
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
File: kYy2egJiI43veP8oikXZKB-V0us.mft (raw, json)
Hash identifier: 3j+rxOhJaibh/y/gmkxPkOP8iJCaolTZrR8A1/PeEW4=
Subject key identifier: 58:74:45:61:10:09:37:27:E7:FD:06:9E:69:C1:A3:96:09:8D:F2:91
Authority key identifier: 91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB
Certificate issuer: /CN=A9168946/serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB
Certificate serial: 01A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
Manifest number: 01A5
Signing time: Fri 17 Apr 2026 03:52:12 +0000
Manifest this update: Fri 17 Apr 2026 03:52:12 +0000
Manifest next update: Fri 24 Apr 2026 03:52:12 +0000
Files and hashes: 1: kYy2egJiI43veP8oikXZKB-V0us.crl (hash: RaC09QJZdFDuYcunMIUHn+cnvLxK5fQSC/Pf6O2EbKU=)
2: B36E0BFAB8C511EE9C927072C4F9AE02.roa (hash: JGL3NS6zHatfQyunYpV2o7IA7UcrTbcUE/V2u2eDzGQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl
rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168946, serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB
Validity
Not Before: Apr 17 03:52:12 2026 GMT
Not After : Apr 24 03:52:12 2026 GMT
Subject: CN=69e1ae6c-4684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2c:f1:30:8b:2d:3f:20:5d:6e:a5:50:a4:f1:
ac:af:10:11:2c:14:5f:65:62:69:a2:e9:d3:d9:e1:
5f:37:e5:28:86:45:86:58:d3:de:5b:84:0b:ca:62:
d6:b7:14:d6:ae:a8:f4:ac:bb:9d:c0:6c:2f:ce:fb:
e5:81:ea:34:f1:d6:c2:c7:f1:81:5b:11:4f:f5:e9:
ae:e3:fb:01:e1:2c:a2:63:8c:27:22:4f:09:19:cc:
33:8e:8f:82:eb:25:79:60:b0:69:8a:11:08:95:e3:
93:6a:45:88:13:27:ba:15:69:f9:bb:8a:a8:56:f7:
d4:ba:d9:38:b9:34:48:9c:af:10:db:5e:45:65:67:
e5:00:d5:51:92:ed:d7:2d:70:a2:14:73:dc:79:cb:
99:4a:26:2a:da:51:d9:e5:0e:49:87:97:14:14:84:
d2:7c:9a:f2:2e:1d:48:0b:1f:16:38:c3:68:6f:d8:
24:bf:3b:d7:4f:e4:39:4b:f1:5e:f9:93:4a:a6:99:
b5:b0:5e:b5:53:33:45:bf:de:a8:3e:88:e9:76:69:
5c:b1:e3:b4:1f:60:14:0a:ac:0a:2d:4e:4d:b0:8c:
ac:c4:f4:62:10:a0:43:47:01:e3:05:d0:a4:c1:50:
6b:43:33:94:09:c3:4d:8b:41:b8:30:93:fa:43:05:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:74:45:61:10:09:37:27:E7:FD:06:9E:69:C1:A3:96:09:8D:F2:91
X509v3 Authority Key Identifier:
keyid:91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7e:ad:13:a1:e5:84:e1:83:d7:f4:6a:ff:2c:59:dc:f3:01:
48:12:65:23:cf:2d:ad:11:87:a5:bd:93:c2:83:b4:3c:e3:78:
50:cf:5f:de:c7:1d:17:d1:2c:f5:3f:eb:13:9a:5f:6c:3a:f7:
b6:81:f2:ca:26:d3:b7:60:81:12:40:0a:23:de:da:14:ac:88:
87:d1:e5:26:10:49:d2:42:3d:71:0f:25:06:46:48:22:11:b5:
83:42:95:58:5d:fc:5b:40:ac:4e:f0:8b:60:c6:ab:58:6f:99:
2f:9f:a5:f8:09:75:25:f2:cc:d5:ef:1f:a0:ad:4c:57:5a:48:
2a:79:55:c1:08:6c:91:0d:fc:a2:fc:63:ca:35:66:54:07:ab:
69:85:c0:01:75:95:cb:14:07:3f:7d:66:40:9a:c4:e8:e8:26:
86:06:27:eb:4a:8f:29:e1:f9:f3:27:a4:74:55:f2:86:55:36:
e8:65:ea:1b:6f:9c:b6:7e:e9:a1:51:18:3f:5e:81:df:7f:93:
17:43:ce:b0:5a:13:46:9e:11:a5:8c:79:ec:04:ef:9a:53:84:
35:04:b9:05:d5:f2:88:a8:a6:93:5f:6b:55:ba:89:a8:57:60:
f3:a7:36:ef:a9:b3:60:84:b1:d3:f4:b4:9c:cc:f2:59:be:a0:
e7:d3:fb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:56 2026 by rpki-client