
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
File: YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft (raw, json)
Hash identifier: 0JFrtimxFTUsl/AEtbzWgHajJR4IqyTY7auAJK4DDFk=
Subject key identifier: 9B:91:BC:03:81:35:21:45:A1:72:D8:7F:B8:FE:F5:66:19:DB:A4:FA
Authority key identifier: 62:A2:3F:33:E9:0B:72:06:05:53:71:95:14:D0:C5:AB:C2:E2:34:47
Certificate issuer: /CN=A9182509/serialNumber=62A23F33E90B72060553719514D0C5ABC2E23447
Certificate serial: 4C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
Manifest number: 4A
Signing time: Mon 11 May 2026 08:32:11 +0000
Manifest this update: Mon 11 May 2026 08:32:10 +0000
Manifest next update: Mon 18 May 2026 08:32:10 +0000
Files and hashes: 1: YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl (hash: Jva47HPPYW9JbmBI3fiCSt7WDluxynIdkNSolWJBrbo=)
2: F50431A0E48511F0BEFBEDFF436F56BC.roa (hash: biBbqFto51rOZiPG5JNmrRxR/U8JC7IUfuy2q4b9zao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl
rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182509, serialNumber=62A23F33E90B72060553719514D0C5ABC2E23447
Validity
Not Before: May 11 08:32:10 2026 GMT
Not After : May 18 08:32:10 2026 GMT
Subject: CN=6a01940b-73de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:bf:31:bc:d4:e3:5d:2b:33:ba:43:81:37:
ec:75:53:87:dc:bd:7b:7e:ea:0b:14:16:e9:8d:d8:
87:e6:cc:b9:e8:d1:b4:21:23:99:50:47:37:c3:2b:
24:3a:14:fe:18:16:a7:77:b4:9c:c8:ab:b5:56:37:
6d:34:5f:c0:b0:66:da:30:26:b6:4c:99:fa:fc:8a:
26:c4:11:c9:2d:1c:b3:a5:2b:ce:8f:be:3b:15:a9:
fe:fc:6c:81:2d:ea:22:77:54:f4:e1:e7:e3:53:57:
35:9c:ff:d1:8f:bf:d9:79:a3:ed:ca:df:8a:2e:a7:
44:7c:53:1f:c8:db:58:1c:42:d2:1e:07:23:1c:e5:
41:85:89:31:19:62:88:c0:b6:2a:50:9b:b1:c7:ac:
aa:f3:2d:16:c3:41:4f:3a:bf:84:e8:8f:2e:3e:da:
b1:21:c7:e3:b0:7b:8f:2d:c1:21:75:39:37:67:8f:
72:04:bb:f4:e7:42:25:af:74:b1:88:7a:a7:94:56:
1e:71:c8:fe:47:f1:28:ef:45:f1:a2:70:6b:8c:29:
1c:97:1e:de:6f:0c:a0:f4:73:24:7f:d3:a9:ea:ff:
5d:52:c2:21:8a:a7:2b:ce:34:3b:dc:9a:eb:1d:68:
0b:ff:a2:28:d5:cd:b8:ee:7c:a9:69:a5:eb:44:24:
28:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:91:BC:03:81:35:21:45:A1:72:D8:7F:B8:FE:F5:66:19:DB:A4:FA
X509v3 Authority Key Identifier:
keyid:62:A2:3F:33:E9:0B:72:06:05:53:71:95:14:D0:C5:AB:C2:E2:34:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1c:9e:72:d0:f8:94:08:c6:ad:7b:b9:7e:dc:67:31:39:a3:
d9:e3:a4:88:a8:44:e6:a7:69:2c:42:bb:65:49:cd:10:9a:02:
d6:a7:5f:1e:c8:7e:9e:fc:72:45:93:ae:55:c4:42:d4:08:5a:
64:fe:f8:4b:9b:6a:8c:69:6b:a5:66:a9:d9:dd:ef:b5:f0:22:
16:4c:c6:0f:73:3b:27:a0:ce:fd:7a:94:d2:c7:d4:61:b9:15:
33:9d:95:b4:b8:6e:39:37:74:e2:53:3b:19:82:68:6d:59:da:
1c:26:fc:b1:5b:16:bb:0e:9a:5c:c8:71:19:ca:6b:44:7f:81:
17:84:81:1b:16:62:49:92:a2:27:25:02:43:6c:e5:3e:81:ca:
f9:c4:03:ea:3c:6f:58:82:af:ef:c0:74:f5:a3:15:50:5c:87:
33:c9:d1:1b:20:7d:f9:2d:6a:37:bf:db:b9:98:e6:1f:58:12:
de:6d:c7:de:05:14:b5:aa:76:a4:9e:13:aa:88:5c:74:3c:c1:
8c:a6:de:a2:d2:cb:25:42:ee:6c:ab:09:b9:54:40:c7:c3:da:
1a:39:8b:ec:df:c9:0b:b2:27:2f:1d:ff:0a:f4:fe:1f:dc:9b:
4d:a1:b3:cf:c5:d3:75:ea:c6:40:62:6b:9a:37:28:fc:f6:d3:
03:6e:f7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:18:36 2026 by rpki-client