
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft
File: yZhQyMiGp__kXfG6HWUCy1pl63A.mft (raw, json)
Hash identifier: fzAHf/D/hlGzyisK0iSRZLoCP+XgdIl1Xg/IxjU58CQ=
Subject key identifier: 48:9A:16:3F:30:31:1B:23:A5:FA:9E:94:C7:9B:AA:4A:0C:FB:BC:A8
Authority key identifier: C9:98:50:C8:C8:86:A7:FF:E4:5D:F1:BA:1D:65:02:CB:5A:65:EB:70
Certificate issuer: /CN=A917049A/serialNumber=C99850C8C886A7FFE45DF1BA1D6502CB5A65EB70
Certificate serial: 7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft
Manifest number: 79
Signing time: Mon 21 Sep 2026 07:51:08 +0000
Manifest this update: Mon 21 Sep 2026 07:51:07 +0000
Manifest next update: Mon 28 Sep 2026 07:51:07 +0000
Files and hashes: 1: yZhQyMiGp__kXfG6HWUCy1pl63A.crl (hash: AMrw7GBvdX1nFlM8AdFtMSamTj9uwyr97aNPp6f4VaA=)
2: IPkMDs2eoGQhKXDCHa4kNgAmmi8.asa (hash: fSNzwzAfik/2NjZ2IYNMHkWvsbpoc4n7mp89BMe4QZI=)
3: F8509F6A885911F1B22A50DC5811F970.roa (hash: 0ZJc6HpJQj8dHT3b0KkTTBviPLM36CJSUhPWP4NZyPg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.crl
rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917049A, serialNumber=C99850C8C886A7FFE45DF1BA1D6502CB5A65EB70
Validity
Not Before: Sep 21 07:51:07 2026 GMT
Not After : Sep 28 07:51:07 2026 GMT
Subject: CN=6ab0e1eb-21f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:de:91:55:91:18:cf:38:a7:03:90:62:01:
a7:b0:d6:a0:e7:ef:f2:04:bb:0c:fa:2a:be:e4:0a:
0e:8a:0b:ae:99:f1:76:e9:c1:93:91:d4:fc:4c:1a:
a7:65:4c:95:83:f7:b8:67:99:5b:42:d9:5b:25:74:
e6:7b:f7:41:da:14:e5:fd:cc:8f:80:2e:54:85:e2:
ff:ce:a4:8f:0b:17:b5:54:10:bd:40:ce:b0:c0:91:
4a:02:95:15:97:f5:a0:83:9f:62:ba:de:75:63:3d:
9e:7d:a3:66:e3:b5:48:c4:4d:55:2e:86:9e:b6:2e:
ba:23:70:8a:ce:33:1d:b5:a2:aa:4a:01:22:b1:7a:
ea:02:f5:99:bc:f6:f0:d8:9a:c5:ed:0e:0f:f1:b7:
fb:42:74:b9:d4:b2:84:db:51:a4:12:53:df:01:d2:
94:85:15:b2:13:95:0f:50:b5:7f:b2:29:40:f3:14:
a1:23:bd:ad:3f:6d:a8:a3:32:c2:d3:4c:5b:08:b2:
98:4b:24:f5:09:4b:77:ae:89:7e:1b:30:25:cd:1e:
6e:39:53:9f:84:54:d8:53:ec:48:cf:17:66:53:ab:
e8:fb:96:51:d4:66:a4:df:e3:13:da:fa:64:90:17:
72:51:cb:59:d5:5e:37:15:64:d1:53:eb:87:84:a3:
e9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9A:16:3F:30:31:1B:23:A5:FA:9E:94:C7:9B:AA:4A:0C:FB:BC:A8
X509v3 Authority Key Identifier:
keyid:C9:98:50:C8:C8:86:A7:FF:E4:5D:F1:BA:1D:65:02:CB:5A:65:EB:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:7f:f5:0f:ea:60:0e:5c:e4:3f:05:5e:b7:96:72:02:0c:4d:
0c:ab:3a:3d:43:9a:fc:51:dc:34:f4:01:39:72:c9:b1:2f:8b:
d4:84:28:49:77:85:99:34:bd:10:35:8f:79:63:b4:99:cb:6e:
ce:1f:f3:27:c6:ae:45:e3:85:e4:b9:dd:89:e8:2e:22:9d:f4:
7d:84:e8:7a:a0:f6:bf:1a:8a:db:72:12:94:d1:f7:69:77:98:
a7:b4:9b:9a:b9:67:3c:9f:bd:94:d8:dd:77:7d:f9:d6:81:d1:
09:e6:99:0e:b7:63:94:f8:37:32:23:1b:46:5d:99:8f:22:30:
9b:0c:7b:e3:b1:55:1b:c1:2e:99:76:51:81:61:83:3d:87:c0:
d8:69:6b:e2:29:a6:fd:4a:4d:57:ad:65:30:33:a8:34:aa:f5:
6a:c1:1c:bb:ea:b5:67:0b:3e:7e:7d:19:ad:0c:b7:ec:da:2f:
28:c1:ae:69:f5:9f:55:d2:a5:c3:c0:9d:d8:b5:42:b7:f1:1b:
12:7d:18:4b:67:c9:85:11:8d:b9:01:db:6a:ee:17:b0:d9:02:
93:67:b3:8b:9d:10:ea:0a:e3:2e:c6:ff:27:4d:a7:32:46:e3:
0f:46:5b:01:6f:c0:8e:f8:e2:08:b7:8b:e7:99:8b:fb:43:1b:
ec:18:e0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:04:20 2026 by rpki-client