
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft
File: y6GXwEyqm9KV9XiEcqahCqP773A.mft (raw, json)
Hash identifier: Dbxh84r0oteW8ETc5pdKwBMHVbq3uya43IZLk7mn8OA=
Subject key identifier: 06:56:E7:D4:AD:F2:9E:73:24:7F:23:B8:F1:24:0D:37:4F:FC:C9:0F
Authority key identifier: CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70
Certificate issuer: /CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
Certificate serial: 1C09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft
Manifest number: 1BCD
Signing time: Fri 12 Jun 2026 16:13:25 +0000
Manifest this update: Fri 12 Jun 2026 16:13:25 +0000
Manifest next update: Fri 19 Jun 2026 16:13:25 +0000
Files and hashes: 1: y6GXwEyqm9KV9XiEcqahCqP773A.crl (hash: ZFXuPDiz1KpMCOH8uyrQGjK09Q0un2REW21rHAbKtHE=)
2: A7EF5240597511F185BDC55FA6833773.roa (hash: kOodqdgbINY1XZl6qbmR66hRW2266VFweYrtDnY9Xa8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl
rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7177 (0x1c09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB3, serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
Validity
Not Before: Jun 12 16:13:25 2026 GMT
Not After : Jun 19 16:13:25 2026 GMT
Subject: CN=6a2c3025-98e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4a:8b:04:e1:dc:21:a9:17:67:80:fd:8a:3d:
a9:ad:35:49:ed:1f:0f:0d:84:02:54:90:3f:c9:51:
38:0e:8b:6c:96:bd:48:88:f5:94:c1:2d:68:b3:6d:
09:e5:3f:e6:35:97:3f:d5:ae:da:be:34:8a:f3:c7:
d3:e5:5b:21:e8:dc:77:b1:1e:b8:7c:d9:86:6f:92:
59:17:da:a4:cf:c9:1a:a9:14:b1:f6:1b:8d:4d:00:
84:0b:63:76:82:33:b8:e7:6f:30:5e:68:2d:42:b5:
4b:f0:36:de:0f:4a:65:99:27:7b:12:f4:db:dd:8e:
8f:92:17:df:2f:3a:4f:ee:39:86:da:2b:57:3a:d0:
36:ef:16:6e:3e:48:d4:46:1f:bd:e8:e1:1d:57:07:
bc:fa:e2:d0:bd:90:e7:d7:11:98:48:46:37:7f:20:
7e:e1:90:86:f4:6e:4a:74:75:74:01:32:0f:c1:9c:
71:cf:86:9b:f8:bb:47:a5:a5:2d:e0:15:69:6c:79:
08:9c:cd:f4:2d:0d:11:8a:7d:0b:2e:59:6c:52:44:
77:bf:aa:70:12:a1:34:8f:ae:60:5e:5e:e7:bd:d5:
ce:8b:79:80:63:0a:fc:ee:3f:ac:11:9e:ab:e8:47:
85:02:46:6a:e2:5f:a4:a1:78:2a:de:bd:b9:65:1a:
50:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:56:E7:D4:AD:F2:9E:73:24:7F:23:B8:F1:24:0D:37:4F:FC:C9:0F
X509v3 Authority Key Identifier:
keyid:CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3e:77:3c:31:e4:c7:02:b2:f4:9d:c7:9e:90:3a:70:81:5b:
97:22:80:ec:8c:cd:b9:ff:ee:bc:20:f6:77:e2:7c:cd:33:5d:
ef:00:3d:4e:06:d0:a4:f8:21:10:5f:29:24:bc:e8:e0:bc:b5:
4c:74:6d:68:42:53:f3:03:e2:0c:4d:4f:fb:19:25:b8:18:4b:
40:5b:86:c5:19:cc:84:cf:00:2a:72:86:5d:1a:2a:6e:b0:ce:
f8:0f:6b:a3:23:f4:33:c2:20:4e:da:a8:82:fa:b5:8c:4a:eb:
1a:56:57:ae:76:cc:c5:1e:1a:c2:7e:b9:7f:df:16:df:94:16:
32:d4:7a:db:ca:1e:86:47:55:ef:57:33:c1:d0:1f:93:ff:10:
e4:b0:12:44:36:01:30:46:c3:56:e8:e9:33:f6:84:8a:3f:e7:
cc:4e:2c:75:51:ff:20:17:55:af:d9:04:d2:33:56:e5:93:bd:
48:3e:d4:d7:a9:c2:bc:9d:b9:4a:87:e6:cc:6d:30:cc:e7:cd:
e0:1d:4d:3f:1d:d3:61:25:e9:1d:4d:72:e0:65:0a:d5:8d:e5:
97:b9:70:a3:0a:47:7c:d5:cd:9f:a0:47:14:c5:48:9c:80:34:
6a:1b:51:7d:72:e0:df:cb:f4:e7:66:2c:95:d5:f5:d0:5a:63:
47:6c:43:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDNDQjMxMTAvBgNVBAUTKENCQTE5N0MwNENBQTlCRDI5NUY1Nzg4NDcyQTZBMTBB
QTNGQkVGNzAwHhcNMjYwNjEyMTYxMzI1WhcNMjYwNjE5MTYxMzI1WjAYMRYwFAYD
VQQDEw02YTJjMzAyNS05OGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoEqLBOHcIakXZ4D9ij2prTVJ7R8PDYQCVJA/yVE4Dotslr1IiPWUwS1os20J
5T/mNZc/1a7avjSK88fT5Vsh6Nx3sR64fNmGb5JZF9qkz8kaqRSx9huNTQCEC2N2
gjO4528wXmgtQrVL8DbeD0plmSd7EvTb3Y6PkhffLzpP7jmG2itXOtA27xZuPkjU
Rh+96OEdVwe8+uLQvZDn1xGYSEY3fyB+4ZCG9G5KdHV0ATIPwZxxz4ab+LtHpaUt
4BVpbHkInM30LQ0Rin0LLllsUkR3v6pwEqE0j65gXl7nvdXOi3mAYwr87j+sEZ6r
6EeFAkZq4l+koXgq3r25ZRpQpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZW59St
8p5zJH8juPEkDTdP/MkPMB8GA1UdIwQYMBaAFMuhl8BMqpvSlfV4hHKmoQqj++9w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0NCMy8xREI3OTgzQzI1
OUQxMUU3ODVEMzI1MEFDNEY5QUUwMi95NkdYd0V5cW05S1Y5WGlFY3FhaENxUDc3
M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3k2R1h3RXlxbTlLVjlYaUVjcWFoQ3FQNzczQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
M0NCMy8xREI3OTgzQzI1OUQxMUU3ODVEMzI1MEFDNEY5QUUwMi95NkdYd0V5cW05
S1Y5WGlFY3FhaENxUDc3M0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATD53PDHkxwKy9J3HnpA6cIFblyKA7IzNuf/uvCD2d+J8zTNd7wA9TgbQpPgh
EF8pJLzo4Ly1THRtaEJT8wPiDE1P+xkluBhLQFuGxRnMhM8AKnKGXRoqbrDO+A9r
oyP0M8IgTtqogvq1jErrGlZXrnbMxR4awn65f98W35QWMtR628oehkdV71czwdAf
k/8Q5LASRDYBMEbDVujpM/aEij/nzE4sdVH/IBdVr9kE0jNW5ZO9SD7U16nCvJ25
SofmzG0wzOfN4B1NPx3TYSXpHU1y4GUK1Y3ll7lwowpHfNXNn6BHFMVInIA0ahtR
fXLg38v052YsldX10FpjR2xDlA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:06:02 2026 by rpki-client