
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft
File: y7Nb36Nai-snCaTbsy49IWLsH6g.mft (raw, json)
Hash identifier: vCOSc5ZNT9LIQoW0aPqxmzVpD1I4Aq9aecMlCarEY9o=
Subject key identifier: CF:38:4B:B4:4A:F3:10:59:41:E4:8A:EA:99:8F:7C:3A:12:BA:65:C4
Authority key identifier: CB:B3:5B:DF:A3:5A:8B:EB:27:09:A4:DB:B3:2E:3D:21:62:EC:1F:A8
Certificate issuer: /CN=A919130F/serialNumber=CBB35BDFA35A8BEB2709A4DBB32E3D2162EC1FA8
Certificate serial: 0106
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft
Manifest number: 0102
Signing time: Mon 21 Sep 2026 06:07:51 +0000
Manifest this update: Mon 21 Sep 2026 06:07:50 +0000
Manifest next update: Mon 28 Sep 2026 06:07:50 +0000
Files and hashes: 1: y7Nb36Nai-snCaTbsy49IWLsH6g.crl (hash: 9vIZBJk0N0PzEUXAYBmqIlmDW8nxEpLa54iOxoT/iOo=)
2: 26B1D24C2A4211F08783A40EC4F9AE02.roa (hash: 0Esu2ITkq2JO6eSubkpSXkJLoiB2r42MQ/8tZBJXmmU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.crl
rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919130F, serialNumber=CBB35BDFA35A8BEB2709A4DBB32E3D2162EC1FA8
Validity
Not Before: Sep 21 06:07:50 2026 GMT
Not After : Sep 28 06:07:50 2026 GMT
Subject: CN=6ab0c9b6-1cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:f8:05:a1:92:b1:27:41:68:09:00:83:b9:
4f:4e:ef:5d:28:a6:52:4d:f4:c8:22:05:3f:a1:6c:
0d:2d:b6:0f:0e:4e:94:78:57:e2:8d:6b:d6:ea:8d:
56:5c:df:db:d0:36:47:26:51:59:2f:44:45:f5:36:
44:c9:b3:39:8a:13:ea:42:80:46:d4:e5:dd:ef:74:
18:58:17:f7:a8:4c:5c:50:84:04:0f:d0:5b:99:20:
91:5b:ac:95:42:f7:c7:81:52:64:c7:e4:d3:a9:54:
e7:96:56:84:b1:ee:cb:89:52:36:e5:14:3c:59:50:
3a:2a:06:4a:1d:dc:ac:17:26:66:c0:14:55:60:1d:
0c:c6:11:57:05:82:1b:c2:df:c0:3a:ec:01:64:e4:
df:33:e4:99:b2:af:ea:92:e7:fb:9d:a1:6e:24:50:
a6:21:b5:dd:78:c4:88:0e:9f:43:1f:b7:2c:e5:2e:
67:26:1a:12:7b:d5:08:9f:ec:4c:08:7b:05:c3:fe:
0a:dc:37:bd:fc:54:03:66:f5:b4:ea:db:00:29:59:
2a:c2:bc:1e:5c:7a:4c:b1:75:fe:2e:05:03:5c:0f:
76:cf:6c:a0:92:19:60:52:0a:b1:f0:c8:44:66:92:
8f:ba:f4:cd:37:0e:44:11:bb:12:b4:d8:82:1a:a6:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:38:4B:B4:4A:F3:10:59:41:E4:8A:EA:99:8F:7C:3A:12:BA:65:C4
X509v3 Authority Key Identifier:
keyid:CB:B3:5B:DF:A3:5A:8B:EB:27:09:A4:DB:B3:2E:3D:21:62:EC:1F:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9a:01:2a:2c:d1:af:90:15:25:fa:03:5c:38:ca:d6:a0:42:
6d:87:80:ac:89:62:83:cb:59:1e:8b:5b:d5:c5:16:01:67:76:
8b:a2:39:8f:e1:6e:9f:0e:92:9f:a5:67:c0:92:21:9b:c5:9d:
40:b2:e5:ae:54:1a:a9:6b:12:6c:70:c6:bb:71:f7:90:ec:e6:
a6:4b:bd:8a:43:f5:10:70:69:85:57:79:00:52:22:e2:91:3a:
44:ba:b1:73:c9:7d:c5:43:54:92:37:6a:54:97:f4:ac:04:df:
c2:bb:a8:59:ae:cd:23:cb:f7:43:83:f0:61:cf:33:a4:a8:ca:
17:76:1f:72:64:26:f9:0b:de:39:ee:42:8b:71:e3:c9:09:c7:
10:e1:a9:b7:3c:38:10:26:4e:da:f7:ac:a0:ac:36:1b:0d:20:
76:5a:cd:eb:21:3b:3e:fb:d0:62:10:7b:32:e9:2d:5f:cb:55:
6c:33:15:b9:51:16:38:36:7b:52:f7:fd:6d:ea:22:01:4a:70:
5d:47:95:93:97:db:ad:b6:1f:df:e2:5c:81:9d:23:0c:ac:3c:
56:00:36:e4:83:8d:1f:66:61:d4:62:9b:fb:45:94:26:7d:a9:
8b:29:6b:e9:18:37:70:31:17:e0:ee:5a:fe:87:66:5e:ab:ff:
ce:65:a4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:19:25 2026 by rpki-client