
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
File: y2bgNeLweFj09ztHjc2FpjakJQo.mft (raw, json)
Hash identifier: tt+cIcIV14PIxrZLA2MKkNWEBoetVsaXTENK89aNAqc=
Subject key identifier: 6E:39:E5:CC:A6:5C:84:F4:F4:B8:07:20:0F:24:57:C8:CE:CA:7B:1A
Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
Certificate issuer: /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Certificate serial: 01C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
Manifest number: 01A4
Signing time: Thu 23 Jul 2026 05:43:54 +0000
Manifest this update: Thu 23 Jul 2026 05:43:54 +0000
Manifest next update: Thu 30 Jul 2026 05:43:54 +0000
Files and hashes: 1: y2bgNeLweFj09ztHjc2FpjakJQo.crl (hash: 74qEqofp9R9g9qk1d3cNHSX4j+XP4V4aPO5dlUgt4J4=)
2: 851515FC1C8711EF964ED80AC4F9AE02.roa (hash: MAtmMwfjtzQ9R8LyZXq78h+1kb3Yy15h8cOKjzlP4LM=)
3: 24D519F226FA11F0B737393FC4F9AE02.roa (hash: x10D9pADYHToKbPS6t/synxTqCGYuiAeyckivfclbFs=)
4: 82D8082A292611EF875A5C36C4F9AE02.roa (hash: SyXuffXDHXPbASG7Y+LG0Brt2u6hsVNRNcrnMwVVAGw=)
5: AF27640226FA11F0B0383240C4F9AE02.roa (hash: 4LD8HC62z2DhT4Dg2lOYzbuBHzfVnUe3OyB/4hGuDkM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:43:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169C00, serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Validity
Not Before: Jul 23 05:43:54 2026 GMT
Not After : Jul 30 05:43:54 2026 GMT
Subject: CN=6a61aa1a-ea38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:17:9e:e1:6e:7b:3e:df:a3:28:f4:e4:19:
f7:0a:be:7b:bd:9d:12:75:7c:cd:6b:6e:cf:19:d1:
64:5f:99:34:e5:d6:c1:82:82:8f:c9:3b:00:c7:20:
2e:96:c5:62:4c:ea:58:d6:6d:8c:f1:eb:a2:54:76:
38:1b:5b:b4:4e:44:e0:b0:a1:50:50:11:03:5b:85:
43:a2:6a:17:d4:b6:38:2d:a4:bb:15:80:b6:98:f9:
af:af:4c:0e:d8:2b:08:ce:fe:32:09:4d:28:9d:cf:
af:4b:f5:8f:b5:db:b6:18:9a:6a:58:b1:8c:4f:87:
89:86:78:eb:bf:be:70:eb:9a:23:65:e9:37:d1:4c:
05:9a:ab:b9:de:c3:20:56:cc:46:27:c8:c5:e5:d3:
ad:e6:9d:82:67:66:40:94:cd:c5:7e:3a:12:bd:cc:
ce:71:7c:79:58:19:42:6b:a2:38:34:44:c2:9d:0e:
22:d5:60:f3:cb:4d:36:c4:8e:d7:fc:98:35:0e:82:
3f:f0:5d:b9:aa:10:64:5b:72:a9:db:0b:aa:0d:72:
81:a6:54:c3:ca:9d:78:d5:ad:e3:3e:5b:12:9a:2e:
88:8c:8f:7b:5b:72:e3:d1:c1:8b:0f:1e:34:0d:3d:
8b:73:01:7e:4b:76:92:80:83:46:dd:1a:2a:d9:45:
e6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:39:E5:CC:A6:5C:84:F4:F4:B8:07:20:0F:24:57:C8:CE:CA:7B:1A
X509v3 Authority Key Identifier:
keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:2f:31:ec:27:29:82:0e:ae:b5:b7:80:df:5d:a3:ed:c5:d9:
45:fa:a2:f9:3f:ff:7d:7d:09:b2:be:07:0c:f7:4f:95:8c:c8:
9d:c3:5c:e9:f0:93:55:af:d3:6e:e9:fa:a5:a7:8f:c4:9d:85:
15:2e:64:cc:2d:df:56:3c:33:99:d9:c8:c1:a4:5b:5b:60:3b:
8c:7a:25:a5:cd:11:fa:0d:20:a1:65:76:30:12:b4:be:50:62:
72:35:a2:c0:82:18:5a:b7:0a:20:57:59:4d:64:fc:8e:54:ed:
82:95:ac:85:6c:fd:97:c0:50:2f:3c:c5:36:6b:63:ca:8a:99:
83:b9:27:23:66:1a:9f:d4:3a:80:c6:b1:48:51:cb:55:c1:59:
40:98:d9:b8:0c:8d:80:4b:fe:34:a5:e9:e3:a5:2a:49:17:2d:
66:b9:89:7a:64:b2:7c:f9:f0:7f:cc:27:c8:bf:32:d0:24:b7:
71:63:6e:78:88:7b:1a:65:4c:62:68:e9:ec:9a:0c:c2:12:c5:
24:c5:fb:4f:a7:02:07:9e:a9:55:3e:31:85:f1:80:8d:76:25:
11:b4:00:25:4c:3a:76:45:0c:24:5e:44:b3:9a:9f:56:7e:63:
c9:69:2b:9a:b7:bf:e1:c0:c1:e4:8a:f8:25:04:d1:32:44:93:
5c:6c:9a:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlDMDAxMTAvBgNVBAUTKENCNjZFMDM1RTJGMDc4NThGNEY3M0I0NzhEQ0Q4NUE2
MzZBNDI1MEEwHhcNMjYwNzIzMDU0MzU0WhcNMjYwNzMwMDU0MzU0WjAYMRYwFAYD
VQQDEw02YTYxYWExYS1lYTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArKoXnuFuez7foyj05Bn3Cr57vZ0SdXzNa27PGdFkX5k05dbBgoKPyTsAxyAu
lsViTOpY1m2M8euiVHY4G1u0TkTgsKFQUBEDW4VDomoX1LY4LaS7FYC2mPmvr0wO
2CsIzv4yCU0onc+vS/WPtdu2GJpqWLGMT4eJhnjrv75w65ojZek30UwFmqu53sMg
VsxGJ8jF5dOt5p2CZ2ZAlM3FfjoSvczOcXx5WBlCa6I4NETCnQ4i1WDzy002xI7X
/Jg1DoI/8F25qhBkW3Kp2wuqDXKBplTDyp141a3jPlsSmi6IjI97W3Lj0cGLDx40
DT2LcwF+S3aSgING3Roq2UXmSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG455cym
XIT09LgHIA8kV8jOynsaMB8GA1UdIwQYMBaAFMtm4DXi8HhY9Pc7R43NhaY2pCUK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUMwMC8xQzMxRUFGMDFC
QzAxMUVGQkI2ODhENUVDNEY5QUUwMi95MmJnTmVMd2VGajA5enRIamMyRnBqYWtK
UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3kyYmdOZUx3ZUZqMDl6dEhqYzJGcGpha0pRby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUMwMC8xQzMxRUFGMDFCQzAxMUVGQkI2ODhENUVDNEY5QUUwMi95MmJnTmVMd2VG
ajA5enRIamMyRnBqYWtKUW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQi8x7Ccpgg6utbeA312j7cXZRfqi+T//fX0Jsr4HDPdPlYzIncNc6fCTVa/T
bun6paePxJ2FFS5kzC3fVjwzmdnIwaRbW2A7jHolpc0R+g0goWV2MBK0vlBicjWi
wIIYWrcKIFdZTWT8jlTtgpWshWz9l8BQLzzFNmtjyoqZg7knI2Yan9Q6gMaxSFHL
VcFZQJjZuAyNgEv+NKXp46UqSRctZrmJemSyfPnwf8wnyL8y0CS3cWNueIh7GmVM
Ymjp7JoMwhLFJMX7T6cCB56pVT4xhfGAjXYlEbQAJUw6dkUMJF5Es5qfVn5jyWkr
mre/4cDB5Ir4JQTRMkSTXGyaiA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:21:39 2026 by rpki-client