
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192BA7/5B1DA934A83111F181E817AC3511F970/Ym-MpKTsPLmY9uokqOVW-SChkEg.mft
File: Ym-MpKTsPLmY9uokqOVW-SChkEg.mft (raw, json)
Hash identifier: fxd+KeE/TcgE81IKmWmWGMq3nARVKN88nzp1Ez4KxpA=
Subject key identifier: A6:F9:EE:E6:AB:4F:5B:68:B7:7A:54:FB:D9:25:E2:CB:B4:0B:45:CE
Authority key identifier: 62:6F:8C:A4:A4:EC:3C:B9:98:F6:EA:24:A8:E5:56:F9:20:A1:90:48
Certificate issuer: /CN=A9192BA7/serialNumber=626F8CA4A4EC3CB998F6EA24A8E556F920A19048
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym-MpKTsPLmY9uokqOVW-SChkEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192BA7/5B1DA934A83111F181E817AC3511F970/Ym-MpKTsPLmY9uokqOVW-SChkEg.mft
Manifest number: 0D
Signing time: Mon 21 Sep 2026 09:09:55 +0000
Manifest this update: Mon 21 Sep 2026 09:09:54 +0000
Manifest next update: Mon 28 Sep 2026 09:09:54 +0000
Files and hashes: 1: Ym-MpKTsPLmY9uokqOVW-SChkEg.crl (hash: lGGFCZgJnqq/kGrcbETPfeGx90Y/QLjRVFpcv+lPc0g=)
2: E550A654A87411F1A927229E4A11F970.roa (hash: oc/TKsyHzzWMYT3IVnUL38CFiVDo4LqwhQVtEiYOenw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192BA7/5B1DA934A83111F181E817AC3511F970/Ym-MpKTsPLmY9uokqOVW-SChkEg.crl
rsync://rpki.apnic.net/member_repository/A9192BA7/5B1DA934A83111F181E817AC3511F970/Ym-MpKTsPLmY9uokqOVW-SChkEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym-MpKTsPLmY9uokqOVW-SChkEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 09:09:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192BA7, serialNumber=626F8CA4A4EC3CB998F6EA24A8E556F920A19048
Validity
Not Before: Sep 21 09:09:54 2026 GMT
Not After : Sep 28 09:09:54 2026 GMT
Subject: CN=6ab0f462-fb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b9:1b:ce:fc:88:d0:0b:f0:97:ab:5f:c4:cc:
34:82:a5:77:54:25:cd:d3:17:0a:2f:a3:80:58:c0:
da:50:b3:a9:24:17:fe:82:1b:ce:71:2a:15:57:b3:
2c:ae:76:d6:a0:0e:03:8b:9d:57:cc:b1:30:a3:34:
5b:a6:e0:ac:a1:14:b0:55:79:e8:18:30:58:35:19:
40:c1:43:f7:ef:2f:bf:e8:09:66:22:7b:69:97:c3:
ad:cd:a0:5e:5c:e4:31:75:f5:6e:8f:e3:37:37:00:
55:9a:20:ea:e4:03:2b:c2:df:c2:95:82:df:99:2a:
8c:17:79:3a:87:ae:01:be:79:04:ae:91:7d:95:77:
1f:44:d4:62:c9:ac:ec:2d:9b:aa:e4:a6:37:94:4b:
ae:0e:b3:13:17:05:be:42:f9:34:5b:7f:f1:47:36:
d6:05:6f:bf:f3:e2:ef:33:86:ae:9b:48:9c:8a:b4:
7c:2e:f6:0f:88:e9:a7:6f:60:cf:5b:77:7d:ea:fb:
91:87:c1:a4:f3:bc:a1:f0:29:b8:6d:fd:83:4a:b0:
c6:4a:1b:0b:28:a9:f7:00:64:6e:7e:3d:92:2e:66:
5d:66:fc:71:48:a6:1a:9b:1a:e5:f2:8f:b5:13:c8:
76:bc:93:02:93:41:2a:cc:50:18:76:13:7a:2f:b8:
fb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F9:EE:E6:AB:4F:5B:68:B7:7A:54:FB:D9:25:E2:CB:B4:0B:45:CE
X509v3 Authority Key Identifier:
keyid:62:6F:8C:A4:A4:EC:3C:B9:98:F6:EA:24:A8:E5:56:F9:20:A1:90:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192BA7/5B1DA934A83111F181E817AC3511F970/Ym-MpKTsPLmY9uokqOVW-SChkEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym-MpKTsPLmY9uokqOVW-SChkEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192BA7/5B1DA934A83111F181E817AC3511F970/Ym-MpKTsPLmY9uokqOVW-SChkEg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:85:57:38:e3:26:b3:d8:ce:8c:c9:9a:22:d5:a5:dc:bb:ed:
c8:6e:19:49:95:9d:ef:bc:fd:66:db:cc:96:c3:eb:40:d0:2b:
c3:bf:31:fe:59:1a:03:7f:03:98:6b:3b:64:30:c5:f8:9c:55:
08:ac:49:06:4d:d5:cc:9e:ca:10:1f:af:53:70:4c:00:d2:41:
a4:05:1f:f4:6e:6c:b8:4e:07:ae:8a:d4:c0:87:8c:21:d2:48:
27:cc:d6:ec:06:c7:2f:fa:26:18:ae:97:7e:a7:11:ae:bc:e9:
e9:48:d6:72:9a:1c:35:9c:8e:b0:36:6b:5a:c6:28:bd:82:c9:
68:c7:13:98:ff:b2:28:5b:59:ea:1c:df:26:62:fd:42:ac:7f:
1d:0f:74:a4:c9:3a:2b:41:97:78:80:e7:4f:50:f5:3c:1f:5e:
9f:4d:e4:6e:cc:5c:94:f8:db:34:fd:14:1d:2d:ed:66:3f:90:
fc:f8:a4:0f:36:16:e5:f9:e3:bd:c5:8f:e3:76:02:d2:e8:58:
f5:94:99:fd:3e:48:3e:1c:61:8b:19:a7:5b:51:63:17:1a:0e:
85:2a:97:b6:0c:55:e4:50:94:ad:e2:4c:cb:6c:3f:ce:24:1b:
07:fb:35:b2:2a:03:11:e2:8f:0d:84:82:27:43:8a:3e:e5:9e:
db:d0:fb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:16:14 2026 by rpki-client