
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft
File: YG6ylYJUrJi2M26qQayAstyxnG4.mft (raw, json)
Hash identifier: mP7sDUhfHgLOVOMX3mZsU2El3fvDMlKMGm8AsHhy6Eo=
Subject key identifier: 9D:B2:7D:01:39:B9:40:AA:DA:5D:EA:11:1E:4B:C0:FF:42:B7:71:B5
Authority key identifier: 60:6E:B2:95:82:54:AC:98:B6:33:6E:AA:41:AC:80:B2:DC:B1:9C:6E
Certificate issuer: /CN=A9170D3E/serialNumber=606EB2958254AC98B6336EAA41AC80B2DCB19C6E
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft
Manifest number: F7
Signing time: Mon 02 Mar 2026 02:26:57 +0000
Manifest this update: Mon 02 Mar 2026 02:26:56 +0000
Manifest next update: Mon 09 Mar 2026 02:26:56 +0000
Files and hashes: 1: YG6ylYJUrJi2M26qQayAstyxnG4.crl (hash: OonYqMqw7RcBx/ZavJqMrbbB01b84iT27KBrJkK8VZg=)
2: 181772049FD811EF8680B438C4F9AE02.roa (hash: nlnEqbRNBdElRTHPRbYW578QyapawXEp7sk2hMeS67g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.crl
rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170D3E, serialNumber=606EB2958254AC98B6336EAA41AC80B2DCB19C6E
Validity
Not Before: Mar 2 02:26:56 2026 GMT
Not After : Mar 9 02:26:56 2026 GMT
Subject: CN=69a4f571-99ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:77:f3:04:c7:53:8c:be:4a:23:ec:05:98:
09:3f:d8:05:45:4a:eb:57:41:98:fa:f8:82:02:9e:
9c:77:d5:c3:6f:f6:01:9d:b1:69:60:5d:0f:98:14:
06:3d:1a:ec:4a:9c:9b:ab:fb:79:95:43:10:d9:fd:
b9:b1:b5:91:33:21:0d:2b:83:f5:10:98:42:2c:a3:
b5:80:d5:99:99:e0:f3:b4:ec:e1:d1:15:39:89:bb:
67:1e:4b:8b:70:c1:bb:f2:4f:83:05:c1:ff:ca:68:
49:81:f8:d2:d3:14:8f:88:3e:30:8c:9b:28:0c:9a:
51:5d:d9:1e:c6:75:a4:fd:9e:41:85:94:94:35:0e:
1e:4d:ff:0a:03:43:f8:5f:96:de:e0:2f:85:06:e6:
c1:9b:af:29:dc:fb:df:60:3b:a4:1a:45:27:a2:81:
52:bf:ca:7e:16:01:41:fa:53:84:cf:0f:e1:8a:c3:
5e:99:e8:6c:91:b8:c5:8b:6b:06:d6:c5:63:15:16:
9b:d1:97:11:eb:ea:13:d1:e8:a5:4c:92:b0:6f:00:
ba:d7:fb:f4:ef:59:7e:bb:f9:bc:95:32:d7:99:b5:
b2:93:2f:79:61:e4:db:3b:cf:23:09:05:35:67:60:
05:3c:ea:52:cc:61:c6:d8:1b:e4:28:c8:be:13:9b:
75:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B2:7D:01:39:B9:40:AA:DA:5D:EA:11:1E:4B:C0:FF:42:B7:71:B5
X509v3 Authority Key Identifier:
keyid:60:6E:B2:95:82:54:AC:98:B6:33:6E:AA:41:AC:80:B2:DC:B1:9C:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:16:23:b5:23:f0:fd:22:7d:65:82:6f:e9:d6:8f:59:e6:c4:
76:a1:df:ff:6d:86:c5:bd:90:e2:22:b5:28:2b:6f:17:6f:5a:
d7:d9:a7:a9:e0:66:ae:bd:9f:fc:76:29:2b:75:c7:dd:98:a7:
2a:6d:cb:31:e6:2a:3b:e7:8a:62:07:84:a0:5d:7b:81:46:e1:
e7:a0:36:b0:d6:4c:cb:eb:7a:fc:e3:75:61:15:03:4f:0a:ad:
d3:89:0f:16:fc:06:4a:16:0a:36:88:7f:e3:a8:98:f4:a4:1b:
89:3b:06:9e:f8:05:7a:a3:e8:e5:35:77:78:90:a8:17:b2:6a:
27:e1:71:86:db:ac:aa:d8:14:89:1b:43:20:9b:f2:41:aa:d7:
bc:de:34:df:36:a9:ca:c1:60:98:7a:70:c5:10:af:ba:6d:d5:
55:08:a4:51:07:4b:fe:6d:b8:67:5e:95:8d:3c:9b:95:0a:d4:
c1:cc:3d:4d:9a:91:d9:65:2d:53:84:aa:93:a9:5a:63:f7:2f:
c6:01:ba:25:b4:cb:8b:90:3a:33:be:69:e3:d3:f7:c2:e8:00:
76:e1:c9:18:37:72:8b:2c:8d:9a:7f:60:59:3c:79:36:0d:34:
55:cb:e3:57:f2:51:ff:df:b0:d8:46:b9:1d:f3:89:2b:03:75:
1f:3a:58:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:39:29 2026 by rpki-client