
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
File: Y0nPcXs0CWM10fw5e8UEBkinjw4.mft (raw, json)
Hash identifier: xOkTEwFc8HsZPLzsix/Ubi6yM4dPxSMU/qFk3YyvgkU=
Subject key identifier: 6F:29:21:76:6E:1E:2B:BD:F2:AC:F0:1F:E6:85:18:59:47:DF:E3:76
Authority key identifier: 63:49:CF:71:7B:34:09:63:35:D1:FC:39:7B:C5:04:06:48:A7:8F:0E
Certificate issuer: /CN=A9120D97/serialNumber=6349CF717B34096335D1FC397BC5040648A78F0E
Certificate serial: 6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
Manifest number: 6B
Signing time: Sun 27 Sep 2026 08:30:39 +0000
Manifest this update: Sun 27 Sep 2026 08:30:39 +0000
Manifest next update: Sun 04 Oct 2026 08:30:39 +0000
Files and hashes: 1: Y0nPcXs0CWM10fw5e8UEBkinjw4.crl (hash: MmIcowWWOZ4TqPDugeIylWjlppx/tfvVJnB1eRFEbmI=)
2: B2D0F8D2178311F1B32BFEF6283D8C67.roa (hash: 0l1faSsNOHOUv9dts3Hprtyh48iyjB1f/xwuNggdhEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.crl
rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 08:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120D97, serialNumber=6349CF717B34096335D1FC397BC5040648A78F0E
Validity
Not Before: Sep 27 08:30:39 2026 GMT
Not After : Oct 4 08:30:39 2026 GMT
Subject: CN=6ab8d42f-48af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:c2:8f:0d:44:16:74:cd:5a:8a:5d:41:21:
e2:a8:fb:ca:75:d5:43:e8:f1:af:9c:b5:9c:bb:9a:
d7:21:da:a8:9e:c5:38:96:95:ce:50:43:22:24:bc:
10:80:00:47:9b:dc:ea:a0:0b:3f:25:9b:5c:56:c2:
27:a2:bb:78:5e:6c:df:17:6f:93:e7:f0:6e:05:de:
67:0d:51:3e:38:3b:91:8b:3e:42:9b:1f:69:08:5b:
55:51:fb:5c:5b:41:1a:75:63:86:47:48:c0:43:3d:
6a:35:52:5c:99:cf:b2:f9:65:f7:e3:50:22:ba:ee:
37:33:4d:cc:40:1b:85:e4:15:1e:eb:25:51:c4:85:
cd:66:1d:14:0a:3c:98:4a:f8:01:5e:35:c5:a9:d1:
ed:13:ce:cf:ff:db:09:c1:f7:d4:fc:1b:3e:af:33:
c6:67:d6:f7:6a:04:2c:a2:a4:f5:6a:dc:c7:75:b9:
08:14:8f:c1:cd:2f:5e:1e:f0:71:d0:dd:f5:77:d2:
52:19:6a:8e:07:b0:25:00:d5:07:67:b3:5b:e7:7d:
a0:5f:df:72:b6:ce:bf:4c:d7:f1:a8:ad:db:3a:83:
5f:62:2e:29:33:69:91:21:65:27:53:e9:a9:88:cc:
75:b4:72:8b:5c:19:97:33:2e:b9:56:3c:58:98:44:
a6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:29:21:76:6E:1E:2B:BD:F2:AC:F0:1F:E6:85:18:59:47:DF:E3:76
X509v3 Authority Key Identifier:
keyid:63:49:CF:71:7B:34:09:63:35:D1:FC:39:7B:C5:04:06:48:A7:8F:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:99:94:14:f1:1e:7b:df:48:d8:4d:33:1a:a9:e4:32:78:5c:
06:05:2b:0f:db:75:3c:c2:b7:14:bd:ee:80:4e:02:7c:c1:fc:
9d:0e:a0:ec:37:1b:eb:d8:95:d9:5e:a1:4e:53:b2:fd:9b:46:
35:ee:87:70:56:5d:b0:5b:a6:e0:43:77:dc:6d:9f:f5:14:61:
01:15:cf:d3:30:11:e7:26:0e:37:0d:1f:85:c4:16:70:f5:ef:
62:34:91:e0:7d:34:c9:57:e8:13:e5:41:89:47:9c:ee:19:6c:
61:b2:50:1b:f8:2a:cd:aa:69:ca:2f:bb:e2:6c:a5:51:5e:6a:
8f:34:de:53:8b:91:5f:74:1c:e8:be:b1:26:3e:bf:20:d4:a7:
7e:27:ed:f0:81:28:8f:88:13:23:05:41:51:98:e3:8c:1d:c2:
a2:95:13:9c:56:62:55:df:29:fe:31:79:54:d2:ab:04:b0:ab:
80:12:49:6c:f6:e3:19:97:5d:b6:fd:f5:db:4e:3f:54:17:00:
e3:04:9c:31:b7:16:e7:6d:fe:72:37:d6:00:43:95:4f:00:b8:
88:69:c7:fa:34:41:4c:b8:81:24:e9:c1:ef:1a:43:55:4a:67:
d7:fc:b2:09:bb:5e:42:85:3b:ba:74:b0:ac:95:59:f5:d6:d4:
c9:77:0a:4b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
MEQ5NzExMC8GA1UEBRMoNjM0OUNGNzE3QjM0MDk2MzM1RDFGQzM5N0JDNTA0MDY0
OEE3OEYwRTAeFw0yNjA5MjcwODMwMzlaFw0yNjEwMDQwODMwMzlaMBgxFjAUBgNV
BAMTDTZhYjhkNDJmLTQ4YWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8mcKPDUQWdM1ail1BIeKo+8p11UPo8a+ctZy7mtch2qiexTiWlc5QQyIkvBCA
AEeb3OqgCz8lm1xWwieiu3hebN8Xb5Pn8G4F3mcNUT44O5GLPkKbH2kIW1VR+1xb
QRp1Y4ZHSMBDPWo1UlyZz7L5ZffjUCK67jczTcxAG4XkFR7rJVHEhc1mHRQKPJhK
+AFeNcWp0e0Tzs//2wnB99T8Gz6vM8Zn1vdqBCyipPVq3Md1uQgUj8HNL14e8HHQ
3fV30lIZao4HsCUA1Qdns1vnfaBf33K2zr9M1/Gords6g19iLikzaZEhZSdT6amI
zHW0cotcGZczLrlWPFiYRKZZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUbykhdm4e
K73yrPAf5oUYWUff43YwHwYDVR0jBBgwFoAUY0nPcXs0CWM10fw5e8UEBkinjw4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwRDk3LzEwQTk5QTBBMTc4
MzExRjFCN0FBQzBGRjI3M0Q4QzY3L1kwblBjWHMwQ1dNMTBmdzVlOFVFQmtpbmp3
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWTBuUGNYczBDV00xMGZ3NWU4VUVCa2luanc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw
RDk3LzEwQTk5QTBBMTc4MzExRjFCN0FBQzBGRjI3M0Q4QzY3L1kwblBjWHMwQ1dN
MTBmdzVlOFVFQmtpbmp3NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBSmZQU8R5730jYTTMaqeQyeFwGBSsP23U8wrcUve6ATgJ8wfydDqDsNxvr2JXZ
XqFOU7L9m0Y17odwVl2wW6bgQ3fcbZ/1FGEBFc/TMBHnJg43DR+FxBZw9e9iNJHg
fTTJV+gT5UGJR5zuGWxhslAb+CrNqmnKL7vibKVRXmqPNN5Ti5FfdBzovrEmPr8g
1Kd+J+3wgSiPiBMjBUFRmOOMHcKilROcVmJV3yn+MXlU0qsEsKuAEkls9uMZl122
/fXbTj9UFwDjBJwxtxbnbf5yN9YAQ5VPALiIacf6NEFMuIEk6cHvGkNVSmfX/LIJ
u15ChTu6dLCslVn11tTJdwpL
-----END CERTIFICATE-----
Generated at Mon Sep 28 14:20:49 2026 by rpki-client