
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
File: Y04osQAuVW6OsU-VPq1jttZ3WAk.mft (raw, json)
Hash identifier: +Noe+SZduhhEvB9tcj3vH6v401kOUfvoGE0tQUNOiWI=
Subject key identifier: 00:62:DF:2A:BE:D5:E9:0D:DF:3B:9D:4E:5E:F0:75:3A:96:BD:B7:49
Authority key identifier: 63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09
Certificate issuer: /CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
Certificate serial: 026F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
Manifest number: 0259
Signing time: Fri 25 Sep 2026 02:38:48 +0000
Manifest this update: Fri 25 Sep 2026 02:38:48 +0000
Manifest next update: Fri 02 Oct 2026 02:38:48 +0000
Files and hashes: 1: Y04osQAuVW6OsU-VPq1jttZ3WAk.crl (hash: Iu3vFVhJIk+oL1jmKZitL540MKhVzHtgZb2zWp/s+GY=)
2: F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa (hash: cgC2ydMTGIHogqUutqNvoyHdmfwEliEqE+1X5oBYTDA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl
rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:38:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194C0D, serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
Validity
Not Before: Sep 25 02:38:48 2026 GMT
Not After : Oct 2 02:38:48 2026 GMT
Subject: CN=6ab5deb8-dc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0b:d8:85:04:08:07:db:ad:45:d1:c7:6b:f6:
b6:fe:d1:33:cf:05:31:37:b6:43:c4:3c:d2:5c:e5:
f7:bd:e3:17:e7:58:87:be:d4:87:05:0f:8a:e3:ad:
66:ca:1c:31:d0:c8:c3:f6:95:99:5a:fa:70:da:78:
0b:bf:56:36:85:39:9d:3a:07:8f:64:6e:90:53:63:
fc:62:bb:ea:98:3f:76:16:a8:c9:3c:1c:07:f2:49:
a2:43:bc:1a:61:96:84:03:58:11:3a:3b:4a:a8:5f:
94:a1:c6:bf:f3:f7:87:ae:62:d7:17:a4:77:74:73:
35:b5:2e:80:36:76:e2:a8:ff:8f:08:48:f6:2f:f6:
f1:cf:76:06:b8:bd:11:48:1d:c6:21:9c:37:d9:40:
3e:38:68:c1:28:f9:d4:5b:9e:2d:1f:47:10:94:31:
f0:5e:6d:91:40:76:8e:35:90:59:92:a9:ab:b4:b7:
8d:b3:67:56:d8:59:b2:8d:7d:ec:9b:16:d1:b2:19:
b1:e8:e8:8b:49:a9:7a:8b:ab:37:cd:49:b9:5c:ed:
f0:4b:66:43:de:c1:bc:fe:fb:9a:c6:9b:8e:cc:19:
8f:ed:47:6a:fe:24:e8:54:97:cd:da:24:92:3a:37:
82:0e:33:fc:1a:8c:78:32:9f:f6:8a:26:9a:16:56:
af:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:62:DF:2A:BE:D5:E9:0D:DF:3B:9D:4E:5E:F0:75:3A:96:BD:B7:49
X509v3 Authority Key Identifier:
keyid:63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:26:75:8f:e3:20:5e:7c:17:fd:64:cc:ea:b3:c0:3f:2d:44:
4e:48:13:8e:55:1d:eb:a3:df:78:49:34:e3:25:f0:cb:c4:a3:
af:64:30:81:60:1e:0a:c0:ce:4b:ee:f8:2a:af:90:d0:55:95:
cb:0e:25:c4:c1:87:db:62:aa:38:4c:50:4e:dd:b7:0f:c8:a5:
32:97:e7:5b:96:c7:86:65:63:43:fe:29:a7:b1:a1:4d:e0:ad:
7a:bd:87:a8:9d:09:60:02:c3:a8:e6:f1:1a:5e:1b:b8:69:31:
a1:45:3b:43:d4:57:84:01:f9:e9:30:c1:fc:7d:a6:07:b9:e9:
4f:c8:ea:a7:ba:96:b7:07:5e:21:02:46:9d:fa:a5:f1:e7:ce:
3f:6f:89:27:fc:e9:2d:5e:fa:81:65:4f:2b:ca:18:26:59:19:
0e:93:e3:de:50:e8:2b:f6:c2:35:fc:55:e4:89:47:cc:de:67:
25:98:db:25:a8:b6:83:69:59:f6:31:74:67:8f:43:77:4f:19:
bc:c9:ed:45:83:8e:94:17:35:d4:ed:c8:e6:dc:49:2e:d4:80:
e5:22:49:6f:c0:36:44:fe:b7:ec:74:00:07:1e:f3:44:3f:27:
20:43:5b:50:ee:81:ac:c6:2d:4f:cd:d3:d1:fc:14:5d:24:bd:
f8:b1:dd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:13:18 2026 by rpki-client