
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
File: YBi5hcOZywcxwWNM_ktHkS8q9dE.mft (raw, json)
Hash identifier: iqc0Ampe0o/I2P7h0Btqw8UJOAVJdSmIu99eUOI6qDk=
Subject key identifier: 93:DF:6E:65:D8:29:A3:72:95:29:5C:92:8A:1E:F7:D5:38:E4:AF:16
Authority key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
Certificate issuer: /CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Certificate serial: 02D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
Manifest number: 02CC
Signing time: Mon 21 Sep 2026 01:15:26 +0000
Manifest this update: Mon 21 Sep 2026 01:15:26 +0000
Manifest next update: Mon 28 Sep 2026 01:15:26 +0000
Files and hashes: 1: YBi5hcOZywcxwWNM_ktHkS8q9dE.crl (hash: ouhbqcc8/vH/OEKJF/SOoKBMzXn5pm08KFnw8k4VYVI=)
2: C386C06A706211EDA9CCDB76C4F9AE02.roa (hash: tSM9UI8Nun2AOG+Ik7kE9gWzPNKVQk3XnwhRrm6CZDE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 724 (0x2d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183BA5, serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Validity
Not Before: Sep 21 01:15:26 2026 GMT
Not After : Sep 28 01:15:26 2026 GMT
Subject: CN=6ab0852e-5147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6b:e5:64:b6:e8:19:e8:58:10:fd:a7:3e:cb:
eb:34:c3:16:68:4e:86:f8:c9:ac:c7:b7:d5:c8:98:
3e:a3:72:a0:d5:aa:7d:52:66:fb:7a:55:7a:36:09:
68:64:b2:de:8e:f5:6c:98:98:d0:8d:55:30:80:76:
b4:e5:9d:49:22:b9:8c:95:a1:0d:f9:cd:d2:1c:a6:
d5:26:c3:7e:22:6a:5c:31:ab:09:10:9d:66:7f:64:
d6:b9:75:49:56:d8:84:87:61:61:81:e7:7c:43:f9:
03:70:d2:97:1b:e5:a7:c3:05:1e:72:18:9c:dc:3b:
bd:f9:89:29:96:f6:fc:b4:a4:3b:94:58:a4:4f:42:
77:cd:c8:ff:78:a9:68:66:3a:df:a4:b0:a7:fa:8a:
b8:da:b1:19:f9:a7:01:f0:50:ce:92:a3:7f:f7:9d:
16:90:60:82:0f:81:78:bb:98:33:fc:13:e6:5c:35:
b3:c2:97:d9:41:fe:e9:eb:13:fb:66:4d:66:52:77:
ff:ae:a9:8b:76:05:7a:39:03:c2:87:d2:32:ec:7a:
b1:a2:36:57:7e:4d:a1:89:fa:ee:b8:6f:93:2c:2d:
eb:7b:c6:48:69:36:0f:00:aa:5e:6e:dd:10:4f:d7:
ea:a0:67:a4:37:d9:61:26:f3:79:02:b0:b1:3f:09:
a0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DF:6E:65:D8:29:A3:72:95:29:5C:92:8A:1E:F7:D5:38:E4:AF:16
X509v3 Authority Key Identifier:
keyid:60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:84:90:65:e8:f1:bd:cd:8b:96:4e:40:99:7d:31:31:40:59:
c0:8c:e1:ea:fe:ed:1f:58:c8:a2:30:5d:66:81:4a:45:1d:7d:
ef:03:a8:40:7a:d5:bc:34:87:70:ae:ae:fc:6e:4e:33:97:c0:
51:ad:29:ad:9e:b5:40:f9:a7:fa:04:da:83:e8:fd:34:ad:87:
0e:b8:cb:94:0c:b5:f2:47:ae:d4:f6:e6:89:4d:32:a2:64:9e:
e3:64:66:10:9f:12:ce:3a:69:49:a8:06:41:a3:13:61:75:ee:
8c:48:1a:63:05:e4:a5:35:69:a5:8b:9e:8a:c1:b4:58:92:9f:
56:40:95:28:c5:e5:b9:fd:04:de:6d:18:33:fe:97:4b:e1:56:
27:a0:be:67:e3:7e:ab:35:cd:87:ec:a1:a3:5a:e8:25:39:b6:
e0:30:07:ee:be:7f:bf:e0:04:af:9c:13:11:55:ee:4f:a1:a3:
6a:34:c5:dc:3b:82:40:f2:ba:2f:13:4e:a0:45:60:b8:d8:2f:
5c:4f:33:23:dd:e0:28:53:b8:3a:ca:bd:cf:c5:00:26:94:96:
39:bf:80:2a:bf:68:5a:38:7f:e6:58:b0:61:23:b0:a1:68:13:
6c:da:4d:2e:7f:c4:ce:12:e5:8e:d6:eb:6b:75:c1:7e:6a:d4:
59:8f:83:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:25:45 2026 by rpki-client