
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
File: YHa9C6TbeXpypo_v-b-1WMRDmLI.mft (raw, json)
Hash identifier: 0GpHB5i0eHgAPXtLfiQ2rMixRHbh0q9p4ixIBwvXvUI=
Subject key identifier: 6C:FB:57:FB:4E:19:B2:93:C5:60:36:B8:D1:4D:57:20:A1:8C:EE:CC
Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
Certificate issuer: /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Certificate serial: 0528
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
Manifest number: 04F3
Signing time: Sun 20 Sep 2026 23:42:45 +0000
Manifest this update: Sun 20 Sep 2026 23:42:44 +0000
Manifest next update: Sun 27 Sep 2026 23:42:44 +0000
Files and hashes: 1: YHa9C6TbeXpypo_v-b-1WMRDmLI.crl (hash: 7fcy5EnbS4eQXuEMbWh9/YQjGLxRUdl6RnUgms7GJWo=)
2: B283BDAACF7C11F084EB1044C4F9AE02.roa (hash: qM1jpngbGtLR2m4oUSpuCPTJ9nzvkY0kh4taVmX3HNk=)
3: 260D3330758A11EFAE7A8A39C4F9AE02.roa (hash: 1u7MoOEqUAcZtaB8C3gY/ex2tSVz31yAb6iq9EUXHLo=)
4: ED1A0478799811EF8437F77EC4F9AE02.roa (hash: rTxo/ci/zZDp1JRh6YocwArvN83oqi4lpSlFY+PJjME=)
5: 33930A2290C511F1A86DF5B63D11F970.roa (hash: W5WRjM7yN2YAZI9GZoTzu+RbB4vd+NIEsv5YO+RYxFc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:42:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1320 (0x528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162EE1, serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Validity
Not Before: Sep 20 23:42:44 2026 GMT
Not After : Sep 27 23:42:44 2026 GMT
Subject: CN=6ab06f75-248a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:58:49:6e:58:b5:55:d1:5b:ab:72:6a:2d:
cd:cf:2f:a0:69:29:35:ba:d7:88:e2:b9:c3:3d:09:
72:d7:fc:06:59:1a:77:79:ba:74:89:17:4a:79:ff:
df:94:1c:98:bb:e8:3b:e8:a8:00:60:23:c9:ac:e9:
01:11:25:e0:9e:da:24:cb:9a:70:09:87:04:21:8d:
ad:44:7a:cc:48:34:32:2d:1c:87:87:a8:60:7c:b4:
e3:8c:e9:c3:6d:a9:d5:e5:35:76:8f:71:bf:53:2e:
32:35:33:12:c2:6c:d0:c2:dd:a1:05:a7:0e:33:18:
c3:25:dd:e3:1a:18:87:a1:32:3a:b9:cc:4b:a8:15:
90:76:53:a9:bd:38:87:95:5d:1b:25:e7:0c:fd:21:
f6:a9:ec:49:d8:ba:47:c6:7d:49:ea:cf:64:4c:d4:
77:0e:8d:5f:39:7f:39:5a:60:9e:25:4a:0e:26:7b:
8c:8d:f0:3e:e5:32:98:3f:28:4e:3b:cf:33:70:f7:
07:3d:36:e3:ef:99:8f:ea:3f:b1:d9:e6:49:03:78:
7c:58:aa:58:e4:4c:c1:48:d4:33:70:fe:9a:56:e9:
0a:a7:2c:7d:77:fc:10:b7:88:c7:aa:32:a5:5c:dc:
55:53:fc:c0:55:40:9d:3b:cf:4c:fb:5a:95:4c:06:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FB:57:FB:4E:19:B2:93:C5:60:36:B8:D1:4D:57:20:A1:8C:EE:CC
X509v3 Authority Key Identifier:
keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:87:b3:e1:23:e9:0a:41:02:38:f4:50:cb:1a:96:ce:0c:65:
89:43:66:b9:ba:e9:1e:d8:e6:94:02:55:fe:1b:21:da:94:36:
2f:45:72:8e:fc:42:98:64:93:63:94:4e:ff:f8:29:f6:f7:b1:
9f:47:38:64:38:6f:23:df:b5:d5:3d:71:3c:b4:4e:fe:5b:45:
7a:8c:df:31:25:f0:0d:6d:f0:66:88:ac:35:ab:b1:95:ab:d1:
f7:ba:45:34:e3:6e:f6:bb:fa:4a:4f:26:18:bb:02:5b:28:b0:
3b:33:85:a1:c1:e3:05:f5:7c:e3:b7:d1:09:1d:02:9d:e7:f1:
58:92:c3:d1:97:4e:54:3d:b7:41:6a:e1:a4:42:66:59:71:93:
1e:61:92:eb:59:12:5d:d5:a3:a0:b5:00:e5:a2:0e:63:76:cc:
4d:ef:df:70:84:03:5e:c8:59:d1:58:8e:82:67:38:85:a1:3e:
32:01:d3:31:c2:7f:33:60:e7:0c:92:51:94:23:f6:bb:5c:61:
5b:36:82:84:ad:fe:07:82:9a:00:cb:3e:1b:87:83:6b:af:37:
a7:87:1a:5f:b5:c1:f2:c5:97:f5:1c:39:d9:24:8d:46:13:45:
81:b8:28:9b:97:76:b5:75:e8:98:bf:f0:24:47:76:a1:49:f4:
1e:c7:b0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:46:33 2026 by rpki-client