
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
File: kYy2egJiI43veP8oikXZKB-V0us.mft (raw, json)
Hash identifier: LucwYTSNYIOQF/Gm9kI4kKIsFNBgd6X3FxrmGsaH+G0=
Subject key identifier: 9F:A7:2B:25:C0:CE:77:3A:FD:CB:7F:76:98:C1:09:FC:6D:A2:B0:CC
Authority key identifier: 91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB
Certificate issuer: /CN=A9168946/serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
Manifest number: 019A
Signing time: Fri 27 Mar 2026 03:45:29 +0000
Manifest this update: Fri 27 Mar 2026 03:45:29 +0000
Manifest next update: Fri 03 Apr 2026 03:45:29 +0000
Files and hashes: 1: kYy2egJiI43veP8oikXZKB-V0us.crl (hash: je2R/ZqdMb3kUhmuYhbtOtViCiiqCVCAKr07Y/SzLbM=)
2: B36E0BFAB8C511EE9C927072C4F9AE02.roa (hash: JGL3NS6zHatfQyunYpV2o7IA7UcrTbcUE/V2u2eDzGQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl
rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 03:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168946, serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB
Validity
Not Before: Mar 27 03:45:29 2026 GMT
Not After : Apr 3 03:45:29 2026 GMT
Subject: CN=69c5fd59-1e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e6:94:09:6a:cf:c2:09:46:a2:e3:94:f8:6b:
e0:1d:d0:81:2e:b7:2a:fc:37:0c:87:6a:3d:13:90:
fd:01:9a:65:71:51:51:c7:e8:a5:45:de:9f:4b:57:
a0:0e:2e:f2:c5:9a:0f:c5:b8:48:ff:2d:80:86:59:
a6:d0:3e:5c:0c:d3:7b:e2:f9:97:d0:b6:6f:e5:f3:
82:2a:73:fd:0d:89:47:e6:4a:b5:8e:cf:45:92:20:
7f:c7:e7:17:4d:a5:57:83:18:e7:c2:9a:ce:59:2c:
eb:7a:ef:f4:66:00:c3:12:f1:e4:b7:1c:58:55:d1:
ca:17:b5:58:27:ba:26:40:c7:82:4d:bd:a1:0b:64:
4b:4c:c2:cb:d0:a5:d6:8d:1b:9d:c5:a5:8d:8f:da:
ca:e2:47:33:44:ed:7d:f7:f6:e6:21:a4:aa:91:7f:
67:fb:7d:de:a6:03:e3:c1:f3:40:0c:c4:71:db:a4:
64:f4:5a:68:9f:fd:7c:37:1f:88:cf:98:13:f5:06:
e3:30:c3:d1:a9:86:0b:a6:6c:0e:15:f4:27:d5:27:
57:6c:f8:d2:0b:b0:d6:68:42:16:e4:c4:2a:6f:53:
0e:56:8a:cb:ea:2d:f1:23:71:41:8d:53:68:e7:f6:
4c:0a:1e:07:40:23:bb:92:a0:7c:91:6c:8e:9c:00:
52:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A7:2B:25:C0:CE:77:3A:FD:CB:7F:76:98:C1:09:FC:6D:A2:B0:CC
X509v3 Authority Key Identifier:
keyid:91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:dc:fe:a0:ac:84:8d:55:47:9a:b5:e8:ee:a4:b0:4f:11:29:
11:01:0c:16:fe:96:f6:c6:5e:fa:06:c6:8b:e3:64:ab:ec:b4:
c0:9b:e6:7f:bd:15:07:be:fc:fc:b6:ed:9f:03:5b:47:18:66:
fd:83:65:d3:b4:50:90:b7:c3:4c:3d:ed:6e:b6:a5:db:6b:d9:
31:da:2f:5f:d8:18:39:76:7b:76:91:cc:02:f7:e5:38:37:be:
11:56:49:12:bd:47:7a:5d:fd:fe:a2:f3:b8:ef:52:8e:87:bf:
37:97:cf:b9:54:b5:51:93:76:15:cc:ea:cf:31:ff:11:6b:84:
ef:c6:81:36:0d:6e:95:d2:b2:46:26:25:2d:3d:33:24:b6:36:
20:33:5c:ff:e8:07:f7:cf:d7:51:08:da:6b:8c:5e:81:fa:1f:
fa:72:18:72:13:fc:5b:c9:37:c2:3f:cc:11:ae:77:b6:71:d2:
10:3d:96:87:a0:52:ca:7c:80:df:c8:7f:b8:05:16:b6:1b:b8:
00:df:ff:8c:b9:e8:b1:44:bc:65:31:53:1a:c1:5c:4d:d8:8a:
a6:d3:3c:3f:d5:52:a4:a6:6b:9b:be:2d:a2:37:ef:f1:c5:c8:
35:f8:cc:f8:82:8b:1b:14:dd:64:94:cf:72:9f:b1:17:e5:0e:
5b:9b:f3:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg5NDYxMTAvBgNVBAUTKDkxOENCNjdBMDI2MjIzOERFRjc4RkYyODhBNDVEOTI4
MUY5NUQyRUIwHhcNMjYwMzI3MDM0NTI5WhcNMjYwNDAzMDM0NTI5WjAYMRYwFAYD
VQQDEw02OWM1ZmQ1OS0xZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApOaUCWrPwglGouOU+GvgHdCBLrcq/DcMh2o9E5D9AZplcVFRx+ilRd6fS1eg
Di7yxZoPxbhI/y2Ahlmm0D5cDNN74vmX0LZv5fOCKnP9DYlH5kq1js9FkiB/x+cX
TaVXgxjnwprOWSzreu/0ZgDDEvHktxxYVdHKF7VYJ7omQMeCTb2hC2RLTMLL0KXW
jRudxaWNj9rK4kczRO199/bmIaSqkX9n+33epgPjwfNADMRx26Rk9Fpon/18Nx+I
z5gT9QbjMMPRqYYLpmwOFfQn1SdXbPjSC7DWaEIW5MQqb1MOVorL6i3xI3FBjVNo
5/ZMCh4HQCO7kqB8kWyOnABSPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ+nKyXA
znc6/ct/dpjBCfxtorDMMB8GA1UdIwQYMBaAFJGMtnoCYiON73j/KIpF2SgfldLr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk0Ni9DNDAwNkE4OEI4
QzIxMUVFQjVGNzJCNkRDNEY5QUUwMi9rWXkyZWdKaUk0M3ZlUDhvaWtYWktCLVYw
dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tZeTJlZ0ppSTQzdmVQOG9pa1haS0ItVjB1cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODk0Ni9DNDAwNkE4OEI4QzIxMUVFQjVGNzJCNkRDNEY5QUUwMi9rWXkyZWdKaUk0
M3ZlUDhvaWtYWktCLVYwdXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgdz+oKyEjVVHmrXo7qSwTxEpEQEMFv6W9sZe+gbGi+Nkq+y0wJvmf70VB778
/LbtnwNbRxhm/YNl07RQkLfDTD3tbral22vZMdovX9gYOXZ7dpHMAvflODe+EVZJ
Er1Hel39/qLzuO9Sjoe/N5fPuVS1UZN2FczqzzH/EWuE78aBNg1uldKyRiYlLT0z
JLY2IDNc/+gH98/XUQjaa4xegfof+nIYchP8W8k3wj/MEa53tnHSED2Wh6BSynyA
38h/uAUWthu4AN//jLnosUS8ZTFTGsFcTdiKptM8P9VSpKZrm74tojfv8cXINfjM
+IKLGxTdZJTPcp+xF+UOW5vzCg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:13 2026 by rpki-client