
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
File: Y0nPcXs0CWM10fw5e8UEBkinjw4.mft (raw, json)
Hash identifier: fXlOh073JnzWN4mWw8rxZN3eE0HuuQ+gcByzNfXSlcA=
Subject key identifier: 52:85:21:16:45:31:B5:8B:EC:51:CE:A2:E5:E9:C8:78:CF:F4:CE:E9
Authority key identifier: 63:49:CF:71:7B:34:09:63:35:D1:FC:39:7B:C5:04:06:48:A7:8F:0E
Certificate issuer: /CN=A9120D97/serialNumber=6349CF717B34096335D1FC397BC5040648A78F0E
Certificate serial: 49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
Manifest number: 48
Signing time: Tue 21 Jul 2026 10:13:57 +0000
Manifest this update: Tue 21 Jul 2026 10:13:57 +0000
Manifest next update: Tue 28 Jul 2026 10:13:57 +0000
Files and hashes: 1: Y0nPcXs0CWM10fw5e8UEBkinjw4.crl (hash: Al7tg6cazDzlud2oA2xFBXURMsV/7t8mfRe075iMMfQ=)
2: B2D0F8D2178311F1B32BFEF6283D8C67.roa (hash: 0l1faSsNOHOUv9dts3Hprtyh48iyjB1f/xwuNggdhEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.crl
rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 10:13:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120D97, serialNumber=6349CF717B34096335D1FC397BC5040648A78F0E
Validity
Not Before: Jul 21 10:13:57 2026 GMT
Not After : Jul 28 10:13:57 2026 GMT
Subject: CN=6a5f4665-f4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:63:6b:f1:bd:48:d1:6d:f8:5c:f5:58:f9:
0d:8b:1e:aa:ca:b3:45:0c:d6:fc:96:af:fd:40:9f:
08:c2:1f:3c:7d:75:f9:e9:f3:9e:06:42:71:7c:d8:
7a:1f:ed:da:f5:1f:71:15:5c:ea:ea:6d:c1:e7:3a:
ab:a6:08:6f:8f:c8:92:2a:45:77:5a:99:6f:51:f3:
16:13:ab:72:2b:bd:25:bb:f2:81:d6:c2:f0:8c:92:
d5:e1:6c:ae:42:57:e0:18:08:16:93:a4:93:c6:92:
f0:6e:6f:52:dd:fc:84:2b:18:49:65:f7:b9:d0:93:
3d:6a:e9:43:5d:92:87:89:d0:61:45:2b:7b:12:c8:
37:19:23:7f:1f:76:1f:94:69:4b:29:45:e0:24:de:
1b:74:16:c8:1b:f8:00:18:2d:1c:3d:c3:b5:9f:6e:
c2:75:76:95:82:e6:bb:ca:c4:65:74:e7:ec:9b:98:
45:4f:cb:38:17:72:dd:c5:f6:35:91:5a:b4:a2:48:
8f:f2:c2:d6:d2:c2:55:3a:6c:f9:d1:87:65:c1:ef:
0d:36:aa:6e:ad:02:7a:4a:51:ec:f2:c1:be:48:84:
9a:6c:41:81:e9:a1:5b:ea:ed:c6:6e:21:42:26:0a:
b8:ce:fe:a7:c6:c8:b9:0f:8c:a5:a4:2b:4c:94:69:
c9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:85:21:16:45:31:B5:8B:EC:51:CE:A2:E5:E9:C8:78:CF:F4:CE:E9
X509v3 Authority Key Identifier:
keyid:63:49:CF:71:7B:34:09:63:35:D1:FC:39:7B:C5:04:06:48:A7:8F:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:16:ec:be:d7:80:82:b9:b5:31:65:c0:e7:91:31:3b:2d:d4:
8f:44:3a:1b:02:eb:7b:82:20:64:4b:4b:2e:f3:2e:34:7b:2b:
a3:36:01:f4:f3:38:7c:a0:a2:df:30:a3:9d:f6:c6:55:df:e2:
85:20:30:6d:da:ef:98:7a:59:9e:31:7d:88:6d:73:75:c2:14:
cf:64:6d:6a:91:19:84:da:23:98:eb:9f:46:67:62:e2:2e:33:
8c:95:11:fe:3c:65:a3:99:45:04:f3:7c:03:7a:0f:42:92:54:
82:7a:bd:8c:78:73:af:43:68:c8:9c:b3:83:4f:b6:8d:f8:d2:
c9:35:ad:97:3d:c1:9a:fa:29:3a:70:3a:8f:52:bc:d2:c1:f6:
4a:c2:a8:25:31:1c:70:e2:09:04:47:ae:6a:4a:78:40:cb:f3:
03:16:4a:8a:47:fc:ea:73:4f:a9:a5:2e:89:0e:05:53:16:89:
c3:02:37:77:39:d9:cd:3c:71:eb:93:c3:98:75:03:dc:73:d9:
60:36:1e:a3:5a:ca:3e:b3:7e:e3:58:1f:3b:52:17:a1:8c:08:
14:e9:16:56:8f:c3:3c:dd:8b:e1:2a:06:f7:30:61:d6:1b:92:
1c:29:82:dc:f3:1e:7e:6e:17:76:96:1b:77:7a:07:87:d7:9f:
90:56:82:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 04:41:02 2026 by rpki-client