
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft
File: yYWS4c0LLnYQyEsC5mHL8zb_r10.mft (raw, json)
Hash identifier: kpc7A6WOqZgEsEgVuT+FMsYPTwywFlMtysseddsUdt0=
Subject key identifier: 0B:C6:A9:CC:C0:0A:25:B6:80:48:0F:30:AA:1A:65:B4:60:A5:94:A4
Authority key identifier: C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D
Certificate issuer: /CN=A9168E98/serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D
Certificate serial: 08F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft
Manifest number: 08E3
Signing time: Tue 22 Sep 2026 20:12:17 +0000
Manifest this update: Tue 22 Sep 2026 20:12:16 +0000
Manifest next update: Tue 29 Sep 2026 20:12:16 +0000
Files and hashes: 1: yYWS4c0LLnYQyEsC5mHL8zb_r10.crl (hash: YdCV7gL4hJC4y//OR92aE9ADTY6Wl9M28PmNod6en8M=)
2: 782C78F4A65E11F1BAC9D9C2A7EE528E.roa (hash: Pju7HoIdJiFbAxcT7nRxRIemng5N0Ec78k4EEmF9TnE=)
3: fV-ZRNunddULrLj5NmHfYBUz1pA.asa (hash: rIPXVkRYSalAzmKOTqoaUc4rCYh0/0sDazLqVxP6OUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl
rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2290 (0x8f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168E98, serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D
Validity
Not Before: Sep 22 20:12:16 2026 GMT
Not After : Sep 29 20:12:16 2026 GMT
Subject: CN=6ab2e121-eaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:9b:f8:be:b0:39:82:39:45:df:61:8e:3e:
15:0a:c5:b2:fd:09:c4:24:27:5b:90:c1:e6:d3:36:
da:a3:fc:84:17:3c:76:0e:46:1b:9f:06:bc:ab:86:
0d:4c:2e:eb:80:54:c9:3b:a6:db:bb:7d:4e:35:78:
c6:ed:cd:56:f2:5d:11:59:b7:c3:16:d8:91:e0:06:
14:d6:2a:64:d3:01:9b:44:e2:e4:25:1e:a9:cc:7a:
e3:62:e6:d7:2d:94:be:79:47:e9:12:4e:d4:2f:76:
80:07:4a:dc:ce:ec:90:76:20:e8:dd:c4:83:fc:c8:
37:c8:01:8e:fb:30:a3:87:ba:ee:84:8d:23:45:04:
b5:79:b7:15:98:2b:79:12:67:d9:cf:5a:ea:ad:88:
66:55:bf:e7:8f:fd:06:8c:07:fd:f4:82:9c:fe:48:
4e:11:ea:1d:6a:25:43:fd:da:b4:eb:12:ff:6a:f2:
7b:5a:1a:56:cc:0a:2f:92:a3:5e:a0:44:33:d0:a1:
db:52:71:6b:09:34:2f:18:e3:36:32:10:87:de:81:
43:a2:49:59:2d:ab:f5:1f:97:39:26:36:36:9c:51:
cd:89:95:39:00:7c:4e:41:76:79:b6:63:a5:e3:43:
58:1c:87:ac:07:1e:13:10:44:21:14:2e:f8:cc:31:
42:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C6:A9:CC:C0:0A:25:B6:80:48:0F:30:AA:1A:65:B4:60:A5:94:A4
X509v3 Authority Key Identifier:
keyid:C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:91:6a:52:0d:d8:8b:c6:c9:66:ba:39:d1:1a:cf:bc:73:e9:
dd:42:f1:98:a9:33:83:f6:ad:c4:4f:0e:d2:a5:4b:31:f1:76:
90:48:74:1a:83:f3:d8:61:e0:54:76:e7:a1:5e:b5:ad:7d:6a:
ed:3e:36:5d:93:30:52:05:a7:11:21:ee:d4:d0:98:5e:42:47:
4e:c3:6d:9e:78:02:8f:94:ac:f6:92:c9:3e:13:27:4d:73:86:
a2:99:0c:81:80:16:2a:20:a5:14:e1:f4:15:2e:17:4a:a6:a1:
f1:7e:e6:27:9c:f4:d5:e8:3f:f2:a9:39:90:2a:bc:f8:c8:d3:
02:91:a1:58:90:8a:df:99:5d:73:f8:64:8c:2c:0e:68:71:fe:
53:c8:12:4a:36:cc:78:c7:b7:2d:64:1a:1f:c7:d0:ce:f3:92:
2f:37:bb:b9:bd:be:b3:20:30:cc:3d:c2:8c:0a:4f:54:3d:16:
99:90:5b:b7:0c:9a:6a:2e:6f:9e:04:94:3c:b5:db:3e:ae:99:
c8:0a:d4:48:eb:79:51:07:9c:24:6a:24:36:3c:8f:62:a5:66:
5e:3a:1e:0c:86:c4:15:48:57:44:47:67:7f:db:05:99:a8:3e:
4c:c4:3c:9b:ea:4b:9f:10:18:d8:a2:2a:5e:bf:96:e0:5a:2e:
a0:e2:e3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:21:50 2026 by rpki-client