
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft
File: _Yje-aa92-pZOJ7cYXGq3KEGtQk.mft (raw, json)
Hash identifier: 8NKz8bvf+wYs9LVI1ioBx6DpWjxLSSB669ZJbXPgB2w=
Subject key identifier: 87:80:7D:A9:F4:74:A2:77:8D:CF:48:FC:64:8D:02:71:40:B9:D5:FB
Authority key identifier: FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09
Certificate issuer: /CN=A9172FC5/serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509
Certificate serial: 010E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft
Manifest number: 0106
Signing time: Wed 15 Apr 2026 05:40:30 +0000
Manifest this update: Wed 15 Apr 2026 05:40:30 +0000
Manifest next update: Wed 22 Apr 2026 05:40:30 +0000
Files and hashes: 1: _Yje-aa92-pZOJ7cYXGq3KEGtQk.crl (hash: GpGJIH4Sfs9TaD8m49HML2Z9ngaXc0D2dtprwUy1SUI=)
2: 2D810A88AB4011EF849D9515C4F9AE02.roa (hash: ReDU3pM6puyTOqvPDYn/OPZQZEhbfRxZyleb6fyedWE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl
rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 05:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172FC5, serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509
Validity
Not Before: Apr 15 05:40:30 2026 GMT
Not After : Apr 22 05:40:30 2026 GMT
Subject: CN=69df24ce-6439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:b1:2f:57:ab:70:ad:1f:05:84:f7:c0:20:
dc:64:34:41:62:fc:84:c9:71:06:36:6b:af:22:31:
58:2d:80:64:38:64:0a:e5:59:09:60:08:f3:c3:9a:
65:67:7c:84:d7:76:13:50:99:0c:99:1d:2e:9a:65:
c1:89:cc:09:fe:83:72:c9:21:6e:e1:8d:7a:70:d1:
5d:4f:bd:9a:32:33:a6:c2:50:6c:6e:f6:85:c7:25:
cd:ee:08:c8:25:6e:1f:03:62:13:d5:1d:02:5b:da:
bd:4c:3b:2f:e9:08:b0:e4:cb:03:bd:97:8a:2d:c7:
54:27:ae:c2:08:32:97:26:71:9e:38:9a:30:00:d9:
f2:82:87:69:f5:5f:95:fd:48:ca:19:73:51:dd:df:
7e:f2:71:e8:af:be:1d:5a:20:73:fd:3c:2f:64:5d:
22:71:fa:b5:23:fb:35:9a:b1:20:f4:aa:8d:42:6b:
71:ce:b4:f2:b8:2f:00:85:f1:1f:0e:99:b3:bf:ca:
85:9f:a1:b7:8f:44:23:37:cd:fc:f0:64:41:73:12:
28:b1:60:4f:80:0e:ca:56:b8:65:63:cf:04:63:08:
e2:80:ab:1f:6f:38:31:32:30:8e:66:12:3d:f9:a9:
7e:aa:98:77:04:ea:30:29:3d:82:23:9c:79:56:f9:
9e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:80:7D:A9:F4:74:A2:77:8D:CF:48:FC:64:8D:02:71:40:B9:D5:FB
X509v3 Authority Key Identifier:
keyid:FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:c8:58:cf:56:3e:e1:6f:f3:bb:22:58:d3:f1:ad:53:f0:a9:
b5:1f:84:f3:d3:c0:03:df:ee:2a:b3:b8:93:06:b5:d2:57:0f:
4a:63:f5:b7:2b:9e:7c:1f:38:bc:b1:f1:35:74:c6:b0:78:92:
62:96:b5:ff:b3:2f:5e:4f:f2:0b:d0:92:2e:33:97:73:a1:16:
be:2f:ec:de:aa:66:4e:fb:b4:e9:cb:b1:6b:27:b6:12:df:30:
3d:82:f2:27:7c:a9:66:cd:6a:b4:22:67:64:83:0e:1f:15:44:
9e:cf:21:26:3d:a1:a1:e1:a5:b2:f7:4e:55:35:8b:03:ed:5e:
d1:3a:0f:ed:95:66:4a:cb:52:a6:f7:e6:85:87:ab:e2:48:32:
b2:b0:d3:8c:16:74:bf:88:49:0e:02:a2:c2:d9:29:56:ab:1f:
e4:22:c7:96:e9:84:c7:d9:ce:62:48:9a:9d:0b:11:45:ff:4c:
75:6a:c9:35:65:67:2c:4a:34:38:2c:fc:1a:18:30:c5:6b:32:
92:94:b3:82:3f:9b:c7:20:fe:13:d1:c1:89:98:66:e1:2d:a3:
44:51:d1:4e:2a:30:cb:b1:9b:8d:4f:84:65:73:45:6c:6b:0c:
40:1b:6f:62:fe:ec:2a:45:6d:4b:5c:de:52:90:50:33:bc:af:
0d:32:03:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:38 2026 by rpki-client