
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft
File: y1sC0Pxzbip6stKIoPwzFnpLvO0.mft (raw, json)
Hash identifier: st/R/VJf6ABWwtmieNUrCeSvm4Bv942loaN92Nt7oAg=
Subject key identifier: 92:DC:C5:D1:5A:83:2F:41:1B:B9:A1:A2:6D:4C:EF:42:49:65:7B:C4
Authority key identifier: CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED
Certificate issuer: /CN=A9129F1D/serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED
Certificate serial: 027E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft
Manifest number: 0277
Signing time: Wed 13 May 2026 02:01:32 +0000
Manifest this update: Wed 13 May 2026 02:01:32 +0000
Manifest next update: Wed 20 May 2026 02:01:32 +0000
Files and hashes: 1: y1sC0Pxzbip6stKIoPwzFnpLvO0.crl (hash: 0HbjZec/lh69JXa/i6PIwBa19eqTEfl0KM+o1nypWf4=)
2: 3E122AE0876011ED84335D46C4F9AE02.roa (hash: lMy4Wa3bZNfZogKIHMCZaFATHLOtC1FrGFIRZTmFan8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl
rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 638 (0x27e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129F1D, serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED
Validity
Not Before: May 13 02:01:32 2026 GMT
Not After : May 20 02:01:32 2026 GMT
Subject: CN=6a03db7c-50b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:a2:4b:c2:96:b6:56:9c:b3:ec:4b:d4:1c:
2e:40:52:0c:36:d7:18:98:af:7f:d5:57:fa:64:32:
eb:4f:8c:3e:f2:b8:3b:46:e4:de:18:8b:f0:2a:ae:
78:a2:90:00:86:10:73:73:bf:38:c2:04:07:2f:dd:
38:ac:9d:c2:70:6e:f7:cb:ba:9c:cf:82:67:80:55:
5e:1a:13:24:bc:4f:41:e1:ec:44:a2:94:21:83:86:
6d:55:f7:27:66:10:34:94:e5:2e:74:a8:d0:59:d3:
80:2e:42:10:0e:30:03:46:83:00:41:71:16:80:a3:
b2:e6:3a:63:d6:6f:8e:44:d2:88:98:d4:e8:6b:58:
eb:dd:70:47:b7:ce:09:17:87:09:24:c2:2a:e0:6f:
ed:3f:4d:16:45:16:90:c2:7f:f5:3e:ea:ba:3c:ae:
f2:61:ac:84:6d:2c:a6:dc:90:80:17:4e:d0:76:25:
27:d9:81:39:d7:5b:23:b8:58:2c:a6:bd:ea:e0:88:
a0:99:d5:dd:8f:bb:ee:c1:da:bd:84:9e:97:a1:16:
1d:06:e2:31:f2:ca:df:ef:d0:76:eb:f1:26:25:8b:
52:e1:cf:54:7c:4f:b4:45:f6:d9:4c:7e:03:61:60:
9c:0c:95:ea:d3:2e:d8:fd:06:03:9d:10:eb:3a:1b:
05:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DC:C5:D1:5A:83:2F:41:1B:B9:A1:A2:6D:4C:EF:42:49:65:7B:C4
X509v3 Authority Key Identifier:
keyid:CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:65:a3:6b:fb:96:5a:04:48:df:70:bd:68:dc:7c:4a:1b:4b:
b4:a0:d0:f5:50:b8:b0:03:de:fb:1b:24:39:22:85:a7:73:71:
1a:f5:46:1e:fd:11:61:20:b7:31:f0:ba:a6:67:b1:34:a9:b9:
bd:37:dc:92:fe:27:0e:95:55:a0:07:4f:42:e7:83:e7:5a:d0:
cd:f0:88:4d:ff:6c:52:aa:c6:71:c2:f5:e7:a6:d4:89:89:fa:
d5:d5:5b:f8:de:25:8f:ff:6d:cb:17:24:e8:33:15:63:3c:b0:
9a:10:2c:4d:36:e8:55:ae:f6:06:5f:eb:cd:77:0f:fb:a5:25:
0f:18:6e:98:b0:61:e0:4a:62:ed:72:98:6f:1c:a9:9f:cc:b1:
71:78:50:d2:d6:97:53:2b:19:75:58:a6:aa:a7:81:01:7e:5d:
38:c1:cd:19:59:fe:c3:7a:8c:89:2e:9a:21:92:e7:52:a0:de:
53:ab:8f:0b:cc:5c:21:44:4f:04:2d:96:22:44:ab:76:8a:cf:
f9:fe:de:29:62:9a:19:87:61:fb:35:18:e6:b8:61:18:fc:6f:
0e:cb:19:71:1f:7b:92:4a:f7:bd:da:f7:fa:3b:e4:d8:d4:85:
52:50:54:55:65:9c:94:2c:3c:f7:56:89:e1:9b:10:c8:3e:6b:
5d:24:32:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:09:53 2026 by rpki-client