
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft
File: yYWS4c0LLnYQyEsC5mHL8zb_r10.mft (raw, json)
Hash identifier: 002f/QKNtq11uwHHYAz1rTzUqGo+fWVoxCoAIjRAmwI=
Subject key identifier: 37:36:5D:A0:51:D3:4A:84:40:EF:2B:BE:2A:0B:61:26:26:52:CC:90
Authority key identifier: C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D
Certificate issuer: /CN=A9168E98/serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D
Certificate serial: 0874
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft
Manifest number: 086C
Signing time: Mon 02 Mar 2026 01:57:25 +0000
Manifest this update: Mon 02 Mar 2026 01:57:24 +0000
Manifest next update: Mon 09 Mar 2026 01:57:24 +0000
Files and hashes: 1: yYWS4c0LLnYQyEsC5mHL8zb_r10.crl (hash: yvc6XpbYrM4G/TQQbLA5zybOkJOyn4g/o8pYsEIrJNQ=)
2: 789C2BD0ECCA11EAAE025C70C4F9AE02.roa (hash: 0TZ+IPVq2PyEH3z0mkv5wkypdQxnIpbwSO1lkLL1ZHU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl
rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2164 (0x874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168E98, serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D
Validity
Not Before: Mar 2 01:57:24 2026 GMT
Not After : Mar 9 01:57:24 2026 GMT
Subject: CN=69a4ee84-753e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ba:55:a8:af:a3:c3:a9:a4:61:ee:f4:8e:21:
56:2b:cb:08:84:a4:83:99:78:c2:ca:0b:a2:28:3b:
a3:53:27:26:dc:9e:40:39:12:5b:4e:84:a1:4b:83:
a3:ad:72:90:95:b5:bd:bf:b7:ae:08:b7:14:dd:ea:
b5:c0:e5:5e:49:2a:b7:8b:40:68:ce:18:15:55:d1:
2a:03:16:1f:2e:85:4c:2d:59:c0:9e:76:fb:da:e3:
c4:04:e6:07:79:2f:34:51:c5:f4:45:01:1d:f8:eb:
40:2f:42:3c:a6:ad:80:0a:c3:33:27:0f:86:ff:9b:
7b:06:30:d5:7b:af:b3:de:ec:55:ff:a3:50:fc:b1:
f0:9b:b5:ec:f5:41:b3:58:8e:09:0c:ae:82:31:17:
aa:f6:b9:1d:c8:e0:8a:08:9f:c1:55:0e:04:87:3d:
99:c2:44:5e:7f:f8:ec:21:38:3b:d6:10:1b:55:14:
f7:de:de:f9:30:e3:ff:e6:b1:3f:87:5c:94:e5:02:
8c:c6:f4:de:79:80:bc:bc:e6:cf:4d:68:bb:04:bb:
d9:a9:cc:f7:9c:c0:ff:10:0b:40:8f:1b:e0:55:7d:
b4:84:de:78:43:af:97:fb:be:92:eb:1e:fc:38:2d:
d3:10:f2:b2:02:82:dd:b6:1d:2d:c1:89:b1:20:97:
88:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:36:5D:A0:51:D3:4A:84:40:EF:2B:BE:2A:0B:61:26:26:52:CC:90
X509v3 Authority Key Identifier:
keyid:C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:cb:46:85:46:51:48:ac:59:a7:d8:3c:5f:e9:7c:7e:3b:cf:
9f:a3:6c:68:9a:85:fe:4d:2f:96:35:7e:ad:7d:ec:9c:de:27:
4b:10:cc:9a:94:77:68:0f:71:b5:66:36:b7:c9:39:30:47:0c:
81:24:c0:59:00:0a:25:e7:d4:c1:e4:93:5a:5d:9a:15:cd:80:
48:d0:e9:5b:ef:b5:69:36:55:a8:aa:3f:89:58:e0:0a:41:e1:
c9:ba:5a:1a:ed:7f:54:50:26:a3:52:66:5f:d4:cf:00:07:7f:
f6:12:a8:e0:4e:b3:36:77:5a:f8:c2:1a:fd:98:71:d0:b2:b0:
79:f6:3e:f1:c8:76:cd:ed:48:5f:94:a5:6e:44:32:16:ca:9a:
a7:ea:b5:3d:b7:a0:99:37:ba:77:7c:1d:99:d4:10:0d:d3:c1:
3a:93:43:70:7b:f5:94:d7:3e:ff:3b:ca:44:d6:72:de:01:d6:
20:a1:8e:c5:a8:47:0f:de:e5:18:47:af:ce:e9:bf:af:9e:bb:
cf:c1:70:d9:8a:28:03:d5:d1:41:10:c5:15:d6:3f:0f:3b:36:
47:32:d7:37:90:2c:44:cf:bc:7a:cd:c6:f9:f1:fb:8c:8a:56:
5b:97:0b:b5:9c:cf:04:e7:3a:b0:78:38:ce:66:b5:fd:15:d6:
97:76:c3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:26:01 2026 by rpki-client