
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
File: Y0nPcXs0CWM10fw5e8UEBkinjw4.mft (raw, json)
Hash identifier: jeWm67q2No7Zb9vNimncPUNNq34A7MpB5g2kVj8xILw=
Subject key identifier: 75:2D:10:F0:29:A4:35:C3:FF:50:8C:A2:38:E6:43:52:05:52:E6:F7
Authority key identifier: 63:49:CF:71:7B:34:09:63:35:D1:FC:39:7B:C5:04:06:48:A7:8F:0E
Certificate issuer: /CN=A9120D97/serialNumber=6349CF717B34096335D1FC397BC5040648A78F0E
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
Manifest number: 35
Signing time: Sat 13 Jun 2026 08:40:31 +0000
Manifest this update: Sat 13 Jun 2026 08:40:30 +0000
Manifest next update: Sat 20 Jun 2026 08:40:30 +0000
Files and hashes: 1: Y0nPcXs0CWM10fw5e8UEBkinjw4.crl (hash: S/EV43ps0Ut45xaAfD3zzz8wYEw0wtYsqAClAKUwAo0=)
2: B2D0F8D2178311F1B32BFEF6283D8C67.roa (hash: 0l1faSsNOHOUv9dts3Hprtyh48iyjB1f/xwuNggdhEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.crl
rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120D97, serialNumber=6349CF717B34096335D1FC397BC5040648A78F0E
Validity
Not Before: Jun 13 08:40:30 2026 GMT
Not After : Jun 20 08:40:30 2026 GMT
Subject: CN=6a2d177f-3816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:03:6c:dd:8c:63:08:8b:e9:2f:51:64:fc:af:
4b:9f:95:5a:a3:40:9e:6f:01:a5:ca:46:34:4d:85:
9b:f4:42:38:93:0f:aa:02:b1:65:3d:c8:06:0c:0a:
8c:36:eb:57:5b:70:6e:a1:a1:70:53:4c:d1:e5:68:
18:e9:35:62:6b:bb:df:b7:38:f0:29:b9:d2:a4:d2:
54:b8:8a:e3:ad:05:8f:cb:c3:cd:8e:ce:95:6b:f6:
91:94:3b:bf:8b:c6:2c:1a:14:15:b0:e9:ff:bd:00:
90:79:57:4b:93:2e:ac:de:4f:a5:e3:4e:90:8a:52:
84:4e:2b:3f:c7:a7:38:0f:31:7f:96:01:04:a3:03:
6b:a6:2f:04:52:b8:bc:3e:9d:2d:94:16:2e:c7:08:
78:71:d9:f3:82:98:01:b6:72:3f:ab:1c:f0:bc:2e:
8f:04:31:00:f5:ac:4a:54:27:22:77:3a:d2:c6:f9:
f7:26:60:14:75:b1:cc:ed:bd:39:d8:0c:a8:17:cf:
dc:d4:1e:9e:a7:0c:e8:8c:0b:b3:fa:4d:fb:13:65:
71:1d:dd:90:c8:7d:6f:56:29:ab:2b:33:5c:fa:16:
8e:18:2c:6b:3c:d4:2a:1b:7a:4b:b4:d8:0f:e2:37:
2f:58:e4:ff:79:02:08:02:3a:d1:02:02:96:c0:ce:
0d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2D:10:F0:29:A4:35:C3:FF:50:8C:A2:38:E6:43:52:05:52:E6:F7
X509v3 Authority Key Identifier:
keyid:63:49:CF:71:7B:34:09:63:35:D1:FC:39:7B:C5:04:06:48:A7:8F:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:24:af:18:2d:a7:70:62:6e:96:cf:be:14:65:87:3f:85:bd:
34:fe:ca:61:ec:67:b9:ba:a0:33:a0:6f:f0:fd:4a:94:a0:aa:
84:eb:db:00:5f:71:99:25:18:80:f8:a6:0c:1f:6d:2d:95:d2:
68:4a:3b:69:3d:3f:0c:61:0e:af:84:2c:07:19:80:36:fe:84:
00:6b:cb:ca:d3:90:7f:0e:1a:64:0f:77:af:38:f2:28:43:99:
78:b9:b7:fa:bf:bb:40:07:85:8c:66:9e:86:97:c2:6a:a6:5a:
f5:80:74:b4:e4:fd:ec:b5:70:b0:a2:e2:db:c4:94:5b:98:63:
f2:90:64:cc:c4:bf:26:c9:34:5f:b0:75:cf:0f:2c:51:9a:78:
5a:d1:a0:70:50:d4:25:45:32:53:a6:d8:81:9d:34:ab:a0:1a:
40:f3:c1:d2:74:18:92:01:05:14:44:96:7c:dc:73:9d:54:ea:
a1:13:e2:b7:ce:46:27:b4:b8:20:3f:b1:d4:35:5d:ac:b3:8e:
2e:be:ba:67:64:fa:24:21:ab:fc:83:30:84:51:eb:69:05:cb:
30:5d:d4:99:2d:9a:72:01:db:f3:fd:c8:84:3b:d3:50:a6:2a:
90:7a:09:e7:94:91:bf:f0:4c:35:cc:46:cc:a8:33:c9:7a:7c:
d3:d7:c4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:14:21 2026 by rpki-client