
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
File: ycx5T_y0zfLZ373rdjgJuH0tj1c.mft (raw, json)
Hash identifier: IQlxULjDq7Dk5AGPdRRhZ/Mi/yVmxlALUBDpSq/ljXI=
Subject key identifier: 23:D3:B3:1C:D5:6D:FB:B3:8D:63:AA:78:22:DE:7F:8A:6B:D8:DF:CF
Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57
Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
Certificate serial: 258D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
Manifest number: 256C
Signing time: Mon 02 Mar 2026 01:14:53 +0000
Manifest this update: Mon 02 Mar 2026 01:14:51 +0000
Manifest next update: Mon 09 Mar 2026 01:14:51 +0000
Files and hashes: 1: ycx5T_y0zfLZ373rdjgJuH0tj1c.crl (hash: vOCIkFw+2DsSn9B+K3gRXiY5SA8umkmmNfXpjypn0Tc=)
2: 297BC4140D4611E794585E2FC4F9AE02.roa (hash: /APSJPO1WwUNbNz10EJn94BnFWAnDuB94L0jk/7YJvM=)
3: 04CC562A444E11E88204061CC4F9AE02.roa (hash: UvaAhwggzxiP5BreIlqS+S/h5B1PMRbtiBEtDey1XLE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl
rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9613 (0x258d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
Validity
Not Before: Mar 2 01:14:51 2026 GMT
Not After : Mar 9 01:14:51 2026 GMT
Subject: CN=69a4e48c-4cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:d8:4d:61:91:83:f4:ea:50:26:b2:f1:8a:
80:d6:33:70:09:38:bd:43:09:dc:2f:76:57:81:ab:
44:d2:8a:8c:5e:31:bc:3f:fc:69:82:11:bf:7d:0e:
d0:1a:04:5b:36:9f:33:13:fc:24:a8:4d:a1:00:dd:
bc:79:c7:02:f6:41:27:c1:fa:4a:11:b5:31:d2:80:
5b:81:11:2d:ee:75:f3:2e:58:fb:a8:a8:f9:10:1d:
e9:85:dd:c7:4a:72:97:33:d8:df:0a:2b:4c:55:11:
7c:c5:63:aa:43:48:a4:b8:da:d2:8f:46:8d:12:ce:
33:f9:22:78:12:39:62:c3:6c:de:53:73:06:21:18:
be:55:f2:54:e9:68:a9:16:da:81:f9:81:f0:9e:5e:
3c:a9:f2:68:46:78:54:ac:c4:11:13:5f:62:6b:ef:
c6:92:bb:63:27:ee:50:6c:59:94:10:5e:6c:a7:dd:
1e:36:35:df:cc:a6:94:24:43:61:2e:45:0c:de:24:
b0:22:85:5d:37:35:84:45:95:87:d9:6f:df:44:26:
72:dd:ab:9f:fc:c3:a9:ed:8f:4b:6e:bb:09:ac:e9:
4e:db:be:52:b3:86:d9:d7:34:5d:79:73:d0:c9:19:
37:3e:5a:ab:42:93:33:f2:2b:34:97:8a:2f:52:50:
09:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D3:B3:1C:D5:6D:FB:B3:8D:63:AA:78:22:DE:7F:8A:6B:D8:DF:CF
X509v3 Authority Key Identifier:
keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ee:10:06:eb:5d:4b:59:42:ff:e7:4f:91:8d:18:0a:ec:99:
13:15:0f:83:ce:61:8a:46:bd:ba:39:fd:b4:6d:4e:d3:a4:71:
f7:a9:40:f6:b4:ed:f2:2a:12:0a:9b:14:48:b1:08:e0:b0:8f:
c2:35:a7:f5:76:31:de:a1:89:5a:9d:c2:22:b1:4a:4a:15:3f:
49:06:42:64:f8:bc:b8:88:45:0c:87:ee:19:63:64:2a:b5:a6:
d2:fe:3e:18:04:83:18:3c:ff:24:5f:59:ca:91:8f:11:38:f4:
57:ee:da:23:af:b9:ee:6a:22:62:72:11:3e:c1:98:b6:95:c0:
fe:fa:ae:74:6d:c5:51:49:bd:c8:57:33:9a:f4:fb:12:a3:0f:
f0:ad:0d:5e:57:73:1b:ee:af:39:ce:ff:97:99:be:f6:71:cb:
ee:62:15:87:4c:6d:dd:22:6c:b9:bb:7d:ba:27:be:8a:4e:51:
75:d0:2b:da:8e:b2:43:09:98:cc:71:7e:22:17:71:1e:d3:b7:
23:0b:3e:0e:67:10:91:dd:6f:74:61:b4:b1:cd:49:d7:d8:b3:
ce:f5:8d:25:d8:c1:33:df:40:76:07:b7:3f:2f:4c:39:a7:f9:
4f:33:65:31:44:7e:6a:67:cb:72:fc:50:23:05:e0:dd:0a:4e:
d5:87:aa:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4
N0QyRDhGNTcwHhcNMjYwMzAyMDExNDUxWhcNMjYwMzA5MDExNDUxWjAYMRYwFAYD
VQQDEw02OWE0ZTQ4Yy00Y2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsyHYTWGRg/TqUCay8YqA1jNwCTi9QwncL3ZXgatE0oqMXjG8P/xpghG/fQ7Q
GgRbNp8zE/wkqE2hAN28eccC9kEnwfpKEbUx0oBbgREt7nXzLlj7qKj5EB3phd3H
SnKXM9jfCitMVRF8xWOqQ0ikuNrSj0aNEs4z+SJ4Ejliw2zeU3MGIRi+VfJU6Wip
FtqB+YHwnl48qfJoRnhUrMQRE19ia+/GkrtjJ+5QbFmUEF5sp90eNjXfzKaUJENh
LkUM3iSwIoVdNzWERZWH2W/fRCZy3auf/MOp7Y9LbrsJrOlO275Ss4bZ1zRdeXPQ
yRk3PlqrQpMz8is0l4ovUlAJHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCPTsxzV
bfuzjWOqeCLef4pr2N/PMB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3
MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq
MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzQ1Ni82MTU0RDE2ODM3MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpm
TFozNzNyZGpnSnVIMHRqMWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj+4QButdS1lC/+dPkY0YCuyZExUPg85hika9ujn9tG1O06Rx96lA9rTt8ioS
CpsUSLEI4LCPwjWn9XYx3qGJWp3CIrFKShU/SQZCZPi8uIhFDIfuGWNkKrWm0v4+
GASDGDz/JF9ZypGPETj0V+7aI6+57moiYnIRPsGYtpXA/vqudG3FUUm9yFczmvT7
EqMP8K0NXldzG+6vOc7/l5m+9nHL7mIVh0xt3SJsubt9uie+ik5RddAr2o6yQwmY
zHF+IhdxHtO3Iws+DmcQkd1vdGG0sc1J19izzvWNJdjBM99Adge3Py9MOaf5TzNl
MUR+amfLcvxQIwXg3QpO1YeqBw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:31 2026 by rpki-client