
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft
File: yNpkCWcTSBB928ixg_VavykxJVY.mft (raw, json)
Hash identifier: eZqh5SwryBtDm5zDfCy/dtqUdnldyxe6M6Ax4DAb0sg=
Subject key identifier: F3:0B:05:56:7C:1A:9B:95:3E:F8:60:6C:53:FF:C0:DB:05:00:68:E2
Authority key identifier: C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56
Certificate issuer: /CN=A9120974/serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556
Certificate serial: 1148
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft
Manifest number: 1148
Signing time: Sat 26 Sep 2026 17:17:52 +0000
Manifest this update: Sat 26 Sep 2026 17:17:52 +0000
Manifest next update: Sat 03 Oct 2026 17:17:52 +0000
Files and hashes: 1: yNpkCWcTSBB928ixg_VavykxJVY.crl (hash: J74yrHvrx/grw5WTdIamgzV/x7sEHKYBZF2iHoVFqGM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl
rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 14:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4424 (0x1148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120974, serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556
Validity
Not Before: Sep 26 17:17:52 2026 GMT
Not After : Oct 3 17:17:52 2026 GMT
Subject: CN=6ab7fe40-6b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:3f:a5:36:f5:bc:2f:47:66:8d:df:a3:6e:
2d:e8:6f:6c:a0:9a:dd:89:c2:a4:c9:a3:a7:71:fb:
c8:94:95:a5:a8:ac:ef:cc:62:21:3e:82:0c:bf:94:
52:dd:31:41:c8:10:ea:a0:b1:8f:ef:f1:da:ab:74:
9e:8d:12:d1:c2:51:fc:ae:82:ff:1c:1c:e4:67:61:
20:7b:b6:95:35:89:43:7b:38:15:5b:b9:34:9c:a8:
b5:78:3b:56:c2:85:77:c6:05:2d:c8:de:09:33:63:
5d:d1:29:5c:c3:47:0a:06:33:09:53:ff:b2:32:2b:
5c:b1:1d:c8:cd:f3:ea:a3:5d:0c:39:76:73:61:a6:
d7:2d:79:d1:62:58:fb:5b:fe:2b:ae:a6:5e:58:10:
ff:ec:3d:f8:b6:0b:8e:bc:cb:51:1b:d8:08:be:75:
c0:c3:66:02:ea:3b:58:0e:c0:ed:ec:d4:9b:7b:4b:
a7:0b:1e:34:2a:63:d5:8b:53:cc:b4:56:a7:08:cf:
c2:12:69:2e:b4:ad:54:4a:c2:82:48:fa:9f:f4:99:
02:c4:e5:0e:7a:ef:1c:9d:f2:d7:ea:1c:4d:6b:05:
80:e5:37:81:2d:4b:e2:a3:bc:a4:36:2a:fd:3e:f6:
36:f3:0b:43:f4:06:e2:fc:1c:37:f5:9e:c9:a0:d0:
1e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0B:05:56:7C:1A:9B:95:3E:F8:60:6C:53:FF:C0:DB:05:00:68:E2
X509v3 Authority Key Identifier:
keyid:C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e4:ec:ef:25:87:d2:d7:11:18:67:0d:4d:dd:ce:9d:3c:ab:
0d:96:a1:d5:0c:0f:95:f5:53:9d:04:03:25:48:e5:07:5c:c8:
d5:5c:2a:02:fa:65:3c:ac:27:2d:69:99:f3:56:a6:0a:fe:cc:
75:b6:15:12:18:81:66:81:8e:d2:ce:f5:c1:ad:1f:e9:11:f8:
76:5f:08:c4:38:23:de:5b:22:c9:68:08:0b:0f:c6:85:66:77:
94:03:d5:98:57:67:61:43:c9:1a:a9:16:fd:6f:6b:c2:18:13:
18:5a:be:88:48:36:26:a7:eb:a7:c9:6c:d2:84:d2:52:c0:11:
ae:c8:cc:8b:2a:ec:3f:a0:79:c3:87:1c:e3:9b:43:c1:62:d4:
bc:55:08:e6:29:7a:b5:d5:dc:80:da:da:dd:e3:45:69:29:40:
28:ec:09:da:af:96:ec:27:3f:8f:88:64:eb:16:0f:fc:cc:42:
36:90:f8:e7:95:30:d1:b8:b7:54:26:82:af:c8:9c:17:c7:0a:
a5:49:ec:44:7d:33:c7:d1:b5:9f:8c:f8:69:52:0d:1d:77:6e:
d2:87:b8:cb:53:90:0f:4d:04:ff:4c:66:71:cf:4e:92:7a:cf:
9c:ea:4b:8d:65:56:4b:b4:66:72:8b:38:ee:af:8f:18:82:57:
73:c3:7d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:18:18 2026 by rpki-client