
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft
File: yW0SR_XLoniur1KTUbX4HKVxcKM.mft (raw, json)
Hash identifier: e4AEYAg7yKfzOYTLeTiCd0vtPM8jN8CQGzemj9KWBdo=
Subject key identifier: 7F:1C:4C:78:2D:47:B8:7F:D4:97:0C:3C:3E:DC:33:FC:11:42:B7:DA
Authority key identifier: C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3
Certificate issuer: /CN=A9190E6C/serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3
Certificate serial: 0E4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft
Manifest number: 0E40
Signing time: Sat 26 Sep 2026 17:50:43 +0000
Manifest this update: Sat 26 Sep 2026 17:50:43 +0000
Manifest next update: Sat 03 Oct 2026 17:50:43 +0000
Files and hashes: 1: yW0SR_XLoniur1KTUbX4HKVxcKM.crl (hash: 3EVXwcIY6soh8izYPq4FGrngYzykb4AXlx5krRIdn1I=)
2: 07C8CFD0E18F11EF82714B13C4F9AE02.roa (hash: Hz+NLkk81DlhQAOuS1uMRNHs8Ue2ka70A9UL7rm5PxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl
rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 17:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3663 (0xe4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190E6C, serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3
Validity
Not Before: Sep 26 17:50:43 2026 GMT
Not After : Oct 3 17:50:43 2026 GMT
Subject: CN=6ab805f3-3d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6c:82:dc:0c:c0:f1:d3:96:15:0d:d6:8c:a4:
12:5d:48:14:fe:04:d8:a8:13:8a:4a:54:8a:69:46:
7f:bc:ce:6e:7c:aa:c4:ef:c8:fe:fe:8f:d8:cd:c8:
14:54:21:f8:54:ab:62:fd:31:6b:31:8b:52:3f:4c:
6a:45:89:37:35:87:9d:34:d7:3d:1a:b4:a9:38:c6:
53:4d:1d:09:56:94:a9:66:0f:aa:a8:08:6a:e6:e9:
2d:6e:5b:b1:dc:c2:f2:7c:4d:ad:c2:7d:0a:72:ec:
6c:33:2f:b7:fa:b4:e8:fd:eb:73:4a:64:7b:51:d3:
d2:25:10:3d:56:47:23:d6:2c:d1:52:fb:6b:0f:ea:
44:34:57:ac:2f:74:bd:cc:bf:db:70:27:1e:a6:0f:
d9:74:ad:42:16:fc:22:ed:1e:06:89:47:7c:cd:cf:
af:f3:e5:ee:c8:91:40:34:0e:9a:09:98:3d:7b:f9:
62:16:48:e4:26:e9:12:f6:23:6d:cc:c6:9e:4f:52:
e3:34:ba:4f:db:8a:6a:ff:4b:91:1f:04:50:f2:62:
7a:1d:21:4e:a0:fe:9a:b8:00:cc:0c:6d:52:64:1b:
5c:a6:84:07:ef:e4:e5:6e:86:a0:8d:ea:f5:b7:73:
2e:6e:42:bd:5a:a3:16:72:1e:a6:46:f9:a4:5e:a5:
59:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1C:4C:78:2D:47:B8:7F:D4:97:0C:3C:3E:DC:33:FC:11:42:B7:DA
X509v3 Authority Key Identifier:
keyid:C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:28:1c:46:91:18:f9:21:01:6a:3f:15:4b:60:e4:66:88:99:
35:75:b3:2f:48:b1:3b:2d:6c:06:01:7a:e3:4b:49:47:17:6c:
1f:af:b1:11:8e:55:e2:f7:56:70:6d:2a:82:17:96:74:a5:65:
db:26:bf:81:c6:d1:7a:2c:f5:28:42:ed:b6:02:62:30:b7:54:
44:30:b6:ed:f4:95:7d:84:c1:8f:db:08:e0:43:7b:cc:94:71:
34:52:fe:76:bd:05:1e:47:f5:1c:bd:d8:81:c4:4f:e9:bf:25:
66:2a:f9:cb:66:56:25:84:b7:f4:09:59:d2:f0:1f:5b:fc:38:
a0:99:13:59:23:a5:02:aa:29:46:94:97:a7:13:af:52:bf:df:
f6:e8:aa:23:a8:a7:3b:f8:9a:db:2d:e5:4c:33:fe:9f:de:5b:
86:c8:03:ca:78:8b:27:a5:6c:ff:eb:af:44:8e:c8:f0:b3:09:
8c:5d:70:a9:77:9c:b2:f4:57:08:b4:fd:e9:12:1d:d7:ff:6f:
57:b3:59:21:e5:ad:29:15:06:73:7d:ae:42:49:ca:27:a1:86:
e8:d0:45:da:c2:f4:e7:02:46:55:39:e9:16:e5:5f:c8:00:65:
66:33:60:61:09:4d:02:ea:ef:df:88:36:e6:c3:bb:fa:a3:02:
d3:ab:98:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:56:27 2026 by rpki-client