
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
File: y2bgNeLweFj09ztHjc2FpjakJQo.mft (raw, json)
Hash identifier: MKZuOPSsn1b9qLnMnVb48U/KPAta2eVKQ5qMjzwL9ZQ=
Subject key identifier: 92:E8:19:36:E5:92:79:95:6F:A9:40:F9:83:7F:43:5B:6D:4F:39:EE
Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
Certificate issuer: /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Certificate serial: 018A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
Manifest number: 0172
Signing time: Fri 17 Apr 2026 04:33:32 +0000
Manifest this update: Fri 17 Apr 2026 04:33:32 +0000
Manifest next update: Fri 24 Apr 2026 04:33:32 +0000
Files and hashes: 1: y2bgNeLweFj09ztHjc2FpjakJQo.crl (hash: tzy60fUG44pyHutui21VQdBo3smbLU5YuethLlr8gTw=)
2: 851515FC1C8711EF964ED80AC4F9AE02.roa (hash: W/2vjJp/ag3H7mSzG2Tr/h0kvrzsLkkzvWHa8WaLTtU=)
3: AF27640226FA11F0B0383240C4F9AE02.roa (hash: vpOc+3kPV6Pm6+6TDvDUsWTnZWPzQSBq8LombYK9VIY=)
4: 24D519F226FA11F0B737393FC4F9AE02.roa (hash: YOuhg57dpyAHyHYCyC+N5mtXIsEkAz+fzXjtzYd+ceI=)
5: 82D8082A292611EF875A5C36C4F9AE02.roa (hash: 4hSO5GJztFmc2Bjlelb4M86yndIsa9VSTZjFpa5DDCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:33:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169C00, serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Validity
Not Before: Apr 17 04:33:32 2026 GMT
Not After : Apr 24 04:33:32 2026 GMT
Subject: CN=69e1b81c-9258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:9d:b4:27:7b:91:b1:9d:ef:1a:35:d5:55:
db:06:e8:89:77:96:bc:bb:0f:c3:5f:ad:ae:ba:38:
9f:60:25:0e:88:46:0e:fb:9b:fe:ac:87:d8:86:04:
25:db:5d:c6:b3:e8:ee:9e:31:cb:4b:4d:e6:3d:17:
09:4e:64:a6:0d:69:b3:4b:23:0a:08:fc:99:52:b0:
ba:60:2a:1f:38:7c:d1:0d:d2:39:e2:c7:0a:2a:63:
ac:2b:d5:26:37:fb:b5:06:9a:0d:6f:ee:cb:b7:f8:
66:14:76:56:80:62:97:d4:27:97:2c:37:c2:48:d0:
42:45:79:b6:57:4a:60:9e:77:68:65:74:7b:1e:63:
fc:f7:95:48:a2:26:31:30:f7:dd:a9:69:60:b7:16:
e9:bc:f9:58:16:07:94:51:a5:22:58:2e:e1:04:27:
16:29:e7:24:b6:b9:47:6c:75:58:5b:f4:10:ac:43:
34:af:af:e3:ba:40:8a:5f:fe:e5:eb:e4:3a:17:bf:
05:46:b6:93:54:6d:a5:ee:99:cc:5d:9e:29:ff:81:
2a:81:5f:4f:ac:79:0e:be:dd:a4:c6:99:7a:3d:92:
0d:8d:fb:26:b3:19:6d:13:6b:94:d6:87:48:82:3e:
e1:b6:14:10:2e:2f:f3:0c:d0:32:9f:cc:f0:52:fd:
14:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E8:19:36:E5:92:79:95:6F:A9:40:F9:83:7F:43:5B:6D:4F:39:EE
X509v3 Authority Key Identifier:
keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:36:12:0d:36:a3:6e:3d:fc:af:c6:92:0f:f0:12:82:7e:2e:
1d:e3:9f:eb:72:dd:a8:cc:90:17:a0:15:f0:ea:e9:e3:12:de:
61:64:cf:23:96:11:15:f0:99:7e:f6:e5:ae:c1:1c:0f:71:49:
b9:6b:51:d9:55:dd:d3:40:c1:88:6c:4b:3e:7e:18:4a:92:29:
c7:7a:75:44:9d:eb:b0:97:b9:6c:2d:b7:f8:ac:56:cd:d0:ce:
9b:21:f8:1b:fc:28:04:b9:6e:47:ee:f2:03:94:fd:df:7c:d9:
8c:57:cc:02:f8:9a:3c:0d:dc:51:e7:24:17:f4:b4:f4:93:11:
70:6f:70:3a:e9:2a:c9:27:3e:97:16:59:05:ae:26:16:f6:be:
9e:3b:40:66:90:ab:7c:58:ea:26:0b:9c:55:c4:d5:26:dc:e7:
01:28:ad:43:e9:d2:d1:31:ea:e6:34:55:4b:47:65:25:26:59:
67:57:7d:63:9f:dc:e7:60:15:4e:38:11:8d:cf:68:77:ae:82:
9f:de:6b:57:cc:82:c1:0d:3b:a6:31:88:26:d3:84:c7:c5:4d:
28:87:30:e2:6f:2e:55:fa:da:3d:4f:35:71:2f:8d:f8:7f:3e:
37:d5:b6:02:56:ec:4f:7f:e3:0b:5c:10:df:99:27:84:5f:81:
ee:3e:9b:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlDMDAxMTAvBgNVBAUTKENCNjZFMDM1RTJGMDc4NThGNEY3M0I0NzhEQ0Q4NUE2
MzZBNDI1MEEwHhcNMjYwNDE3MDQzMzMyWhcNMjYwNDI0MDQzMzMyWjAYMRYwFAYD
VQQDEw02OWUxYjgxYy05MjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsCadtCd7kbGd7xo11VXbBuiJd5a8uw/DX62uujifYCUOiEYO+5v+rIfYhgQl
213Gs+junjHLS03mPRcJTmSmDWmzSyMKCPyZUrC6YCofOHzRDdI54scKKmOsK9Um
N/u1BpoNb+7Lt/hmFHZWgGKX1CeXLDfCSNBCRXm2V0pgnndoZXR7HmP895VIoiYx
MPfdqWlgtxbpvPlYFgeUUaUiWC7hBCcWKecktrlHbHVYW/QQrEM0r6/jukCKX/7l
6+Q6F78FRraTVG2l7pnMXZ4p/4EqgV9PrHkOvt2kxpl6PZINjfsmsxltE2uU1odI
gj7hthQQLi/zDNAyn8zwUv0UYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJLoGTbl
knmVb6lA+YN/Q1ttTznuMB8GA1UdIwQYMBaAFMtm4DXi8HhY9Pc7R43NhaY2pCUK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUMwMC8xQzMxRUFGMDFC
QzAxMUVGQkI2ODhENUVDNEY5QUUwMi95MmJnTmVMd2VGajA5enRIamMyRnBqYWtK
UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3kyYmdOZUx3ZUZqMDl6dEhqYzJGcGpha0pRby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUMwMC8xQzMxRUFGMDFCQzAxMUVGQkI2ODhENUVDNEY5QUUwMi95MmJnTmVMd2VG
ajA5enRIamMyRnBqYWtKUW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOTYSDTajbj38r8aSD/ASgn4uHeOf63LdqMyQF6AV8Orp4xLeYWTPI5YRFfCZ
fvblrsEcD3FJuWtR2VXd00DBiGxLPn4YSpIpx3p1RJ3rsJe5bC23+KxWzdDOmyH4
G/woBLluR+7yA5T933zZjFfMAviaPA3cUeckF/S09JMRcG9wOukqySc+lxZZBa4m
Fva+njtAZpCrfFjqJgucVcTVJtznASitQ+nS0THq5jRVS0dlJSZZZ1d9Y5/c52AV
TjgRjc9od66Cn95rV8yCwQ07pjGIJtOEx8VNKIcw4m8uVfraPU81cS+N+H8+N9W2
AlbsT3/jC1wQ35knhF+B7j6bUw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:39:10 2026 by rpki-client