
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
File: yEnB9uuNGws3lLBgxJxam9U61Mk.mft (raw, json)
Hash identifier: guooEGtijAP5ye+wlg/YRr2JuESBuG+VicNt9HHOPGY=
Subject key identifier: 67:79:48:F9:26:BA:2D:84:4D:27:07:97:DF:1A:F9:E3:48:C4:12:35
Authority key identifier: C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9
Certificate issuer: /CN=A9180DA5/serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9
Certificate serial: 0179
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
Manifest number: 0177
Signing time: Mon 21 Sep 2026 04:41:05 +0000
Manifest this update: Mon 21 Sep 2026 04:41:05 +0000
Manifest next update: Mon 28 Sep 2026 04:41:05 +0000
Files and hashes: 1: yEnB9uuNGws3lLBgxJxam9U61Mk.crl (hash: qjS/LKmb1SCkyMKWPxeVe2IZ7RwIvLicJMs17cCR1m0=)
2: FC9B052E73ED11EFBE08A45AC4F9AE02.roa (hash: 9n+XwMxzkkMMvREjsse3a1ZuBorrEMJnsZ5Bb57THws=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl
rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377 (0x179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180DA5, serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9
Validity
Not Before: Sep 21 04:41:05 2026 GMT
Not After : Sep 28 04:41:05 2026 GMT
Subject: CN=6ab0b561-ddc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:67:37:15:2b:22:eb:50:82:4a:a9:5f:7a:96:
26:5c:0e:db:3a:52:6e:36:69:57:b2:22:1f:87:ca:
b4:18:36:bf:84:79:66:57:7f:52:f1:3c:2f:84:08:
a5:bb:2d:ac:63:50:a6:66:9d:4d:ce:92:46:1f:cc:
04:9f:eb:86:43:fa:c0:6b:38:d6:bd:48:80:3d:a3:
f3:77:bf:4c:a9:33:d9:fb:d4:29:95:41:0c:57:a9:
7b:2b:20:a0:36:43:8b:56:f0:54:07:95:72:5d:f2:
d2:5c:19:7f:b3:39:bd:b7:f7:9e:3e:24:80:f0:1b:
53:b7:08:0e:3a:cc:04:cd:b9:4f:aa:f3:47:0f:20:
93:9a:dc:64:f8:e5:44:8b:86:a4:f8:54:db:85:87:
2f:c0:ca:22:55:88:56:95:fb:87:a0:2b:fa:04:94:
aa:7b:b1:f5:97:4e:b4:39:f4:4f:1b:e7:21:ee:99:
5a:06:1e:69:27:81:df:4f:af:33:3e:10:5c:41:f2:
82:8e:fa:ae:48:bd:f2:de:fe:d2:8d:25:0c:44:0f:
28:d9:30:b9:01:d4:7a:32:32:cc:9a:19:b8:7a:09:
cf:9c:7a:c4:67:d6:eb:06:20:86:99:8a:13:bd:02:
24:82:a4:bf:d0:6e:16:d2:06:de:d1:ea:8b:87:02:
45:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:79:48:F9:26:BA:2D:84:4D:27:07:97:DF:1A:F9:E3:48:C4:12:35
X509v3 Authority Key Identifier:
keyid:C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3f:95:1e:0e:7b:56:45:37:d1:3c:e1:15:3c:1a:f6:89:0d:
03:25:d8:df:3a:6d:9c:e9:5b:82:44:b7:a8:56:03:99:f6:53:
e7:cd:67:5b:37:ea:ac:c7:99:34:97:26:84:fe:64:82:07:c1:
3d:82:43:c1:91:ee:44:31:fa:16:20:b2:b6:2f:fd:bd:97:71:
ca:da:f3:e3:5e:22:97:23:97:f0:2d:24:bf:c7:59:2a:ad:b7:
b6:6f:ab:92:b1:a9:da:ce:00:0a:ed:df:1f:bb:4d:f9:34:b2:
8c:26:14:97:28:8d:76:ac:6f:9f:2d:aa:ec:79:7f:75:fc:b7:
80:0e:ec:39:12:fb:f1:6d:f5:16:38:78:ce:44:3f:98:4d:de:
e4:64:f6:f4:38:72:e5:a9:61:3f:91:c6:96:c3:40:91:f9:59:
b7:59:c6:f3:0c:9c:ae:4b:0a:34:3f:ad:db:70:dc:ed:c3:12:
51:e7:1c:ee:d4:34:2a:d7:ed:62:9b:48:2e:05:2d:f9:54:b7:
35:73:78:80:71:8a:de:f3:a4:fa:b4:ba:86:90:66:75:db:9c:
1a:dd:61:d8:c9:8c:d9:6d:d7:72:d5:ff:f0:f8:5a:de:27:4b:
5e:36:53:74:01:c2:54:69:59:68:ad:6a:ff:9f:29:22:76:09:
5f:2a:d1:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODBEQTUxMTAvBgNVBAUTKEM4NDlDMUY2RUI4RDFCMEIzNzk0QjA2MEM0OUM1QTlC
RDUzQUQ0QzkwHhcNMjYwOTIxMDQ0MTA1WhcNMjYwOTI4MDQ0MTA1WjAYMRYwFAYD
VQQDEw02YWIwYjU2MS1kZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Gc3FSsi61CCSqlfepYmXA7bOlJuNmlXsiIfh8q0GDa/hHlmV39S8TwvhAil
uy2sY1CmZp1NzpJGH8wEn+uGQ/rAazjWvUiAPaPzd79MqTPZ+9QplUEMV6l7KyCg
NkOLVvBUB5VyXfLSXBl/szm9t/eePiSA8BtTtwgOOswEzblPqvNHDyCTmtxk+OVE
i4ak+FTbhYcvwMoiVYhWlfuHoCv6BJSqe7H1l060OfRPG+ch7plaBh5pJ4HfT68z
PhBcQfKCjvquSL3y3v7SjSUMRA8o2TC5AdR6MjLMmhm4egnPnHrEZ9brBiCGmYoT
vQIkgqS/0G4W0gbe0eqLhwJFiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGd5SPkm
ui2ETScHl98a+eNIxBI1MB8GA1UdIwQYMBaAFMhJwfbrjRsLN5SwYMScWpvVOtTJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERBNS9BNzMzN0M2QTcz
RUQxMUVGQjBCQTAyNUFDNEY5QUUwMi95RW5COXV1Tkd3czNsTEJneEp4YW05VTYx
TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3lFbkI5dXVOR3dzM2xMQmd4SnhhbTlVNjFNay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MERBNS9BNzMzN0M2QTczRUQxMUVGQjBCQTAyNUFDNEY5QUUwMi95RW5COXV1Tkd3
czNsTEJneEp4YW05VTYxTWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApz+VHg57VkU30TzhFTwa9okNAyXY3zptnOlbgkS3qFYDmfZT581nWzfqrMeZ
NJcmhP5kggfBPYJDwZHuRDH6FiCyti/9vZdxytrz414ilyOX8C0kv8dZKq23tm+r
krGp2s4ACu3fH7tN+TSyjCYUlyiNdqxvny2q7Hl/dfy3gA7sORL78W31Fjh4zkQ/
mE3e5GT29Dhy5alhP5HGlsNAkflZt1nG8wycrksKND+t23Dc7cMSUecc7tQ0Ktft
YptILgUt+VS3NXN4gHGK3vOk+rS6hpBmdducGt1h2MmM2W3XctX/8Pha3idLXjZT
dAHCVGlZaK1q/58pInYJXyrRzw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:43:23 2026 by rpki-client