
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
File: ycx5T_y0zfLZ373rdjgJuH0tj1c.mft (raw, json)
Hash identifier: V4gQrBVagCFPF88DFdvfURTqy456k8lsES9GZAEWdcg=
Subject key identifier: 49:FE:5E:01:B7:2B:8E:43:34:53:D1:9F:A0:4E:54:D9:7F:C0:2A:24
Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57
Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
Certificate serial: 2612
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
Manifest number: 25E9
Signing time: Mon 12 Oct 2026 15:45:18 +0000
Manifest this update: Mon 12 Oct 2026 15:45:18 +0000
Manifest next update: Mon 19 Oct 2026 15:45:18 +0000
Files and hashes: 1: ycx5T_y0zfLZ373rdjgJuH0tj1c.crl (hash: +XJbMWCd7hk+Wx0P3A76sXSS+N6ho8Wzv2uQuRDgtW4=)
2: 297BC4140D4611E794585E2FC4F9AE02.roa (hash: Oip4/ft1E//qtYhxFVUiNdrRQdmZE92k2cuDNa4P3q0=)
3: 04CC562A444E11E88204061CC4F9AE02.roa (hash: QOiY3hFrvBYW4moWHSGhx5zs4RYPw59BvTEOl9hZ6yg=)
4: DD1070A286EE11F19E006003A7EE528E.roa (hash: QPNTaIBBW5Pm+ub/7yqeRjvgU5bEwV0xP9GlYoD4++M=)
5: 6690D57486FE11F194514C90ABEE528E.roa (hash: fV1SDM79oTlS83IQQaXNvbxSE2n0EcvqopvRbECAJVY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl
rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 15:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9746 (0x2612)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
Validity
Not Before: Oct 12 15:45:18 2026 GMT
Not After : Oct 19 15:45:18 2026 GMT
Subject: CN=6acd008e-1fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:da:9e:34:fd:c9:a0:bf:db:74:b0:98:8b:
10:6a:92:b9:c1:fc:aa:1a:a9:79:10:81:6d:b3:35:
22:a8:59:c4:0a:d1:a2:18:b5:85:33:0c:aa:e8:7f:
40:40:11:4c:43:01:45:e8:d6:b6:78:f0:28:94:1e:
ef:a1:65:07:36:b7:ea:79:7e:5e:88:17:5d:b6:20:
c8:48:c6:bb:71:fe:03:2b:38:0a:c0:f0:e5:ac:9d:
cd:e4:d4:95:2d:a2:2d:21:b8:d9:16:22:1e:38:9e:
8d:f7:fd:90:7b:b8:a5:25:0b:69:0f:23:85:84:e9:
ab:57:62:50:6f:fc:ed:c5:ce:b5:76:1a:90:ba:58:
a7:95:fb:b4:dd:68:2f:6a:c4:0a:c3:69:64:49:50:
df:41:a1:ea:09:e6:5c:c9:36:a3:a2:d8:e2:5f:c8:
e3:ea:7a:0b:22:a3:23:2e:b9:02:c4:a8:d8:a5:cb:
1b:c9:0a:6d:75:3c:09:06:ff:5f:a5:ff:21:50:de:
85:1f:58:a1:62:65:82:c0:35:c1:77:a4:b4:15:d1:
83:12:b5:5b:b2:0a:94:fc:c2:57:f2:85:9d:6e:82:
71:d8:27:ea:db:81:10:79:ed:0e:59:70:8b:55:ba:
13:e0:2c:4d:68:ec:6b:31:14:36:7f:57:53:6c:ae:
d5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FE:5E:01:B7:2B:8E:43:34:53:D1:9F:A0:4E:54:D9:7F:C0:2A:24
X509v3 Authority Key Identifier:
keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:90:50:be:a5:a9:96:cd:a1:78:75:17:86:cf:dd:a1:18:0f:
8d:10:7d:d3:a1:d3:17:d3:15:09:5e:3c:91:ff:a4:09:3e:da:
6b:f6:8a:28:e2:06:84:cf:60:79:86:9d:93:fb:6c:f2:08:6a:
39:9b:82:48:1f:43:2c:9c:84:b4:1e:71:54:9a:37:15:f7:20:
83:70:42:4e:4b:fa:d5:64:85:29:35:84:04:0e:34:45:4f:cd:
36:34:fc:9f:b8:a8:4e:6b:01:86:97:9c:83:c6:33:dd:7c:19:
c7:9a:7c:19:5d:e5:07:00:63:a8:b5:fe:14:c6:1a:5d:60:b7:
63:29:9f:db:43:87:e4:9d:d0:e9:56:56:e6:62:02:a8:df:c6:
de:7b:ef:40:19:68:76:fa:d1:0c:06:e7:fa:7f:24:33:cd:bb:
e9:fb:8f:09:36:59:c8:89:3e:f1:d5:2a:82:2b:ec:d2:db:b6:
dd:eb:06:b4:77:85:20:32:e5:d7:98:c2:1e:0f:fe:88:47:10:
4b:fd:a0:a6:dd:10:33:a1:ce:2a:dd:36:17:72:b6:28:9a:ed:
9f:4d:a1:90:2a:1a:76:46:96:46:46:53:45:74:9d:36:d2:41:
29:53:60:4d:9f:d7:af:43:9a:de:8c:e7:96:c8:66:32:58:98:
fd:5b:45:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:48:55 2026 by rpki-client