
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.mft
File: Y-N84NAMINhocKc_1uy8iZwbngs.mft (raw, json)
Hash identifier: lOJiRYcF8VisNmjmjonxxV6nDb84H80Oj7dugHe+dpU=
Subject key identifier: 39:CD:5B:8B:FB:E5:90:D5:B8:87:B6:D4:8F:90:A5:B0:5E:88:32:FE
Authority key identifier: 63:E3:7C:E0:D0:0C:20:D8:68:70:A7:3F:D6:EC:BC:89:9C:1B:9E:0B
Certificate issuer: /CN=A9121865/serialNumber=63E37CE0D00C20D86870A73FD6ECBC899C1B9E0B
Certificate serial: 0782
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-N84NAMINhocKc_1uy8iZwbngs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.mft
Manifest number: 076D
Signing time: Fri 22 May 2026 21:42:33 +0000
Manifest this update: Fri 22 May 2026 21:42:32 +0000
Manifest next update: Fri 29 May 2026 21:42:32 +0000
Files and hashes: 1: Y-N84NAMINhocKc_1uy8iZwbngs.crl (hash: Hzf3YDaTok+tPQarcMh2gN+S+OOmGvMryh055hh+3zI=)
2: A642A4AC650A11EB83E0FE0FC4F9AE02.roa (hash: DV1dDFgWCjhb8IC0wLRpkgdZ1tfDnNH68HKsEgHmVmU=)
3: 602D049AC1DE11EB98E1AD43C4F9AE02.roa (hash: GIoa6xXwQDhMJEvp6R5rW42wYbFUGvnTZUSffRh8dB0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.crl
rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-N84NAMINhocKc_1uy8iZwbngs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 May 2026 21:42:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1922 (0x782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121865, serialNumber=63E37CE0D00C20D86870A73FD6ECBC899C1B9E0B
Validity
Not Before: May 22 21:42:32 2026 GMT
Not After : May 29 21:42:32 2026 GMT
Subject: CN=6a10cdc9-252a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:7c:be:dd:6a:16:f2:8e:2b:01:06:59:7a:
ca:83:0b:8b:f3:46:ef:d6:72:82:1f:72:48:b2:da:
d0:76:5b:40:ca:a0:bb:50:2b:43:15:b6:92:1e:cc:
f6:ae:df:f2:30:c3:a2:b1:d1:bd:69:25:05:20:3d:
34:13:30:39:f9:96:b2:5c:38:68:ec:1f:96:c4:4e:
cb:57:55:97:10:96:09:1b:20:8c:0e:2e:66:25:30:
49:fa:36:44:72:58:cb:18:96:1f:1d:c5:31:03:3e:
9b:b1:c7:da:e0:e3:67:3b:10:80:43:51:03:86:62:
93:00:0f:d9:aa:a2:b3:49:67:cf:30:45:ee:d0:25:
71:7c:4e:1b:fe:20:b6:64:92:ff:71:d4:7a:72:aa:
b6:44:36:3c:3a:b9:c9:c5:f5:4e:fe:cb:14:71:7b:
7c:02:70:d2:9a:c4:b0:23:e0:74:57:06:94:7c:f1:
57:44:ed:9a:9e:4f:1d:4a:17:d9:5e:47:10:be:4d:
04:91:59:fb:32:92:6e:4e:f4:2a:a7:b2:d4:8e:40:
21:c4:e9:b7:13:fb:d6:c4:38:6d:f9:c6:6f:8c:cf:
96:1d:d8:65:5b:6c:16:e5:a4:72:d6:f1:ce:8e:c5:
9d:3d:0a:ac:c8:5b:e2:a9:d0:ec:eb:f2:12:f5:c1:
10:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CD:5B:8B:FB:E5:90:D5:B8:87:B6:D4:8F:90:A5:B0:5E:88:32:FE
X509v3 Authority Key Identifier:
keyid:63:E3:7C:E0:D0:0C:20:D8:68:70:A7:3F:D6:EC:BC:89:9C:1B:9E:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-N84NAMINhocKc_1uy8iZwbngs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:d0:fa:e4:60:8a:47:8a:a8:91:ca:8a:c8:f1:39:e3:27:db:
44:a6:d8:e7:24:d6:9e:9e:4e:bf:99:90:52:dd:c1:fb:4c:b7:
dc:7e:d2:26:bb:4e:49:3b:97:5d:a9:ea:97:d8:1a:70:1e:43:
65:34:0f:89:b5:29:b0:ca:b6:79:80:a7:e3:a1:08:5c:59:cf:
94:c9:fb:10:44:27:98:7d:3e:c2:60:e0:0b:9b:14:4d:ca:96:
4e:b0:52:a2:b2:57:59:96:fe:63:66:50:de:93:bb:35:30:9d:
48:75:20:d2:6c:af:ae:6f:a8:de:b1:07:7f:2e:ea:e0:a0:62:
5e:80:8e:05:52:af:aa:0e:dd:a2:c2:ea:41:03:e1:5f:c7:62:
7f:bd:86:72:bd:59:bd:db:08:7d:ae:10:6c:bc:7e:02:54:01:
63:76:b3:57:07:39:73:87:31:b9:97:8e:68:dc:90:7c:b5:b6:
24:7c:23:dd:43:ad:fb:b0:72:e9:14:25:d9:a5:88:e0:8c:6e:
c4:88:de:6d:b5:52:8d:b2:f8:4f:dd:6e:62:72:1d:c2:f0:90:
36:54:6c:66:89:47:8b:f2:a5:02:39:8a:16:5d:93:e1:d9:1d:
e7:d1:8c:ab:b0:55:5d:6e:29:1f:2a:56:af:55:4f:92:e3:22:
bf:7a:e0:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjE4NjUxMTAvBgNVBAUTKDYzRTM3Q0UwRDAwQzIwRDg2ODcwQTczRkQ2RUNCQzg5
OUMxQjlFMEIwHhcNMjYwNTIyMjE0MjMyWhcNMjYwNTI5MjE0MjMyWjAYMRYwFAYD
VQQDEw02YTEwY2RjOS0yNTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv+B8vt1qFvKOKwEGWXrKgwuL80bv1nKCH3JIstrQdltAyqC7UCtDFbaSHsz2
rt/yMMOisdG9aSUFID00EzA5+ZayXDho7B+WxE7LV1WXEJYJGyCMDi5mJTBJ+jZE
cljLGJYfHcUxAz6bscfa4ONnOxCAQ1EDhmKTAA/ZqqKzSWfPMEXu0CVxfE4b/iC2
ZJL/cdR6cqq2RDY8OrnJxfVO/ssUcXt8AnDSmsSwI+B0VwaUfPFXRO2ank8dShfZ
XkcQvk0EkVn7MpJuTvQqp7LUjkAhxOm3E/vWxDht+cZvjM+WHdhlW2wW5aRy1vHO
jsWdPQqsyFviqdDs6/IS9cEQUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDnNW4v7
5ZDVuIe21I+QpbBeiDL+MB8GA1UdIwQYMBaAFGPjfODQDCDYaHCnP9bsvImcG54L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTg2NS83NkI2QTBEMjY1
MDgxMUVCOEYyNjE1MERDNEY5QUUwMi9ZLU44NE5BTUlOaG9jS2NfMXV5OGlad2Ju
Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ktTjg0TkFNSU5ob2NLY18xdXk4aVp3Ym5ncy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTg2NS83NkI2QTBEMjY1MDgxMUVCOEYyNjE1MERDNEY5QUUwMi9ZLU44NE5BTUlO
aG9jS2NfMXV5OGlad2JuZ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQtD65GCKR4qokcqKyPE54yfbRKbY5yTWnp5Ov5mQUt3B+0y33H7SJrtOSTuX
Xanql9gacB5DZTQPibUpsMq2eYCn46EIXFnPlMn7EEQnmH0+wmDgC5sUTcqWTrBS
orJXWZb+Y2ZQ3pO7NTCdSHUg0myvrm+o3rEHfy7q4KBiXoCOBVKvqg7dosLqQQPh
X8dif72Gcr1ZvdsIfa4QbLx+AlQBY3azVwc5c4cxuZeOaNyQfLW2JHwj3UOt+7By
6RQl2aWI4IxuxIjebbVSjbL4T91uYnIdwvCQNlRsZolHi/KlAjmKFl2T4dkd59GM
q7BVXW4pHypWr1VPkuMiv3rg7g==
-----END CERTIFICATE-----
Generated at Sun May 24 13:59:57 2026 by rpki-client