
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
File: Y0nPcXs0CWM10fw5e8UEBkinjw4.mft (raw, json)
Hash identifier: ZtaGYrTzV2Yjdi150L/0GUbx76VHPDvXvP29/EXTqSI=
Subject key identifier: 78:36:EB:3F:5E:89:79:9A:E4:34:30:99:85:A2:30:CA:3A:D2:28:C2
Authority key identifier: 63:49:CF:71:7B:34:09:63:35:D1:FC:39:7B:C5:04:06:48:A7:8F:0E
Certificate issuer: /CN=A9120D97/serialNumber=6349CF717B34096335D1FC397BC5040648A78F0E
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
Manifest number: 26
Signing time: Wed 13 May 2026 08:56:06 +0000
Manifest this update: Wed 13 May 2026 08:56:05 +0000
Manifest next update: Wed 20 May 2026 08:56:05 +0000
Files and hashes: 1: Y0nPcXs0CWM10fw5e8UEBkinjw4.crl (hash: VC/jInZL/xGQf+t8vehtvgjBaOENyWFjcTg2lpOUEzY=)
2: B2D0F8D2178311F1B32BFEF6283D8C67.roa (hash: 0l1faSsNOHOUv9dts3Hprtyh48iyjB1f/xwuNggdhEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.crl
rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120D97, serialNumber=6349CF717B34096335D1FC397BC5040648A78F0E
Validity
Not Before: May 13 08:56:05 2026 GMT
Not After : May 20 08:56:05 2026 GMT
Subject: CN=6a043ca5-af41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:21:16:b1:c0:f0:bd:ce:38:5f:6a:7b:d3:95:
11:0a:6c:0b:be:8e:1c:be:65:17:c3:fb:dc:54:49:
1e:d9:e8:37:6b:ea:15:a9:2c:ed:d8:6f:dc:b3:83:
14:df:b9:10:b1:99:75:64:e7:a0:fb:aa:80:30:bb:
5c:b5:0f:e7:0c:d4:ed:35:21:ac:de:f3:a9:5f:81:
60:eb:88:1d:6c:9b:77:31:15:94:d2:49:ef:dc:a8:
4a:b8:bf:9c:ea:91:80:7f:4b:23:12:a0:7f:3b:bb:
49:14:6f:ae:b2:fb:84:c8:a9:04:61:91:26:6a:c5:
1b:e7:e8:bc:b2:16:6d:ce:1e:4f:4a:1a:20:96:47:
12:7f:b4:9c:08:96:ba:ed:ca:90:d0:a3:a1:8d:1b:
23:56:b8:6b:53:03:98:24:82:fa:ef:23:cd:1a:fc:
21:0b:6d:cd:eb:a0:d2:c0:49:80:dd:2f:4a:9b:b2:
56:0d:59:18:41:85:95:4f:ca:4d:8c:c5:fb:3b:f7:
ef:6b:59:b6:01:80:05:b6:db:b6:97:a5:cc:ef:42:
af:c7:cc:4e:1f:7c:b6:28:92:74:ae:a2:17:20:72:
36:46:54:94:13:ee:23:73:0a:74:2e:d2:c6:2c:86:
ff:fa:9b:c6:2c:27:36:f6:13:34:4d:c4:57:1d:2a:
3c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:36:EB:3F:5E:89:79:9A:E4:34:30:99:85:A2:30:CA:3A:D2:28:C2
X509v3 Authority Key Identifier:
keyid:63:49:CF:71:7B:34:09:63:35:D1:FC:39:7B:C5:04:06:48:A7:8F:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:17:04:73:73:48:30:15:53:53:63:d9:84:69:5f:3b:1a:37:
9b:dc:66:3b:67:38:59:57:e2:f0:e3:d9:10:a5:4f:2c:76:de:
4c:14:5f:46:48:b9:12:e8:24:cf:40:1e:88:20:23:28:14:96:
f5:79:98:18:ce:2b:50:e0:84:50:d3:cd:e0:52:0d:52:98:80:
54:bf:35:d3:ce:cc:d5:6c:0a:70:66:ba:82:38:d3:23:2a:63:
89:35:cd:eb:4a:20:c2:fe:15:08:3d:26:9a:92:64:ac:1d:1a:
6b:26:38:14:ea:0c:42:b1:73:1a:87:05:68:d3:76:a8:ae:e1:
7d:34:f8:68:91:88:80:ea:a0:e6:f8:68:55:af:f4:bd:8c:4e:
f4:10:20:4c:5d:83:52:48:65:d8:2f:48:cb:0a:36:c1:70:2f:
fe:c2:94:cf:c7:d1:85:78:8b:ea:5b:06:00:30:7c:66:3c:da:
dc:2c:a5:8f:ab:3b:ef:ba:ee:80:ba:d2:90:50:1c:63:bc:66:
fe:e1:94:c4:7d:4d:bb:3b:fd:33:57:ef:44:4f:54:88:db:99:
a7:4a:3c:28:1a:d0:1c:76:68:5e:4a:f4:2b:21:cf:4f:18:71:
78:e0:35:2e:c6:f7:60:93:12:33:d5:4f:0d:1e:d4:04:6c:d0:
53:ea:86:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:24:05 2026 by rpki-client