
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
File: ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft (raw, json)
Hash identifier: 5s37LTZoZr+5mHH0Rm4iU6WZ3OCFahCufCIEF5nfYPM=
Subject key identifier: 33:86:41:51:61:53:75:D0:C5:82:F1:0F:0F:1A:C1:A5:55:55:28:95
Authority key identifier: C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6
Certificate issuer: /CN=A9199656/serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6
Certificate serial: A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
Manifest number: 9E
Signing time: Sun 01 Mar 2026 08:36:26 +0000
Manifest this update: Sun 01 Mar 2026 08:36:25 +0000
Manifest next update: Sun 08 Mar 2026 08:36:25 +0000
Files and hashes: 1: ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl (hash: ZYrCk/UKikKilGnY1FBzSmmHfz9TKaJu4mUMbofXkIU=)
2: 45D237A423E211F0A5DCED27C4F9AE02.roa (hash: KYNpwowTPF1wR7KTk50JO1GxjKATo9B/T8x/blAJYNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl
rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199656, serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6
Validity
Not Before: Mar 1 08:36:25 2026 GMT
Not After : Mar 8 08:36:25 2026 GMT
Subject: CN=69a3fa89-c8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8f:9d:b2:ed:d2:08:85:4e:04:d8:2d:67:3b:
ad:d3:a3:05:cf:c2:78:8b:51:1a:17:82:6b:c8:46:
7a:82:4e:33:39:84:54:75:e2:cb:f1:24:b9:a4:ab:
0f:c6:7b:8f:fa:d7:22:9c:e3:22:ee:68:35:ee:d1:
9c:25:71:e9:78:e3:0a:38:37:46:b1:10:51:c6:18:
3e:27:c8:45:2c:b8:9f:20:ae:b0:36:9c:ff:c5:5a:
dc:39:bf:53:e4:e6:d9:b0:3e:03:9f:96:92:fe:6b:
5a:78:0f:84:30:79:b3:9e:d2:a0:04:cb:33:d4:c0:
28:fb:8d:64:0e:d6:1c:88:ac:d3:48:cd:06:ec:eb:
4d:51:d9:ba:b2:05:36:58:5e:5e:83:c3:29:8f:a6:
05:03:05:85:40:97:87:a2:a1:a8:05:ca:68:06:8a:
a7:60:f9:f0:6b:a1:03:83:82:f4:c8:4e:b1:b3:21:
af:e1:38:be:da:f6:f6:90:09:9c:a8:ed:f8:41:be:
d6:b8:24:27:e0:22:1b:fb:7a:87:a4:3b:6d:d0:fa:
f9:0b:e5:74:a8:83:75:23:2d:9d:88:76:6e:0c:ee:
ab:8f:c2:1b:f3:86:3a:da:05:ed:f9:13:5b:b7:3e:
72:33:ec:35:44:6a:11:7e:22:bc:b5:be:2e:27:e5:
fd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:86:41:51:61:53:75:D0:C5:82:F1:0F:0F:1A:C1:A5:55:55:28:95
X509v3 Authority Key Identifier:
keyid:C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7e:86:ed:a6:c0:d3:63:38:5e:ef:3a:12:73:8c:b8:77:56:
73:0e:62:23:3f:9e:f7:e4:e8:7b:33:2e:ca:43:5c:6f:dd:cc:
89:34:bf:74:55:2b:af:88:d4:de:ca:a2:63:aa:a1:8a:9f:2b:
4a:9d:b9:e8:8e:1c:63:b0:14:12:c0:2c:54:dd:a7:07:35:b5:
22:35:23:24:71:5f:ac:99:b2:9e:4b:f5:29:5d:8a:d2:91:34:
7c:31:e5:ab:44:a3:92:aa:80:71:77:a7:3c:97:48:72:70:be:
88:32:5d:10:bd:6c:8c:4d:09:47:6f:40:74:47:19:dd:90:6e:
bf:02:dc:58:9d:c4:3a:3e:96:01:60:e0:5d:46:fa:b4:07:c7:
c4:ea:f0:44:7e:87:9e:a1:2a:0b:cc:3e:20:ce:b1:53:ee:1b:
58:fe:81:01:25:9d:06:07:ea:65:9b:c9:c0:04:7a:2c:34:b4:
32:87:bf:bc:38:67:0b:ae:9e:7f:6c:45:a6:d5:36:29:16:8d:
ce:54:dc:d0:f4:a2:e1:14:de:28:bd:f6:36:57:e5:e1:12:5f:
07:9d:6e:8d:61:d6:8f:8a:10:2d:7d:e4:87:1c:4b:82:02:6d:
c2:11:40:37:15:67:6a:6a:e6:bf:61:e0:94:0e:6e:c0:71:db:
a3:3a:ff:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:49:55 2026 by rpki-client