
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175FD2/D5989518A82F11F189CAAA7B3511F970/ydng2CxkMec8k65V7gMJ6xAaqz4.mft
File: ydng2CxkMec8k65V7gMJ6xAaqz4.mft (raw, json)
Hash identifier: u9qRvB/Jdf/v976zY8Z6lHpqqTX7nnHGjxUBHBQV4pE=
Subject key identifier: 21:D3:67:9B:0F:40:E3:A1:2C:58:C2:20:F2:20:EB:CA:2F:FC:3B:64
Authority key identifier: C9:D9:E0:D8:2C:64:31:E7:3C:93:AE:55:EE:03:09:EB:10:1A:AB:3E
Certificate issuer: /CN=A9175FD2/serialNumber=C9D9E0D82C6431E73C93AE55EE0309EB101AAB3E
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ydng2CxkMec8k65V7gMJ6xAaqz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175FD2/D5989518A82F11F189CAAA7B3511F970/ydng2CxkMec8k65V7gMJ6xAaqz4.mft
Manifest number: 0D
Signing time: Wed 23 Sep 2026 08:55:09 +0000
Manifest this update: Wed 23 Sep 2026 08:55:09 +0000
Manifest next update: Wed 30 Sep 2026 08:55:09 +0000
Files and hashes: 1: ydng2CxkMec8k65V7gMJ6xAaqz4.crl (hash: vJJQcwdQ8rUr+XSuoIvGQCylxdhuswHKbx3raRQoEsk=)
2: 1D8BBB2AA83011F1A305C5833511F970.roa (hash: 7QXnUtP13fTricsaeFoI/Or7NbiijQkbrf+qG02XcaE=)
3: 8jO73dI1-jpS3v_OajBexhsgyEo.asa (hash: cMxjjwyRMvaA7cb2h9MgRse7lhTgAivhkaHy7NeQXjE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175FD2/D5989518A82F11F189CAAA7B3511F970/ydng2CxkMec8k65V7gMJ6xAaqz4.crl
rsync://rpki.apnic.net/member_repository/A9175FD2/D5989518A82F11F189CAAA7B3511F970/ydng2CxkMec8k65V7gMJ6xAaqz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ydng2CxkMec8k65V7gMJ6xAaqz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:55:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175FD2, serialNumber=C9D9E0D82C6431E73C93AE55EE0309EB101AAB3E
Validity
Not Before: Sep 23 08:55:09 2026 GMT
Not After : Sep 30 08:55:09 2026 GMT
Subject: CN=6ab393ed-5e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:dd:fd:c1:ef:43:88:cc:5f:23:90:3f:11:
af:c0:1d:cc:7b:e7:60:cc:80:61:76:04:06:b8:e6:
ef:8b:42:71:14:70:14:9c:79:14:7d:b6:60:0e:0b:
32:ed:4f:f6:cb:96:f2:6e:40:a1:18:c4:e6:9f:55:
19:57:94:73:ad:ad:2c:51:66:f1:4b:f2:c0:3f:db:
b9:16:04:b5:80:24:14:7e:e9:d1:cb:f4:32:53:4b:
67:dc:e3:ea:00:d2:e2:95:4d:2d:be:12:ce:69:e3:
e2:4a:31:02:15:dd:27:b8:f3:57:e3:0a:38:88:58:
2e:4a:57:7e:e0:84:9b:4a:1f:eb:30:3c:23:dd:c1:
fa:59:f0:a6:c0:59:07:22:f1:35:13:da:ca:c5:4d:
eb:ba:1d:56:8d:e1:b9:e9:38:67:0b:2c:e2:f2:9c:
82:f9:f3:d9:6a:cc:f7:7b:ce:81:c0:d2:fc:12:3f:
b8:99:67:1b:9b:40:ba:da:12:78:9f:65:5f:31:91:
b9:08:09:08:82:fd:1b:20:dc:ce:fe:c4:ce:97:b1:
42:0c:57:f9:d1:a9:14:ad:d3:b4:ef:74:40:f7:98:
3a:a9:ed:46:f0:ec:8c:72:24:72:d5:4d:83:62:1f:
62:c5:c9:df:15:bc:08:72:c3:d4:9e:5d:8d:5d:f8:
7d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D3:67:9B:0F:40:E3:A1:2C:58:C2:20:F2:20:EB:CA:2F:FC:3B:64
X509v3 Authority Key Identifier:
keyid:C9:D9:E0:D8:2C:64:31:E7:3C:93:AE:55:EE:03:09:EB:10:1A:AB:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175FD2/D5989518A82F11F189CAAA7B3511F970/ydng2CxkMec8k65V7gMJ6xAaqz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ydng2CxkMec8k65V7gMJ6xAaqz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175FD2/D5989518A82F11F189CAAA7B3511F970/ydng2CxkMec8k65V7gMJ6xAaqz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:d4:93:0c:a1:96:c6:94:bb:da:5f:ce:44:ec:75:66:e5:b8:
ee:88:0c:32:6c:1d:2d:b5:90:8b:f4:01:2e:18:9a:0b:85:20:
21:d3:ce:74:e2:1b:6a:fd:af:28:87:47:10:fa:a7:82:b6:9e:
a6:f1:83:67:87:78:00:71:46:65:e7:eb:cb:8b:26:35:b3:db:
c6:f3:5c:ec:4a:61:40:ae:11:b8:c9:45:72:5f:bd:71:60:fa:
22:82:7d:e8:49:7f:25:fd:89:2b:13:0f:93:26:11:81:51:4c:
f0:1f:58:3a:fd:fa:07:07:af:4c:52:9c:2d:95:3b:06:eb:fd:
16:39:97:93:19:a8:0d:04:c1:c6:fd:3f:60:b2:b7:91:90:ae:
71:24:43:6d:93:ad:34:6b:e5:f0:a2:91:3f:09:80:12:1c:e4:
dd:02:13:30:db:ea:ae:f7:74:53:40:c6:a9:f0:62:5b:2b:23:
2b:7b:55:50:61:b5:3a:c5:4e:db:6d:94:f6:b5:05:84:48:40:
0d:10:2a:9c:40:1b:30:2d:67:c9:57:58:d7:3e:14:33:a1:58:
3d:08:d4:a0:59:8e:61:ad:00:e9:19:26:7b:1e:87:24:5b:00:
39:61:bb:30:46:51:32:7c:0c:6a:f3:b2:ba:ac:b5:63:d1:4c:
6e:0a:62:31
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NUZEMjExMC8GA1UEBRMoQzlEOUUwRDgyQzY0MzFFNzNDOTNBRTU1RUUwMzA5RUIx
MDFBQUIzRTAeFw0yNjA5MjMwODU1MDlaFw0yNjA5MzAwODU1MDlaMBgxFjAUBgNV
BAMTDTZhYjM5M2VkLTVlODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC04939we9DiMxfI5A/Ea/AHcx752DMgGF2BAa45u+LQnEUcBSceRR9tmAOCzLt
T/bLlvJuQKEYxOafVRlXlHOtrSxRZvFL8sA/27kWBLWAJBR+6dHL9DJTS2fc4+oA
0uKVTS2+Es5p4+JKMQIV3Se481fjCjiIWC5KV37ghJtKH+swPCPdwfpZ8KbAWQci
8TUT2srFTeu6HVaN4bnpOGcLLOLynIL589lqzPd7zoHA0vwSP7iZZxubQLraEnif
ZV8xkbkICQiC/Rsg3M7+xM6XsUIMV/nRqRSt07TvdED3mDqp7Ubw7IxyJHLVTYNi
H2LFyd8VvAhyw9SeXY1d+H1bAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIdNnmw9A
46EsWMIg8iDryi/8O2QwHwYDVR0jBBgwFoAUydng2CxkMec8k65V7gMJ6xAaqz4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1RkQyL0Q1OTg5NTE4QTgy
RjExRjE4OUNBQUE3QjM1MTFGOTcwL3lkbmcyQ3hrTWVjOGs2NVY3Z01KNnhBYXF6
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveWRuZzJDeGtNZWM4azY1VjdnTUo2eEFhcXo0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1
RkQyL0Q1OTg5NTE4QTgyRjExRjE4OUNBQUE3QjM1MTFGOTcwL3lkbmcyQ3hrTWVj
OGs2NVY3Z01KNnhBYXF6NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBz1JMMoZbGlLvaX85E7HVm5bjuiAwybB0ttZCL9AEuGJoLhSAh08504htq/a8o
h0cQ+qeCtp6m8YNnh3gAcUZl5+vLiyY1s9vG81zsSmFArhG4yUVyX71xYPoign3o
SX8l/YkrEw+TJhGBUUzwH1g6/foHB69MUpwtlTsG6/0WOZeTGagNBMHG/T9gsreR
kK5xJENtk600a+XwopE/CYASHOTdAhMw2+qu93RTQMap8GJbKyMre1VQYbU6xU7b
bZT2tQWESEANECqcQBswLWfJV1jXPhQzoVg9CNSgWY5hrQDpGSZ7HockWwA5Ybsw
RlEyfAxq87K6rLVj0UxuCmIx
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:37:15 2026 by rpki-client