
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
File: y2bgNeLweFj09ztHjc2FpjakJQo.mft (raw, json)
Hash identifier: hGhKBYRk1PYh8JE+z63SXL+1/23OYBPHmB/TbILcWso=
Subject key identifier: 8E:D0:C7:60:53:E6:E1:BC:7C:88:70:ED:34:BA:6A:CF:B7:96:7F:B9
Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
Certificate issuer: /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Certificate serial: 017E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
Manifest number: 0166
Signing time: Wed 25 Mar 2026 04:14:52 +0000
Manifest this update: Wed 25 Mar 2026 04:14:51 +0000
Manifest next update: Wed 01 Apr 2026 04:14:51 +0000
Files and hashes: 1: y2bgNeLweFj09ztHjc2FpjakJQo.crl (hash: Cc3R8oKIIPbVtn84rc+lpr+Lw9W3O2BvBZ+RAKU8ZXg=)
2: AF27640226FA11F0B0383240C4F9AE02.roa (hash: vpOc+3kPV6Pm6+6TDvDUsWTnZWPzQSBq8LombYK9VIY=)
3: 851515FC1C8711EF964ED80AC4F9AE02.roa (hash: W/2vjJp/ag3H7mSzG2Tr/h0kvrzsLkkzvWHa8WaLTtU=)
4: 24D519F226FA11F0B737393FC4F9AE02.roa (hash: YOuhg57dpyAHyHYCyC+N5mtXIsEkAz+fzXjtzYd+ceI=)
5: 82D8082A292611EF875A5C36C4F9AE02.roa (hash: 4hSO5GJztFmc2Bjlelb4M86yndIsa9VSTZjFpa5DDCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:14:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169C00, serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Validity
Not Before: Mar 25 04:14:51 2026 GMT
Not After : Apr 1 04:14:51 2026 GMT
Subject: CN=69c3613c-f378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:55:b8:30:c0:e6:19:87:60:97:ee:e3:44:
cf:06:75:63:0a:63:91:7f:7d:55:18:4a:eb:35:41:
af:5c:90:13:96:2c:c7:23:cd:30:cd:44:50:6b:23:
1f:f0:ea:b3:52:b5:23:b9:b5:2f:56:c7:34:f7:60:
83:27:97:9e:93:55:65:6e:89:f4:87:18:93:ef:93:
17:e9:a6:7a:d0:5b:10:7f:ec:2f:d8:65:25:0b:75:
7f:5c:26:5b:0f:85:fb:6a:33:3c:b1:92:10:ea:9a:
f6:44:e3:f2:4a:df:2e:08:78:5f:a6:65:65:26:42:
16:11:b2:01:3f:2f:4e:15:bb:1d:78:6a:3d:5e:82:
1e:cf:df:eb:01:79:67:15:a4:0c:8c:b0:6a:17:94:
4f:32:58:ce:4d:89:f4:f5:3b:e7:75:a0:05:5c:52:
30:c8:9e:32:c3:22:bd:b3:9f:4c:c0:5b:74:a0:ac:
3c:ca:59:47:1f:a7:51:3d:c4:2c:67:4f:26:7a:ed:
77:a7:96:b5:7e:f6:96:e7:a1:a2:0f:9e:ec:67:ce:
83:86:e7:97:0c:82:a9:7f:03:ee:2e:1f:98:9f:58:
c9:f5:a2:1f:75:75:8c:25:35:32:2a:9b:3d:44:63:
a5:cd:a5:20:b8:fd:11:ac:cd:db:5e:60:7e:3f:61:
b2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D0:C7:60:53:E6:E1:BC:7C:88:70:ED:34:BA:6A:CF:B7:96:7F:B9
X509v3 Authority Key Identifier:
keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:d2:7b:f8:da:62:1a:3b:29:18:1b:17:c3:7d:76:1e:1e:44:
8f:3b:1b:16:64:0d:4e:cb:45:5c:16:14:2d:9a:70:db:01:df:
2a:73:94:11:b3:06:1b:c6:70:bf:2e:32:14:95:33:ce:f2:1f:
80:49:8b:5a:80:e6:e1:02:3b:91:75:b8:0c:f3:80:2c:a4:f6:
69:5f:7a:da:a1:bc:c2:84:bc:df:f9:41:8b:6b:d2:23:42:92:
38:d3:b5:fc:be:29:f8:e2:43:8d:42:8d:5a:fb:a8:ad:51:c9:
a8:4d:37:3d:ef:4c:57:5e:aa:da:71:b9:49:c7:db:33:38:d1:
02:0f:43:df:57:8a:36:83:19:a9:ea:7b:ac:6d:4a:b1:54:3f:
ce:ce:b0:8a:c4:82:ef:e6:48:cd:bf:16:cf:b8:9c:11:4a:b8:
cb:86:b7:a2:4d:60:78:70:7b:f7:30:bf:de:aa:86:5e:d2:3a:
7b:fb:98:c0:3c:95:47:65:cb:b7:84:e8:a2:b5:62:39:8c:ce:
c9:0e:00:7e:de:9f:74:1f:bd:55:37:7f:ce:87:40:28:da:c3:
8c:12:6e:09:99:88:ed:49:f3:be:4a:ae:13:21:07:e1:1e:45:
28:a8:fc:56:a9:ee:17:6f:e8:4d:4a:48:58:ce:44:52:d7:81:
ff:87:8a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:44:15 2026 by rpki-client