
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.mft
File: yoz-J9giejF1jevDyM-0mmi9nBY.mft (raw, json)
Hash identifier: qFlPvepwTg/PeYg2a077trr7b2XpRe2v7GxZc7cdnw4=
Subject key identifier: FE:ED:E2:8B:FF:65:F6:CF:EF:C3:EF:42:8B:4B:16:AD:9C:C9:99:BF
Authority key identifier: CA:8C:FE:27:D8:22:7A:31:75:8D:EB:C3:C8:CF:B4:9A:68:BD:9C:16
Certificate issuer: /CN=A9181C22/serialNumber=CA8CFE27D8227A31758DEBC3C8CFB49A68BD9C16
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoz-J9giejF1jevDyM-0mmi9nBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.mft
Manifest number: 30
Signing time: Sun 11 Oct 2026 09:20:25 +0000
Manifest this update: Sun 11 Oct 2026 09:20:25 +0000
Manifest next update: Sun 18 Oct 2026 09:20:25 +0000
Files and hashes: 1: yoz-J9giejF1jevDyM-0mmi9nBY.crl (hash: dzZVRwL4WnJIh4bZdPonvMFqqlaTsla8tdzuFSM7em0=)
2: 790311F0862B11F19F545A5A85A30FBC.roa (hash: K758P2i0ED5BUiODFKBBk7m3g6wZiKJoenMN8VI5EMY=)
3: 79FCD514862B11F19F545A5A85A30FBC.roa (hash: 0lUhr9E0+OD/ipp8YwvzpZUPTlZiljm7z4wnu4JJie8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.crl
rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoz-J9giejF1jevDyM-0mmi9nBY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 09:20:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181C22, serialNumber=CA8CFE27D8227A31758DEBC3C8CFB49A68BD9C16
Validity
Not Before: Oct 11 09:20:25 2026 GMT
Not After : Oct 18 09:20:25 2026 GMT
Subject: CN=6acb54d9-a738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7e:87:55:68:04:ad:42:88:70:59:6c:10:48:
c3:56:4b:bb:1e:38:de:0e:94:a3:3b:c7:b1:89:1a:
3a:59:3d:3d:a3:fd:f9:84:aa:82:bf:75:81:30:3f:
0d:eb:f9:9c:ff:46:1f:7b:88:9c:45:84:0d:8a:0c:
c3:49:e7:6c:bb:f7:b3:ce:5f:0b:05:78:24:2a:35:
4f:15:a5:bf:7a:9d:58:64:f1:f4:e0:30:eb:14:cd:
8e:c9:33:80:29:0d:55:8f:da:c8:67:99:5a:32:d4:
26:c9:ef:36:45:c5:ab:56:d7:7d:79:4b:60:8a:3a:
17:1f:a0:06:f6:65:e2:32:0e:f2:0a:44:77:20:68:
29:03:6f:05:54:0e:61:f7:f0:bb:5c:d7:43:8d:b6:
9c:7c:20:b3:cc:ae:dd:a9:9b:67:af:40:68:57:d9:
70:01:6e:c9:bb:34:33:69:d8:cd:a8:ad:e5:6b:fe:
1f:cb:30:24:4d:30:0d:d8:14:b2:b3:21:1f:8f:54:
e4:a3:87:76:db:a3:0d:96:51:af:d5:c6:39:7f:41:
47:f7:05:06:25:5d:0c:56:80:48:c2:3d:46:69:14:
bf:b1:51:1b:41:24:24:d1:01:fe:a0:9e:eb:86:eb:
79:51:09:1f:83:24:74:da:a6:a1:4f:8f:6e:37:bd:
d5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:ED:E2:8B:FF:65:F6:CF:EF:C3:EF:42:8B:4B:16:AD:9C:C9:99:BF
X509v3 Authority Key Identifier:
keyid:CA:8C:FE:27:D8:22:7A:31:75:8D:EB:C3:C8:CF:B4:9A:68:BD:9C:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoz-J9giejF1jevDyM-0mmi9nBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:2a:b7:f6:e9:cd:a3:ec:6b:09:10:f2:08:37:49:1b:f9:53:
f9:96:04:dc:37:b3:08:ae:46:29:21:15:4a:26:23:57:4f:0d:
47:46:15:28:a3:0b:2d:2f:bd:de:70:2d:9c:07:97:a9:e9:78:
75:5a:62:2b:b2:e2:c9:8c:a0:de:dd:33:c7:5f:59:d5:b2:c9:
59:2c:bb:2b:8f:36:15:a7:7c:08:fe:d4:11:9d:8c:aa:20:d1:
46:57:86:ed:96:ec:6b:a8:d7:f3:72:22:b8:84:8c:4c:1c:28:
5c:17:bd:d8:b0:8f:ff:44:96:63:6a:c4:5a:38:0d:66:04:ee:
aa:4f:5f:10:77:21:b7:cd:06:85:23:e8:95:67:4c:2c:bc:69:
7e:91:94:55:ff:7f:28:32:6f:a0:cd:14:99:8b:fd:6e:31:00:
4d:ca:ed:a8:34:54:58:6a:7b:c8:3a:80:2a:d4:7a:bd:69:8a:
c5:98:89:6a:70:9c:13:d6:0e:23:df:62:ef:ec:70:f5:08:95:
dd:a2:36:ff:9f:86:cb:4d:b2:a9:85:c5:22:15:c7:d4:ec:f0:
cf:9b:60:5e:6f:a6:09:ff:09:35:ed:e1:8b:0b:4d:49:99:ec:
96:b2:da:51:fd:f0:28:cb:05:a0:89:10:4f:02:7b:47:03:92:
0b:87:ff:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:35:39 2026 by rpki-client