
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
File: Y0nPcXs0CWM10fw5e8UEBkinjw4.mft (raw, json)
Hash identifier: p/YHf3l2iz6vjoWl1gyXQqATFEtzOYId2eJqJJaWXCI=
Subject key identifier: E2:1A:9F:2F:73:9C:5E:70:F3:62:B3:3D:23:A5:8C:A7:6E:6C:B1:9C
Authority key identifier: 63:49:CF:71:7B:34:09:63:35:D1:FC:39:7B:C5:04:06:48:A7:8F:0E
Certificate issuer: /CN=A9120D97/serialNumber=6349CF717B34096335D1FC397BC5040648A78F0E
Certificate serial: 4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
Manifest number: 4B
Signing time: Mon 27 Jul 2026 10:39:20 +0000
Manifest this update: Mon 27 Jul 2026 10:39:19 +0000
Manifest next update: Mon 03 Aug 2026 10:39:19 +0000
Files and hashes: 1: Y0nPcXs0CWM10fw5e8UEBkinjw4.crl (hash: 3GpQXv/VTXxwCIswWo57bB565fJ8ZkfvFGInK7jTso4=)
2: B2D0F8D2178311F1B32BFEF6283D8C67.roa (hash: 0l1faSsNOHOUv9dts3Hprtyh48iyjB1f/xwuNggdhEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.crl
rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:39:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120D97, serialNumber=6349CF717B34096335D1FC397BC5040648A78F0E
Validity
Not Before: Jul 27 10:39:19 2026 GMT
Not After : Aug 3 10:39:19 2026 GMT
Subject: CN=6a673558-5d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:13:f1:22:9d:22:6e:d8:60:be:c2:43:53:90:
b7:dd:a3:17:16:33:63:d7:6b:20:4a:bd:0e:23:b0:
f4:a2:b6:1c:95:18:59:48:ff:81:6a:2d:2c:dd:26:
c9:2d:46:64:d1:40:f9:f0:00:75:02:e0:97:6f:86:
fa:39:98:15:3d:c1:98:b0:d5:fa:5f:ba:a8:40:8c:
1f:9d:6b:76:27:85:22:d3:99:60:32:41:2d:37:d6:
ce:ca:c6:7d:1b:1c:cc:d2:24:7a:85:05:6e:7a:0d:
82:a2:ee:00:d2:a7:41:28:c5:d2:47:d4:0f:98:04:
1b:ef:70:92:56:85:2a:b2:70:49:2c:8d:5c:17:48:
e4:ac:74:aa:2e:18:53:6a:49:39:67:1f:f3:30:43:
ea:ab:1c:d5:75:fb:5f:7f:f7:de:ad:01:52:77:6f:
7d:94:b6:d2:e3:36:9c:56:5f:49:de:09:f7:4a:64:
fb:71:a9:e5:0e:b0:a0:a5:5c:70:f7:dd:5c:fc:ac:
09:63:32:7f:23:f5:df:b0:3a:a3:30:3e:c1:ec:59:
f4:31:1c:70:6d:a5:5b:c0:0b:c4:9a:0b:cd:d6:2f:
ff:fc:28:55:fc:59:10:7f:7b:08:e2:d7:0f:a5:b6:
a3:fc:9b:c6:f0:1c:83:e9:13:2d:49:67:2b:17:11:
d2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1A:9F:2F:73:9C:5E:70:F3:62:B3:3D:23:A5:8C:A7:6E:6C:B1:9C
X509v3 Authority Key Identifier:
keyid:63:49:CF:71:7B:34:09:63:35:D1:FC:39:7B:C5:04:06:48:A7:8F:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ec:d8:63:f7:09:3a:6e:f2:eb:46:86:bb:e5:1b:92:9e:4c:
6d:10:3f:55:f1:3b:8c:34:cd:29:ea:58:80:1f:8c:73:8a:13:
b6:76:74:0e:2d:01:26:f4:e9:be:ef:53:59:e9:8f:38:bd:81:
04:8e:18:f9:f4:18:64:ac:58:6d:87:c8:cd:71:98:7c:3d:db:
f5:ce:78:dd:84:b0:b3:7d:c9:7c:ee:0a:2e:2b:05:a4:5b:5a:
b8:be:d7:82:35:28:18:7f:36:61:73:9f:d6:03:a9:42:57:d7:
4c:8f:67:c7:1c:75:21:a5:46:75:fd:01:da:fa:4f:92:cb:88:
e7:04:e3:21:f4:a2:aa:93:e7:fd:8b:85:af:e5:1f:3e:8c:74:
3a:a5:eb:f4:5a:53:6b:98:0d:03:0a:f2:e9:57:62:60:41:d9:
35:2c:84:fe:36:c8:65:ad:fd:86:41:02:64:ad:c8:05:98:6c:
8f:da:5d:1b:1a:04:00:7b:fd:92:d0:a8:5c:a8:1a:30:79:96:
e1:9c:a3:c1:c9:e7:eb:a6:de:58:a8:d2:ca:31:14:91:34:bf:
09:96:c6:76:62:5f:fc:e4:ae:21:7b:16:97:37:3b:7c:be:d6:
8b:2d:2b:08:89:c3:d6:59:75:58:22:59:56:25:72:be:5f:7f:
84:54:7b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:59:47 2026 by rpki-client