
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
File: yPzMxL6JiqkgZxNmoP15UynpIB0.mft (raw, json)
Hash identifier: TAzcUzpA3DVsCRLD5cOZvebbjufRFLzWCvbOkeed0yQ=
Subject key identifier: A0:9A:71:19:9F:F3:2C:84:8C:A5:F6:88:AC:EE:23:A9:66:A7:7F:D9
Authority key identifier: C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D
Certificate issuer: /CN=A919040F/serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
Certificate serial: 0CBC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
Manifest number: 0CA5
Signing time: Tue 22 Sep 2026 18:28:41 +0000
Manifest this update: Tue 22 Sep 2026 18:28:41 +0000
Manifest next update: Tue 29 Sep 2026 18:28:41 +0000
Files and hashes: 1: yPzMxL6JiqkgZxNmoP15UynpIB0.crl (hash: 8t9qoYwGrzOzUYdkH28PYsDqzF2myUL9Mjnq9OyPl2A=)
2: 20748896236511EABCF20E10C4F9AE02.roa (hash: 9c0xnj42aQVd0DJMJ7QVY1vll1L6k0F8fnB4B2KdtTM=)
3: 5407E320236911EA9967DA1CC4F9AE02.roa (hash: q8cCOCPHYUVLORYyWYiF8lMPvMHY/AGuLx1h919ki24=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl
rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3260 (0xcbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919040F, serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
Validity
Not Before: Sep 22 18:28:41 2026 GMT
Not After : Sep 29 18:28:41 2026 GMT
Subject: CN=6ab2c8d9-4a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1c:95:03:b7:c9:31:ab:90:3e:ee:03:01:33:
0e:da:bc:8d:92:8b:b6:78:fe:a6:df:fc:a0:c8:4d:
12:22:3c:ec:a0:c4:48:e6:2e:91:18:80:cd:f0:32:
0d:a9:eb:22:ce:2b:a7:48:9e:c6:2c:10:d3:2d:68:
53:2a:bc:4a:e2:f1:16:9f:1e:6b:81:15:d7:be:bd:
b0:19:0c:86:65:85:2c:59:42:a9:4f:98:21:cf:95:
cc:da:f0:21:c4:01:de:23:ad:df:b1:de:78:76:20:
f2:69:f4:b6:f6:47:84:6f:bb:84:b6:05:2b:7b:0c:
f0:d2:4d:57:86:27:d0:68:2b:ff:c6:33:a3:85:4a:
4f:3a:40:ba:89:d3:17:83:4c:21:e1:be:bb:99:77:
ea:f9:ca:c9:19:fe:31:6b:99:0e:69:6e:c7:47:f4:
e8:30:e2:9f:cf:73:3e:85:b0:3e:f1:4a:b5:b1:87:
0b:5c:5f:c5:f0:d0:de:58:ac:ed:ca:ef:c9:54:af:
72:f4:2f:dd:0d:b6:e5:cf:39:55:ef:0d:97:31:7d:
98:6b:26:ce:03:36:35:86:b0:f7:2a:00:b2:9f:00:
e8:53:7c:3d:c5:3b:d1:97:c3:a0:1a:bf:19:07:37:
b4:14:7d:1f:f7:37:1b:22:f0:b9:6c:f6:85:18:b2:
11:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9A:71:19:9F:F3:2C:84:8C:A5:F6:88:AC:EE:23:A9:66:A7:7F:D9
X509v3 Authority Key Identifier:
keyid:C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:19:65:ae:bb:b3:e4:cb:12:54:2f:e7:90:08:78:11:89:e6:
b5:4a:92:eb:8f:72:91:77:96:b6:ea:44:86:33:f7:19:3f:c0:
77:2a:78:dd:ec:62:cc:b0:88:6c:e5:d3:b2:9e:57:8b:05:d5:
98:be:af:55:64:80:e5:34:5e:58:d6:af:e9:65:ea:f2:7b:bb:
4a:fd:98:a3:d6:8d:5c:1b:ae:4f:84:79:f5:57:53:b5:7a:a2:
41:14:9e:6c:2a:46:79:94:33:f6:0e:71:f5:d6:b0:d8:34:37:
03:89:f0:c3:45:f6:c3:6b:d5:ea:8a:3b:16:52:19:92:ef:d0:
eb:e6:e6:84:b1:1e:3c:40:c9:fb:34:b5:2d:3a:c2:64:0b:ea:
df:39:89:89:c3:dd:b1:bb:9c:a2:07:37:87:31:5c:85:ad:3b:
73:a3:94:22:b7:ce:f1:76:50:9b:07:22:8d:e8:12:b0:7e:f2:
6f:d6:38:a1:be:08:78:92:5a:e7:4f:34:69:46:4e:80:bc:5d:
1a:2d:2b:f4:82:6b:87:2e:b6:f0:00:91:54:46:92:0a:2c:50:
a4:d2:03:e8:b3:ba:a4:fc:85:ab:89:70:b4:fd:4a:a5:ec:22:
9e:c5:43:87:cb:5f:b2:2d:04:60:55:42:21:a8:6f:1a:a8:8e:
bd:ef:b0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:00:04 2026 by rpki-client