a8:91:0c:21:df:
3e:ed:4b:5d:ac:41:bd:e5:21:b8:d6:ea:56:11:de:
ad:6e:f7:74:89:a0:8e:4b:50:71:54:f2:c5:58:05:
cb:5b:24:53:7e:3f:1e:d8:0a:14:cb:df:d7:27:0b:
52:a5:86:39:7f:80:81:c9:8f:30:31:7f:ba:24:90:
79:22:b0:67:fc:38:17:c4:d3:d3:96:3f:85:9c:14:
33:69:8b:cb:74:18:03:74:ba:0b:29:5e:03:28:0c:
71:bf:ee:ee:fe:0d:9c:4c:04:e4:6f:be:ef:c6:8d:
b9:d9:6c:e2:7b:e4:8c:9c:f8:0b:51:14:0f:f1:9c:
29:bb:02:92:d4:22:ab:c7:60:95:5e:55:b9:09:fc:
9e:5c:85:6f:43:b7:d4:f1:1e:73:47:c0:8a:9f:6e:
f7:30:5c:62:b1:64:97:b9:f9:d2:db:b1:7f:b5:1d:
54:3d:61:17:ac:10:86:ec:5c:b9:f2:01:0b:fb:7b:
1e:d9:8c:65:6d:75:70:fd:6d:ea:7e:bc:2d:5c:02:
44:5a:22:9b:8b:2d:c0:38:c7:3e:84:56:e2:0d:56:
bf:c3:4d:6f:b8:1e:41:22:10:36:dd:65:98:01:93:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BF:AA:8D:13:F6:2F:F2:6B:66:2F:D4:7A:49:FA:BE:E6:66:51:00
X509v3 Authority Key Identifier:
keyid:C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:3e:4f:19:99:95:b3:0f:ed:7d:da:4b:a8:ce:c4:b5:cd:0b:
44:fa:9f:de:b6:3f:78:51:a4:33:10:07:54:1c:f3:fb:02:34:
2b:d2:1b:4c:d2:7f:0e:69:98:02:99:69:f1:0c:ad:af:21:45:
d6:8a:ad:8b:43:0a:78:b1:10:0e:13:dd:81:8f:7a:81:16:52:
b6:88:3d:d8:01:a2:2d:b1:6f:e4:da:ec:21:38:07:24:e6:22:
64:6f:b6:51:71:e4:71:df:80:65:04:e4:ae:46:eb:65:48:04:
89:0a:2a:3a:6e:e6:12:c7:c9:d0:ae:90:1d:e3:80:c9:01:a6:
04:89:ed:6c:71:df:a3:15:4e:a4:89:7d:35:d2:5b:4d:9f:4c:
ad:21:53:08:f8:e1:01:4c:35:10:ea:08:72:91:96:fd:59:6c:
d5:2b:28:b1:68:30:8d:a1:66:eb:21:d9:a7:0f:54:8e:c9:92:
f9:10:e0:39:08:6a:89:4c:a7:92:aa:13:7b:a8:e1:62:94:4f:
dc:0d:1b:4b:1f:e7:bf:2e:2d:f3:6d:e0:11:2e:d2:47:90:9f:
c5:ce:cf:17:8e:5e:2c:f5:90:87:da:90:b7:25:c7:13:45:b5:
1b:b3:07:aa:30:48:50:dc:46:56:bf:ce:ff:71:ed:44:1b:52:
55:b1:62:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:22:57 2026 by rpki-client