
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft
File: Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft (raw, json)
Hash identifier: NV8gHGPguDbP8zMdJv0QkFKg1Om7F+zKtuz6Z6pgsj0=
Subject key identifier: B4:3F:BF:B6:9A:F6:B8:C0:DF:77:92:3E:C7:AD:D9:55:0F:08:0C:4B
Authority key identifier: 63:F3:59:A6:9E:DC:38:63:48:6F:46:D6:14:1F:9B:5C:01:43:23:FB
Certificate issuer: /CN=A9110C2F/serialNumber=63F359A69EDC3863486F46D6141F9B5C014323FB
Certificate serial: A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft
Manifest number: A4
Signing time: Sun 20 Sep 2026 14:52:43 +0000
Manifest this update: Sun 20 Sep 2026 14:52:43 +0000
Manifest next update: Sun 27 Sep 2026 14:52:43 +0000
Files and hashes: 1: Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl (hash: eBOvHCQ/TH41lNeiZBpeY35pPDwNjFwk+QTE2/cSjDk=)
2: 357B8ABEC67F11F08B0CE042C4F9AE02.roa (hash: nw9otOiCwQ8wtLQCh0wMrV+Kd/Ck+Jle9oO9lFGDeX0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl
rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C2F, serialNumber=63F359A69EDC3863486F46D6141F9B5C014323FB
Validity
Not Before: Sep 20 14:52:43 2026 GMT
Not After : Sep 27 14:52:43 2026 GMT
Subject: CN=6aaff33b-a273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:d8:41:3e:b1:7f:4d:f5:db:4c:63:48:74:
2d:f4:b4:24:6f:f6:1c:9c:1f:29:de:a2:d6:ef:08:
58:d9:7d:3d:2e:cc:85:18:14:2a:6c:84:db:11:d0:
2a:d8:42:e6:1b:72:1d:a9:94:d3:a4:bc:ca:65:3c:
63:f7:36:a9:0e:d2:e0:6a:32:6d:90:6c:8e:63:6a:
29:ef:fa:07:cb:6c:7c:80:3c:97:14:28:07:3d:4d:
72:5f:5c:0a:99:17:f7:4a:35:af:41:ca:c7:d3:ee:
eb:f9:55:25:85:7a:8d:42:78:6f:56:7e:99:71:5c:
62:05:72:77:5a:b5:d6:81:65:92:60:c6:ea:5c:e2:
22:4a:55:72:b6:a5:bd:46:9a:64:8f:4a:b5:a7:12:
e3:bc:8b:75:4f:6a:26:9e:41:af:0f:03:02:bc:53:
10:53:d2:b2:1a:9d:a0:fd:81:8d:55:ac:c1:51:f7:
58:63:f8:6e:7d:1d:9e:62:ab:7f:3a:2e:4c:99:8d:
9c:78:08:5f:d8:7a:04:fc:7d:25:b7:55:06:a8:1a:
83:2f:b1:d9:11:72:31:cd:84:cf:01:0a:e7:39:e9:
04:8d:c9:a7:df:3a:aa:5c:b0:b4:aa:94:d9:85:ae:
f0:cd:30:51:55:96:ac:d5:27:97:63:dc:44:4d:3c:
37:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3F:BF:B6:9A:F6:B8:C0:DF:77:92:3E:C7:AD:D9:55:0F:08:0C:4B
X509v3 Authority Key Identifier:
keyid:63:F3:59:A6:9E:DC:38:63:48:6F:46:D6:14:1F:9B:5C:01:43:23:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:98:9b:c1:e1:ed:cd:ee:78:27:89:a2:b5:15:8b:87:ec:2b:
87:53:33:4f:07:1e:fb:49:b1:2f:ef:f9:cf:f5:f1:03:64:0c:
27:21:d5:b2:d3:c9:7b:31:8d:27:24:c8:4b:f3:18:58:5b:0f:
03:c0:0b:af:49:4a:da:78:87:37:f0:72:fa:04:c6:50:42:3d:
42:a0:ed:59:23:05:e2:6d:36:26:5d:d3:63:0d:71:a7:ea:e4:
19:76:fc:48:46:34:9b:97:94:47:db:90:53:9c:c2:91:83:91:
9d:c7:f0:ca:88:d8:e8:38:50:fd:93:5c:6c:06:fe:70:0c:74:
36:db:52:05:6c:63:66:9a:2a:9e:3f:cd:4b:34:82:91:d5:fb:
3d:92:1c:59:87:de:d9:b3:6f:a9:f4:ae:52:9f:eb:cf:a4:44:
b5:0b:62:3f:b6:69:b2:e9:2b:14:a3:b4:46:2f:66:e7:23:d5:
09:29:cb:80:d0:9a:1e:a0:03:4a:86:d4:bd:ef:cf:5f:4d:87:
65:48:48:25:59:f9:a7:2f:df:98:48:9f:20:ee:a6:ee:e0:a4:
ea:5e:cb:c9:68:d1:d5:f8:d4:ab:75:5c:fe:a6:5b:9c:3a:ce:
f9:55:37:76:f7:3c:91:c7:51:99:e9:c6:96:a2:6e:e4:db:0a:
40:4a:dc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:20:07 2026 by rpki-client