
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft
File: y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft (raw, json)
Hash identifier: rud8glBnfo7FeaGKB3q+6zUG11hPFXvv9LkeZRoHZUs=
Subject key identifier: F0:A4:5A:47:07:5B:EC:C0:C8:46:E8:10:95:A2:44:32:07:34:13:E1
Authority key identifier: CB:BD:5B:1C:31:C1:61:2E:15:AC:EC:47:25:4F:D2:F3:3E:C6:9C:64
Certificate issuer: /CN=A9190F97/serialNumber=CBBD5B1C31C1612E15ACEC47254FD2F33EC69C64
Certificate serial: 3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft
Manifest number: 2E
Signing time: Mon 21 Sep 2026 08:44:01 +0000
Manifest this update: Mon 21 Sep 2026 08:44:00 +0000
Manifest next update: Mon 28 Sep 2026 08:44:00 +0000
Files and hashes: 1: y71bHDHBYS4VrOxHJU_S8z7GnGQ.crl (hash: jnGFGC9Vj/Hw+2iCY8YU/gQYdiX1tZHMT/RXxqGlUjw=)
2: 58704E16794811F1AAEBC54078A30FBC.roa (hash: Km7e1KI0bVjT2Vh8k/KxoUV9U/mE9RQGwRbSbVtmpII=)
3: 57254472794711F1832D99FC77A30FBC.roa (hash: v65T9nnV5djYR187TPvpWjpUtCbMgF/t1xM2ojHyBBs=)
4: 5958BB9C794811F1AAEBC54078A30FBC.roa (hash: TuJjYxvjs+S72EJKI50mOSLZsks+omAAzCh4dv+qAnY=)
5: D9B1050C794711F18C3268FE77A30FBC.roa (hash: MZj0KWbRgcpAkQHNAEsOeyaAYyuXdWg3Z7/YmLPlVvg=)
6: 57845FE2794811F1AAEBC54078A30FBC.roa (hash: w1yghT1rOxwGO8/T6GJUmND+ehogxUkK8p0zMCmeKII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.crl
rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190F97, serialNumber=CBBD5B1C31C1612E15ACEC47254FD2F33EC69C64
Validity
Not Before: Sep 21 08:44:00 2026 GMT
Not After : Sep 28 08:44:00 2026 GMT
Subject: CN=6ab0ee51-ef13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:cb:5b:04:3e:08:34:ae:8c:5d:6c:cf:88:
e3:f9:c7:af:55:e6:bd:dd:eb:79:ce:d1:14:ef:c2:
ad:28:8f:5d:06:a5:45:a9:b6:a4:46:f6:8e:92:de:
de:12:fc:e4:0d:c4:c1:6b:a5:c9:06:e0:14:1c:56:
79:3b:6f:7b:6c:a9:cf:72:c7:63:44:37:75:b3:02:
9d:b4:c2:3a:4d:16:98:31:3c:25:0d:26:fc:d6:ca:
eb:20:9f:c4:35:d4:b3:39:4b:19:88:b9:94:44:39:
f1:43:18:16:29:a4:b7:dc:a2:b0:fe:a2:0a:84:81:
99:9f:0d:99:39:8f:42:13:da:56:45:0f:8e:bf:0c:
91:18:35:15:cc:e8:f0:29:7f:c3:97:7b:69:10:ad:
e3:78:4f:f8:e7:39:4c:64:e9:cb:d8:4c:ba:d8:c7:
4a:b9:04:b9:bc:6c:a7:13:2b:c6:cf:1d:01:02:51:
5d:18:69:42:ee:f9:66:a4:96:05:5e:db:ee:8b:7c:
18:9d:57:08:34:f9:e1:95:50:ae:66:41:44:cc:ee:
22:34:a8:b8:6b:33:f9:c6:45:04:4b:2f:9c:44:97:
6e:0c:e3:f1:03:2c:53:d6:52:6c:98:af:e0:5c:51:
c9:39:a5:26:0d:29:43:61:20:1f:3a:20:f5:ae:47:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A4:5A:47:07:5B:EC:C0:C8:46:E8:10:95:A2:44:32:07:34:13:E1
X509v3 Authority Key Identifier:
keyid:CB:BD:5B:1C:31:C1:61:2E:15:AC:EC:47:25:4F:D2:F3:3E:C6:9C:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:89:14:37:11:20:4e:95:97:97:cb:a0:01:b3:d7:23:73:41:
20:5b:f8:ed:13:8e:ec:23:80:0c:00:df:83:9e:74:c4:a5:57:
ee:c3:c2:1e:f7:2b:25:55:83:f3:92:d8:8e:29:8a:21:6c:ab:
3d:49:9f:fc:5e:fc:8c:b9:8a:da:77:fd:ef:89:f7:e0:3f:94:
f9:b4:5d:d0:eb:79:5e:92:41:23:47:85:f2:77:b9:2f:cb:11:
e8:b8:9d:e1:7d:81:47:11:59:ad:09:6f:c9:0d:a8:df:b4:5e:
de:25:5f:c1:88:75:43:ff:43:f6:5c:11:df:04:ff:68:98:11:
79:81:3c:0c:b1:e6:28:92:64:a2:1c:f0:d9:fe:9c:7b:e6:27:
95:54:4a:93:66:fa:80:17:e6:e8:15:9d:6d:12:2a:d5:f2:f0:
3c:81:45:a3:7b:65:d5:a5:77:18:85:11:dc:a8:fc:44:ca:a7:
5b:21:70:c6:f9:6b:05:6d:fc:38:da:b3:9c:da:01:d0:95:78:
f2:f8:53:73:f7:7a:eb:b3:03:96:b6:c8:dc:66:a6:b2:22:30:
31:1e:b7:9d:d4:93:18:bb:20:3c:22:3d:c3:86:9b:a4:b5:9e:
b8:b8:4f:79:a8:77:b1:b6:a4:ad:04:5e:4c:3d:e6:fa:7e:7c:
68:0b:c0:8e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MEY5NzExMC8GA1UEBRMoQ0JCRDVCMUMzMUMxNjEyRTE1QUNFQzQ3MjU0RkQyRjMz
RUM2OUM2NDAeFw0yNjA5MjEwODQ0MDBaFw0yNjA5MjgwODQ0MDBaMBgxFjAUBgNV
BAMTDTZhYjBlZTUxLWVmMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCVw8tbBD4INK6MXWzPiOP5x69V5r3d63nO0RTvwq0oj10GpUWptqRG9o6S3t4S
/OQNxMFrpckG4BQcVnk7b3tsqc9yx2NEN3WzAp20wjpNFpgxPCUNJvzWyusgn8Q1
1LM5SxmIuZREOfFDGBYppLfcorD+ogqEgZmfDZk5j0IT2lZFD46/DJEYNRXM6PAp
f8OXe2kQreN4T/jnOUxk6cvYTLrYx0q5BLm8bKcTK8bPHQECUV0YaULu+WaklgVe
2+6LfBidVwg0+eGVUK5mQUTM7iI0qLhrM/nGRQRLL5xEl24M4/EDLFPWUmyYr+Bc
Uck5pSYNKUNhIB86IPWuR6QdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8KRaRwdb
7MDIRugQlaJEMgc0E+EwHwYDVR0jBBgwFoAUy71bHDHBYS4VrOxHJU/S8z7GnGQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwRjk3L0QwRkUwMEFBNzk0
NjExRjFCN0JBODM4RDc3QTMwRkJDL3k3MWJIREhCWVM0VnJPeEhKVV9TOHo3R25H
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveTcxYkhESEJZUzRWck94SEpVX1M4ejdHbkdRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw
Rjk3L0QwRkUwMEFBNzk0NjExRjFCN0JBODM4RDc3QTMwRkJDL3k3MWJIREhCWVM0
VnJPeEhKVV9TOHo3R25HUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCCiRQ3ESBOlZeXy6ABs9cjc0EgW/jtE47sI4AMAN+DnnTEpVfuw8Ie9yslVYPz
ktiOKYohbKs9SZ/8XvyMuYrad/3viffgP5T5tF3Q63lekkEjR4Xyd7kvyxHouJ3h
fYFHEVmtCW/JDajftF7eJV/BiHVD/0P2XBHfBP9omBF5gTwMseYokmSiHPDZ/px7
5ieVVEqTZvqAF+boFZ1tEirV8vA8gUWje2XVpXcYhRHcqPxEyqdbIXDG+WsFbfw4
2rOc2gHQlXjy+FNz93rrswOWtsjcZqayIjAxHred1JMYuyA8Ij3DhpuktZ64uE95
qHextqStBF5MPeb6fnxoC8CO
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:18:59 2026 by rpki-client