
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
File: YmmU0Zdivg-YhPpO8NymbD9TAqg.mft (raw, json)
Hash identifier: UNL0UupTMpDBHLq1wXvZA6aapVox00L2AyT9cjyPTRc=
Subject key identifier: 17:3E:36:FD:D4:64:3D:D4:4A:18:FA:9B:AD:6B:32:65:EC:12:5F:BD
Authority key identifier: 62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8
Certificate issuer: /CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8
Certificate serial: 1C20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
Manifest number: 1C07
Signing time: Thu 16 Apr 2026 16:10:39 +0000
Manifest this update: Thu 16 Apr 2026 16:10:39 +0000
Manifest next update: Thu 23 Apr 2026 16:10:39 +0000
Files and hashes: 1: YmmU0Zdivg-YhPpO8NymbD9TAqg.crl (hash: tmFqIsYTNJ/vrHMRPmS7hXzfByGtTK17877peSdbPpc=)
2: B8F865A2147B11E7B5BEC457C4F9AE02.roa (hash: j+T6bJd+cSNSQ1iQrWISPs5fEYaHz+YvZS+Tkog1UjU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl
rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:10:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7200 (0x1c20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157E6E, serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8
Validity
Not Before: Apr 16 16:10:39 2026 GMT
Not After : Apr 23 16:10:39 2026 GMT
Subject: CN=69e109ff-c7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:89:ef:2e:1a:c2:76:68:61:72:a4:a4:f0:de:
8f:4a:6d:99:90:77:3c:32:35:ff:20:e2:54:b5:03:
99:91:35:33:80:87:5f:30:b4:6d:81:4f:a6:67:56:
0d:c8:46:8e:cd:04:c2:ce:bc:74:1a:57:9e:9e:89:
b9:94:d0:c5:b2:f9:43:f7:1e:ad:15:19:f0:3c:f6:
8c:9e:64:b1:94:80:ed:db:54:7c:9d:bd:3c:b6:38:
8c:03:7b:5c:4b:53:a9:0a:fa:d2:54:b4:48:3c:51:
ad:d7:9a:d4:21:90:59:87:cd:5f:a3:0e:d6:54:bd:
d3:a2:58:1a:f9:94:29:10:d6:5f:68:69:71:b4:0c:
f2:02:f7:96:38:45:10:77:4d:bd:f5:ca:d0:c3:22:
06:3a:b6:49:ff:ca:aa:d9:74:7b:c0:a5:e3:c5:da:
8e:8e:1c:42:00:fe:f6:0d:8c:5d:63:f9:79:2e:a5:
03:b8:a1:ae:22:27:cc:d9:f7:7d:97:15:e0:ab:a1:
b4:94:8b:48:eb:25:13:ce:68:fc:da:49:63:cf:bf:
ea:8b:ba:98:6a:40:e1:df:4e:2a:30:36:e4:ba:a1:
b8:fb:aa:10:c4:2d:96:f1:7c:1e:e0:45:04:51:b0:
18:59:ea:91:36:ea:40:4b:dd:e4:b0:81:42:d0:33:
b5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3E:36:FD:D4:64:3D:D4:4A:18:FA:9B:AD:6B:32:65:EC:12:5F:BD
X509v3 Authority Key Identifier:
keyid:62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:49:c1:53:82:4b:8e:a7:25:a2:9f:7b:98:23:74:9f:bc:c6:
45:b5:4b:75:ae:21:16:bc:2d:a1:8b:37:b5:79:c7:f5:e6:f9:
3f:c3:e1:54:c9:f5:6f:66:73:33:09:81:ce:cb:c5:d0:fe:91:
4f:c1:d8:30:78:54:7f:24:cf:cf:99:33:67:f0:b4:ad:9e:02:
c6:29:e4:43:b4:b5:be:a9:4e:3b:f8:8d:9a:0a:8d:7f:e1:44:
d0:90:ff:c9:b2:13:4c:1b:d9:32:ea:ab:ff:3c:b5:56:1e:6c:
12:51:3d:79:8f:3e:c9:14:20:2d:06:13:95:75:11:13:8b:fe:
63:5f:34:0d:04:73:be:ff:d8:06:0a:2e:4b:a9:5a:15:f9:e7:
c9:5c:60:de:e3:0c:1c:26:32:77:22:15:92:9a:3f:89:a7:40:
f0:d0:2f:28:53:e6:02:1a:e4:33:18:48:67:0c:70:c2:52:c5:
57:19:61:44:3d:ae:60:b4:e2:81:c9:7f:5a:95:fa:7f:ea:80:
b8:be:29:02:4d:8e:c8:d8:82:c1:d4:02:03:a2:3f:00:fa:58:
36:a9:ca:5e:7a:4c:47:af:3e:64:43:13:91:e8:8e:8e:15:0b:
0d:87:1f:35:03:18:dc:63:39:90:e1:b4:f2:b3:a4:43:5d:51:
9f:71:c0:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdFNkUxMTAvBgNVBAUTKDYyNjk5NEQxOTc2MkJFMEY5ODg0RkE0RUYwRENBNjZD
M0Y1MzAyQTgwHhcNMjYwNDE2MTYxMDM5WhcNMjYwNDIzMTYxMDM5WjAYMRYwFAYD
VQQDEw02OWUxMDlmZi1jN2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4InvLhrCdmhhcqSk8N6PSm2ZkHc8MjX/IOJUtQOZkTUzgIdfMLRtgU+mZ1YN
yEaOzQTCzrx0Gleenom5lNDFsvlD9x6tFRnwPPaMnmSxlIDt21R8nb08tjiMA3tc
S1OpCvrSVLRIPFGt15rUIZBZh81fow7WVL3Tolga+ZQpENZfaGlxtAzyAveWOEUQ
d0299crQwyIGOrZJ/8qq2XR7wKXjxdqOjhxCAP72DYxdY/l5LqUDuKGuIifM2fd9
lxXgq6G0lItI6yUTzmj82kljz7/qi7qYakDh304qMDbkuqG4+6oQxC2W8Xwe4EUE
UbAYWeqRNupAS93ksIFC0DO1kwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBc+Nv3U
ZD3UShj6m61rMmXsEl+9MB8GA1UdIwQYMBaAFGJplNGXYr4PmIT6TvDcpmw/UwKo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U2RS84MzBDNjk3MDBE
RUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZnLVloUHBPOE55bWJEOVRB
cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ltbVUwWmRpdmctWWhQcE84TnltYkQ5VEFxZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0U2RS84MzBDNjk3MDBERUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZn
LVloUHBPOE55bWJEOVRBcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPknBU4JLjqclop97mCN0n7zGRbVLda4hFrwtoYs3tXnH9eb5P8PhVMn1b2Zz
MwmBzsvF0P6RT8HYMHhUfyTPz5kzZ/C0rZ4CxinkQ7S1vqlOO/iNmgqNf+FE0JD/
ybITTBvZMuqr/zy1Vh5sElE9eY8+yRQgLQYTlXURE4v+Y180DQRzvv/YBgouS6la
FfnnyVxg3uMMHCYydyIVkpo/iadA8NAvKFPmAhrkMxhIZwxwwlLFVxlhRD2uYLTi
gcl/WpX6f+qAuL4pAk2OyNiCwdQCA6I/APpYNqnKXnpMR68+ZEMTkeiOjhULDYcf
NQMY3GM5kOG08rOkQ11Rn3HApg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:13:47 2026 by rpki-client