
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
File: ygBwrFIB1vandapSXVPY4zDjIJY.mft (raw, json)
Hash identifier: 2p13eyGXE1Os0Ch+K9Hz43ovmOSko/hL8UCpH223MkY=
Subject key identifier: 50:87:34:F6:D5:0C:A7:08:06:DE:94:FB:CB:11:F9:85:2A:C1:88:44
Authority key identifier: CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
Certificate issuer: /CN=A9116907/serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096
Certificate serial: 02E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
Manifest number: 02D4
Signing time: Sat 03 Oct 2026 01:50:11 +0000
Manifest this update: Sat 03 Oct 2026 01:50:11 +0000
Manifest next update: Sat 10 Oct 2026 01:50:11 +0000
Files and hashes: 1: ygBwrFIB1vandapSXVPY4zDjIJY.crl (hash: XLsSrnWzUTQpbN6z7YjBPY+7ci9KVBzLeQ6qhaurTEI=)
2: EF9D5BBCE94211F08F77753A3C6F56BC.roa (hash: Q1RfYknRnpFb4jNQ61WjgyCjXaW4u7sCYH8KXBu1k40=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl
rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 01:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 737 (0x2e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116907, serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096
Validity
Not Before: Oct 3 01:50:11 2026 GMT
Not After : Oct 10 01:50:11 2026 GMT
Subject: CN=6ac05f53-df40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:1a:a3:07:bf:9a:01:39:02:05:b8:20:bf:
d7:d9:76:b4:11:0e:05:90:c7:81:b7:be:dc:78:aa:
63:b6:26:38:46:bc:9b:c3:8d:18:1f:41:38:6e:89:
21:22:e3:3c:8d:86:53:10:8f:10:9e:6a:d4:0d:73:
27:65:74:4e:d2:47:8e:34:73:cd:e1:8c:b4:df:ee:
02:ee:dd:17:23:64:4f:7e:92:48:15:e8:f3:d7:da:
3a:65:9b:0c:66:86:93:e5:51:f5:e5:3e:e1:90:99:
75:92:bd:ad:68:2a:29:e9:1a:5b:bf:b7:41:39:71:
c2:90:d0:f4:4f:96:a7:78:2a:4a:05:6f:6a:6d:cb:
43:8f:59:65:a2:b4:1c:88:ca:f4:c5:9b:a0:d0:f2:
83:95:d8:c6:2e:80:81:36:4f:79:ef:17:4b:38:4e:
91:cd:8b:87:15:ea:7b:c8:d8:e5:85:23:c5:11:ed:
93:ca:ba:8c:1a:5e:03:d8:bb:6b:52:6f:99:b5:4e:
03:f6:16:2a:c7:4f:d4:6c:43:41:a2:32:54:8b:5f:
28:d8:cf:24:d6:75:c6:7b:36:d8:4f:d2:5b:48:1b:
70:f1:a9:7b:1e:d0:98:08:eb:48:be:25:4d:99:2d:
3f:18:12:c9:b3:2d:f8:9f:84:ea:f9:07:1f:ae:68:
91:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:87:34:F6:D5:0C:A7:08:06:DE:94:FB:CB:11:F9:85:2A:C1:88:44
X509v3 Authority Key Identifier:
keyid:CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:09:b4:83:90:6a:37:a1:38:8d:aa:78:65:42:e6:a0:e9:77:
5e:a7:a0:cf:29:87:ac:65:24:82:1a:4a:34:91:7e:7e:99:34:
65:8b:b7:c8:b4:f4:96:89:35:67:20:d7:8e:21:38:88:a3:a1:
59:63:2a:cf:62:50:94:b0:5e:45:23:fd:e6:75:65:90:a3:a6:
6a:b9:e3:c9:15:cd:76:4b:c8:bb:12:aa:d7:d1:99:a8:f2:53:
5a:f3:8f:24:e6:f8:06:1e:3b:46:78:db:f5:01:85:ca:de:07:
3e:78:ff:16:1d:63:99:c0:6b:4f:7b:0a:08:e8:da:cb:8c:62:
b3:c1:02:50:0a:35:46:fd:90:bb:ec:61:3e:a7:14:2c:f8:ea:
e2:22:47:b8:82:47:38:2b:3b:26:c3:92:0e:23:9f:ef:6d:77:
ef:bd:ef:86:cd:08:11:42:09:81:3b:24:df:cc:2f:76:50:d2:
dc:4b:25:92:c3:c5:25:cd:eb:af:93:56:a6:ff:08:67:5b:88:
c7:63:e1:6e:18:66:40:82:48:c4:cb:7e:af:2c:c1:c7:6e:22:
67:0d:7d:cd:97:75:55:ef:2a:d3:08:f9:19:52:07:8f:dc:a9:
58:dc:2e:a0:78:d8:2d:2d:3d:db:d1:02:5b:41:dc:bc:d6:be:
98:b1:36:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:44:51 2026 by rpki-client