
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft
File: Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft (raw, json)
Hash identifier: qG0goeb4KsdXaFfp5FT0SOI7NCf71E0Lm+V+UbQFzOA=
Subject key identifier: 2B:5B:EE:25:B4:F0:57:4D:19:FA:9B:D7:B8:CF:E9:72:3A:EF:05:0B
Authority key identifier: 63:F3:59:A6:9E:DC:38:63:48:6F:46:D6:14:1F:9B:5C:01:43:23:FB
Certificate issuer: /CN=A9110C2F/serialNumber=63F359A69EDC3863486F46D6141F9B5C014323FB
Certificate serial: C0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft
Manifest number: BD
Signing time: Sun 08 Nov 2026 14:53:30 +0000
Manifest this update: Sun 08 Nov 2026 14:53:29 +0000
Manifest next update: Sun 15 Nov 2026 14:53:29 +0000
Files and hashes: 1: Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl (hash: IjpF6RGtw3jaY8FR3jIkkkEjTUMeOz1dFWYfBxfj90c=)
2: 357B8ABEC67F11F08B0CE042C4F9AE02.roa (hash: nw9otOiCwQ8wtLQCh0wMrV+Kd/Ck+Jle9oO9lFGDeX0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl
rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 14:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C2F, serialNumber=63F359A69EDC3863486F46D6141F9B5C014323FB
Validity
Not Before: Nov 8 14:53:29 2026 GMT
Not After : Nov 15 14:53:29 2026 GMT
Subject: CN=6af08cea-3c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:4b:cf:ba:20:9a:ea:16:bb:96:83:09:da:
5c:f9:62:3a:bf:04:bc:bd:8e:94:5d:b9:ba:02:bb:
3e:ba:9d:7a:e4:3f:5b:b3:de:e9:28:04:11:d6:57:
d7:56:3e:9f:ce:a3:b7:48:77:11:36:21:75:be:70:
c9:eb:32:ba:70:74:9f:15:f8:1c:5b:2a:08:87:af:
66:9b:b5:78:c0:c4:6e:60:71:3e:46:98:7b:1a:e1:
f4:64:b8:08:b1:95:2e:ea:39:db:9b:9c:5b:50:83:
b3:04:d3:72:c1:c8:69:d5:6e:5e:0f:38:71:52:1b:
3d:3e:93:1f:1a:7e:c6:ed:d9:53:6e:fc:26:46:90:
6f:db:da:a6:95:e3:40:2a:3a:18:4e:f3:c7:22:36:
50:46:67:90:24:d3:ec:8d:24:a9:15:71:b1:bb:4e:
d9:0d:db:e6:67:63:29:79:34:38:99:2e:20:5f:91:
b6:23:62:3b:7f:dd:c9:e1:7c:d1:27:ec:0e:05:e3:
3f:de:0a:ab:0a:07:01:f3:90:4c:b0:db:1b:f2:05:
a2:63:e8:c1:c6:30:77:2c:41:a8:be:35:e2:a7:39:
79:9b:32:f0:d1:64:97:09:35:84:64:d9:7f:87:3d:
66:09:0e:07:fd:c5:d8:41:36:ba:94:97:d8:f3:5b:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5B:EE:25:B4:F0:57:4D:19:FA:9B:D7:B8:CF:E9:72:3A:EF:05:0B
X509v3 Authority Key Identifier:
keyid:63:F3:59:A6:9E:DC:38:63:48:6F:46:D6:14:1F:9B:5C:01:43:23:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:9a:30:76:3f:68:62:3f:a1:7c:89:f0:af:af:3f:b8:d4:07:
3f:fc:eb:a7:b7:24:ee:ce:d4:31:99:ac:f1:82:c1:f7:56:5d:
77:7a:67:cc:62:ed:89:05:95:d0:f2:82:e1:c2:17:2f:78:84:
0e:e5:1c:ca:76:3e:df:aa:17:e5:b8:a6:70:0a:01:2a:03:f5:
83:fd:ce:df:90:c8:b5:42:73:5a:f3:f0:95:1a:f8:7f:9e:e2:
27:42:6b:62:5d:86:d8:1b:de:1e:fb:4c:41:b2:4a:1e:5f:66:
91:e9:5e:3a:42:47:c9:63:df:3d:b0:c9:25:fa:5b:98:1b:f8:
b5:00:97:6c:1f:17:dd:3f:0b:64:9a:24:39:d2:ed:1f:ed:3a:
a1:b0:f1:10:73:34:88:2b:df:57:28:67:c7:35:a8:ae:9f:d3:
21:b8:85:1e:18:70:99:b4:f3:1e:90:d8:83:71:0e:e6:38:be:
73:80:33:0c:7b:0b:26:7f:33:ae:91:cf:87:34:17:75:89:24:
2d:57:ac:93:16:07:d9:4a:1c:f6:47:32:83:95:0a:4a:e5:4d:
fa:10:ef:2d:24:0e:1e:47:6e:89:a9:7f:54:ae:92:f5:50:fe:
70:02:92:d3:de:04:c9:1b:7e:35:34:ea:8f:bd:45:37:03:d3:
6a:b1:14:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 10:51:56 2026 by rpki-client