
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
File: YiOr1va2e6_v4-c2Rv16ZuECFL4.mft (raw, json)
Hash identifier: dbfcJlBAsqAjfV34d0f7+3+LHCOhx4+rLSIwLJcU3JI=
Subject key identifier: 69:60:43:6F:19:5F:7E:EF:AC:98:A8:05:41:F0:DA:08:C4:C7:E5:2D
Authority key identifier: 62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE
Certificate issuer: /CN=A9176FD9/serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
Certificate serial: 018B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
Manifest number: 016E
Signing time: Fri 17 Apr 2026 04:29:20 +0000
Manifest this update: Fri 17 Apr 2026 04:29:19 +0000
Manifest next update: Fri 24 Apr 2026 04:29:19 +0000
Files and hashes: 1: YiOr1va2e6_v4-c2Rv16ZuECFL4.crl (hash: V1Pmi1q7di7Z/Jm0C1/kGCPtIqWbeTjiCadgReMBSlE=)
2: A937C2200FA511EFBDB06936C4F9AE02.roa (hash: g2XOcezvQ7KxIm645xlMyxErFktIXV60RTFqR5uY2Hw=)
3: 878615B88D3211EF9E092384C4F9AE02.roa (hash: +Oriw3lUJw94Q18jNkVCiDGs/4UmxApuASFaCH+rWfE=)
4: 884A59828D3211EF9E092384C4F9AE02.roa (hash: 6cl4hRPCA+MAEDHJqAR36U+3vHDUJ12lZhGnjQOUElU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl
rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176FD9, serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
Validity
Not Before: Apr 17 04:29:19 2026 GMT
Not After : Apr 24 04:29:19 2026 GMT
Subject: CN=69e1b720-92af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7a:c8:fb:50:d5:c0:59:4a:15:5a:cc:22:a9:
a8:c9:b5:b3:7f:7d:fe:b1:9f:ac:e5:71:c4:03:23:
f3:d1:bf:e4:7d:66:81:f5:50:4e:53:ec:6c:47:8c:
e0:04:75:7a:60:cc:8b:38:04:26:a6:7f:c2:1b:e5:
dc:06:a5:91:31:bb:5a:a3:c3:02:8f:95:df:87:ea:
ef:f1:18:d1:7a:7b:97:4d:6b:9f:63:b9:d3:a0:f8:
9f:61:ea:5a:b4:e8:35:6e:95:de:3b:a7:c3:55:40:
f5:6b:d1:23:58:57:28:33:49:59:82:29:02:b9:36:
7b:45:15:f8:ad:85:80:2e:d5:18:42:cc:62:77:53:
05:6d:6c:c1:6b:27:8a:92:dc:10:b9:d7:9a:25:7f:
4d:0b:dc:90:29:66:53:a3:89:b8:0b:e9:31:41:34:
9d:6b:a6:6d:fa:38:94:2c:3a:8d:36:47:0a:7f:c3:
e8:d6:5c:61:47:48:99:cc:1c:b7:99:55:e9:e8:63:
75:a0:0f:78:59:cc:f7:81:d3:e8:6a:f9:d6:51:d1:
e6:b0:1f:ab:b6:8e:a6:1c:1e:30:c9:74:38:60:9d:
db:39:10:de:28:e7:66:d8:f4:8e:ef:10:2e:aa:0d:
a7:5d:e2:56:ee:6d:5d:66:96:c1:85:21:fc:92:4e:
1f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:60:43:6F:19:5F:7E:EF:AC:98:A8:05:41:F0:DA:08:C4:C7:E5:2D
X509v3 Authority Key Identifier:
keyid:62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:c7:38:3b:58:ba:5c:67:12:0a:fe:eb:1c:bb:25:f8:22:43:
4f:2e:24:fe:12:14:8c:bc:b8:d1:cd:5f:c7:d0:ff:90:b0:16:
e7:20:94:8a:e0:4a:21:59:3c:8b:04:0c:dc:9f:b1:94:ca:a9:
97:8a:e2:1b:8a:e7:77:58:a8:79:f4:fa:bd:c7:66:f8:86:8e:
10:99:b8:d9:d3:2a:69:8d:43:fe:85:09:95:fc:38:22:11:ce:
63:21:e6:29:86:9b:ee:94:db:9e:3c:0b:d6:68:97:f3:0e:b5:
bf:d1:c9:ca:7f:64:fe:d9:e5:d5:3d:b6:ec:85:88:be:59:62:
e6:10:c6:9d:ef:8f:82:a6:94:9b:c4:4a:a1:39:1e:34:4e:5a:
b8:30:bb:fd:a5:e3:78:14:4d:3e:94:c4:ff:48:1b:79:98:b0:
56:ca:cf:8c:44:3b:69:42:49:be:95:8c:7f:85:8c:bd:b1:11:
e2:74:22:6e:01:4b:92:f2:2b:f4:de:fe:c9:85:f5:19:82:df:
f9:d5:99:a1:2a:df:67:cb:32:cd:13:4e:66:e3:bf:46:9f:f3:
15:f1:2b:20:50:43:55:fa:2a:c8:9a:da:47:db:96:24:6a:aa:
a1:8f:62:6f:64:a4:a0:05:00:37:ab:c0:70:cf:4b:0d:b1:71:
21:0d:ce:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:53:45 2026 by rpki-client