
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.mft
File: YgNWI5rPPPQIizzmK88YvKgIncc.mft (raw, json)
Hash identifier: xiJGEPZq+19xxJ6yKFqPkFHnJnTz7Zq7pMuDtmQUVoU=
Subject key identifier: C6:55:05:15:F9:97:08:18:1D:CB:8A:83:9A:B0:BA:F5:DC:88:99:18
Authority key identifier: 62:03:56:23:9A:CF:3C:F4:08:8B:3C:E6:2B:CF:18:BC:A8:08:9D:C7
Certificate issuer: /CN=A9168497/serialNumber=620356239ACF3CF4088B3CE62BCF18BCA8089DC7
Certificate serial: 35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgNWI5rPPPQIizzmK88YvKgIncc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.mft
Manifest number: 35
Signing time: Sun 19 Apr 2026 08:12:14 +0000
Manifest this update: Sun 19 Apr 2026 08:12:13 +0000
Manifest next update: Sun 26 Apr 2026 08:12:13 +0000
Files and hashes: 1: YgNWI5rPPPQIizzmK88YvKgIncc.crl (hash: dkU45vznMDP80o2hW64RowtSacPc91qHmZtCiM8gLqk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.crl
rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgNWI5rPPPQIizzmK88YvKgIncc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168497, serialNumber=620356239ACF3CF4088B3CE62BCF18BCA8089DC7
Validity
Not Before: Apr 19 08:12:13 2026 GMT
Not After : Apr 26 08:12:13 2026 GMT
Subject: CN=69e48e5e-624a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:41:13:db:52:07:06:d7:ac:00:11:27:3c:70:
d7:8f:71:e1:8d:47:dc:84:7a:88:8e:f4:1a:2e:b1:
c0:43:19:a8:c8:c2:c7:cb:13:bd:ad:11:4e:7c:07:
fe:a5:5b:45:59:5a:f3:40:62:8d:81:9b:c3:d7:15:
02:f1:9e:c6:ad:ea:3c:2d:cc:9f:c5:fd:92:d7:95:
44:80:d6:1c:55:0d:59:cd:17:5d:e4:06:83:47:20:
35:7c:39:38:34:ea:b8:a9:2c:c2:93:5e:51:9c:17:
23:d6:3c:a0:6f:a5:2b:44:21:bc:cc:11:90:72:79:
d0:11:97:ec:fc:fe:b5:e1:92:3b:04:5f:f9:a7:14:
a6:6b:07:06:7e:8d:50:31:17:33:78:3c:11:15:0e:
e1:db:b1:a5:ad:4d:49:5e:dd:8a:23:44:9e:57:32:
bb:6a:c0:91:19:0d:f9:5f:57:07:c0:79:ff:72:f6:
fa:90:33:ea:63:69:8e:3a:62:f0:db:f4:a2:34:0b:
f7:0c:e5:7e:41:b2:60:e4:aa:c4:43:de:3a:01:04:
e8:9f:e1:cd:e8:99:61:41:77:ad:b9:50:96:20:01:
2c:84:66:26:da:a9:81:39:f5:5d:e6:d5:9e:10:95:
1a:75:48:32:d7:3d:24:e1:3f:4b:eb:b9:02:16:72:
9d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:55:05:15:F9:97:08:18:1D:CB:8A:83:9A:B0:BA:F5:DC:88:99:18
X509v3 Authority Key Identifier:
keyid:62:03:56:23:9A:CF:3C:F4:08:8B:3C:E6:2B:CF:18:BC:A8:08:9D:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgNWI5rPPPQIizzmK88YvKgIncc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:57:65:64:4d:6e:7a:48:35:ca:c3:ba:9c:a2:4e:fd:4f:c7:
89:4d:a2:1b:4f:60:39:45:e1:fb:27:ba:48:97:e3:89:1c:42:
db:ee:28:5d:55:1a:22:23:51:7c:98:b8:3d:db:47:69:d8:5e:
11:7c:05:cf:1b:d8:11:ee:01:c7:70:e4:30:82:a5:a8:73:79:
a7:30:78:fd:bc:14:ea:8c:5f:c1:7d:76:92:d7:2a:72:01:08:
a3:cd:6c:4b:d2:59:9c:e0:11:14:51:5f:e6:73:b5:c0:39:82:
05:b9:eb:20:66:2d:32:9e:a7:0e:6f:b1:99:0c:e6:f8:b5:8d:
db:e9:c3:ab:d7:9e:a3:54:47:83:e7:20:d9:76:f0:4d:15:d6:
15:c5:2c:34:d9:47:17:66:fe:b9:f4:5f:4b:d7:df:5b:4a:bc:
de:9d:75:47:b1:26:81:a6:ff:a0:29:9e:2f:26:c6:54:4e:07:
78:8e:cd:cf:e7:2e:76:27:d1:49:ce:c5:55:d9:d4:85:f6:d3:
7c:dd:c4:62:90:5f:90:7e:19:a4:1a:38:fa:22:ab:ec:b8:34:
cf:91:13:bd:42:24:48:b5:b3:02:f8:11:f3:ef:6d:26:f8:31:
7e:bc:15:d7:59:9e:0b:58:09:4e:e0:8f:63:fa:9d:9f:b9:99:
3c:f7:94:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:53:33 2026 by rpki-client