
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
File: Y04osQAuVW6OsU-VPq1jttZ3WAk.mft (raw, json)
Hash identifier: bpXjrcOYPUqAfhThh+lQ4AgA/E6xQOvDkuMsNlUVZqo=
Subject key identifier: 86:8A:94:25:61:DF:1A:2F:09:EB:84:AF:31:50:EF:AD:76:10:29:5F
Authority key identifier: 63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09
Certificate issuer: /CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
Certificate serial: 024E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
Manifest number: 0238
Signing time: Thu 23 Jul 2026 04:10:33 +0000
Manifest this update: Thu 23 Jul 2026 04:10:33 +0000
Manifest next update: Thu 30 Jul 2026 04:10:33 +0000
Files and hashes: 1: Y04osQAuVW6OsU-VPq1jttZ3WAk.crl (hash: VXtNMGGe44+mA4Ph9Uu/zZmy289iW7EfTaWYe3CEQKo=)
2: F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa (hash: cgC2ydMTGIHogqUutqNvoyHdmfwEliEqE+1X5oBYTDA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl
rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:10:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590 (0x24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194C0D, serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
Validity
Not Before: Jul 23 04:10:33 2026 GMT
Not After : Jul 30 04:10:33 2026 GMT
Subject: CN=6a619439-b35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:d3:64:8c:a3:79:43:d7:1d:64:4e:5d:af:
da:6b:26:fb:b4:56:a9:62:0c:52:94:d8:93:83:e9:
ac:f1:93:ce:f3:01:5e:08:da:de:e5:57:f6:90:2f:
27:d1:67:69:ac:37:ac:21:75:23:52:6d:9d:4c:ce:
b2:cb:d3:9e:eb:13:00:fe:8f:10:62:38:d1:bb:ab:
ce:a5:76:ef:74:f7:08:1d:bc:da:9b:71:0c:a6:2b:
35:6d:7a:a7:a1:86:dc:e7:46:37:43:b6:bd:49:ff:
8c:14:b8:30:f9:ef:7f:e7:bf:4d:3e:6f:48:4a:cf:
8b:04:5e:60:20:7a:28:05:43:b3:aa:17:06:9b:66:
ea:d0:7a:18:41:46:ab:9d:f9:9f:4b:f8:aa:b6:51:
aa:c9:eb:61:28:b7:af:cd:62:8b:db:ba:16:76:50:
52:d6:de:3b:d8:e2:f2:b1:06:8d:d1:68:f5:d8:24:
1f:59:59:17:0a:00:61:da:74:8b:35:c2:b3:47:96:
92:47:91:9e:ec:53:c6:05:16:26:b2:7f:75:e6:1e:
39:ae:1d:bb:1e:d0:7f:4c:2a:76:f2:af:35:54:47:
66:af:72:c3:28:06:96:de:7d:9e:c6:ed:30:3c:c3:
49:48:23:1a:db:e9:36:92:59:6b:d3:6a:08:93:66:
fc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8A:94:25:61:DF:1A:2F:09:EB:84:AF:31:50:EF:AD:76:10:29:5F
X509v3 Authority Key Identifier:
keyid:63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e7:a4:80:34:3c:a3:a3:e8:c0:4c:44:ed:8b:56:0a:82:e8:4d:
47:04:ec:a4:37:c1:97:19:a0:dd:aa:5e:d8:a2:74:4d:89:b5:
49:f3:17:68:36:83:1a:a6:ce:2c:a6:55:5a:1c:0c:c0:5e:70:
2f:09:ea:53:79:78:b6:b5:d7:c3:a0:d9:8a:da:cd:41:3a:bc:
13:b6:78:99:3e:59:bb:71:3f:88:52:37:8b:ea:e7:2e:d0:53:
65:01:ee:76:2a:d3:ec:cb:80:af:44:10:14:cd:c8:ea:5d:04:
20:08:fe:50:bd:d9:2a:5a:2e:cd:e9:fa:42:dc:75:01:45:1e:
d9:ee:ab:ad:4d:08:e6:88:c5:25:a7:60:bf:40:ef:ef:4f:de:
f5:ba:da:91:13:72:12:41:5f:13:10:8f:f0:11:8f:dd:6f:d3:
49:c2:f6:66:fa:13:49:8e:63:31:97:61:8a:6f:81:fd:ee:f2:
93:26:7b:5c:1c:a8:e1:26:af:9f:4d:b8:27:08:31:b8:be:e7:
9d:09:56:8e:5b:d8:ee:72:4b:5d:a1:3b:83:88:b3:7b:d7:61:
c0:2b:58:0e:14:c8:04:6d:5a:c8:81:cc:2e:a1:a9:d5:3d:12:
fe:bc:bc:2b:d2:38:8a:e5:49:27:1c:48:d0:1e:ec:4f:70:ec:
0c:53:fd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:30:30 2026 by rpki-client