
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
File: yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json)
Hash identifier: A9I6US6nmlAXy8D6my7sBpX7MUW5xhY/hHXA5CZt8Rg=
Subject key identifier: D1:39:20:FB:4F:2B:52:ED:D1:78:34:1B:A4:08:9C:85:F5:08:A7:43
Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40
Certificate issuer: /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
Certificate serial: 0C76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
Manifest number: 0C58
Signing time: Thu 10 Sep 2026 18:41:58 +0000
Manifest this update: Thu 10 Sep 2026 18:41:57 +0000
Manifest next update: Thu 17 Sep 2026 18:41:57 +0000
Files and hashes: 1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: IAlsb1lBEVHx1k2Lh67A5XTv7pbyNfAAY5dh637zIuc=)
2: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: iYKsxDWu3S2WTBmkPPCzWiLUj+VpiqqOdy4MbHyYgYs=)
3: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: ltYps8if0G6nvc97HNna0dOwk3QKPLcJcqz29XZNF8A=)
4: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: NNkPApcMl17Fe2ICzZKJl1AOkbO+YYiI8uoP32kJG3k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl
rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 15:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3190 (0xc76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
Validity
Not Before: Sep 10 18:41:57 2026 GMT
Not After : Sep 17 18:41:57 2026 GMT
Subject: CN=6aa2f9f6-3ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:03:ba:69:2d:73:11:77:e8:3e:db:c0:fb:
66:14:f6:13:98:9c:c9:76:1a:fe:34:9c:fb:25:91:
b3:03:3f:46:06:12:bb:9a:e5:2f:59:bc:b1:0e:6b:
ec:00:a7:b3:a4:b6:b0:a0:8e:46:f1:8f:eb:5d:f9:
9a:af:de:e5:61:4b:85:ef:35:0f:72:d6:a8:f0:62:
65:27:88:d2:62:d8:fa:e7:70:ef:8e:35:4d:f6:03:
29:4e:87:7e:a7:e8:0a:4e:9d:3d:e1:0d:3f:ec:4e:
78:d8:cb:89:8b:fb:0c:3c:fa:ea:f5:4b:29:b7:de:
64:29:dc:7c:1b:e8:a5:17:3c:bd:a9:32:5d:75:97:
07:0b:db:ed:42:b5:4b:27:35:e8:6d:19:ad:2a:85:
df:4b:21:62:cc:0a:a5:1f:34:f9:5c:8b:72:18:b3:
68:41:44:ff:9b:06:3f:28:ae:8d:f7:de:7b:f1:28:
3e:68:f1:56:53:7f:c1:c7:0b:89:31:9a:d2:19:f1:
3b:53:c9:3f:25:24:b7:e0:11:00:7b:85:e1:36:ef:
ba:a3:f1:f7:c2:98:d7:c4:a3:79:92:7c:19:12:4b:
e4:60:86:9c:c3:b7:62:cd:11:d8:df:bc:33:66:e1:
b8:c6:f8:44:aa:e4:b0:e4:99:94:42:1d:09:fe:24:
f8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:39:20:FB:4F:2B:52:ED:D1:78:34:1B:A4:08:9C:85:F5:08:A7:43
X509v3 Authority Key Identifier:
keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:0e:bf:54:12:f6:c4:18:bf:44:c1:ab:23:b3:c9:bc:0e:5c:
02:2a:d3:73:54:d4:9d:c3:a6:84:9f:99:e1:81:1b:52:4d:a3:
d1:0a:71:62:f5:0a:20:8d:d1:6f:47:6e:8b:64:a4:98:64:e9:
4a:e1:cc:b7:e1:4a:13:14:b3:78:8f:e8:29:aa:d1:b4:b0:64:
78:e9:f3:0d:f7:c6:e9:7c:ee:b1:a2:43:21:90:93:01:8d:c3:
28:89:73:06:cc:b8:14:10:72:08:08:68:1e:27:4f:08:dc:57:
cb:db:fb:26:26:fc:b6:33:f1:97:50:72:fc:27:15:11:ea:9f:
bb:45:9a:aa:ee:68:b2:13:c9:c6:88:07:f0:82:e1:3e:df:c1:
b4:b9:8d:dc:ac:8b:fc:62:80:59:63:95:ca:43:7d:98:24:46:
24:cf:0e:6d:a7:79:ed:6c:b6:81:c7:34:c6:87:9a:b3:e7:5e:
88:5f:6d:eb:90:9b:7a:0e:2f:a0:b0:5f:07:80:ed:32:86:4a:
4f:5c:a8:b3:86:9c:49:4d:0e:e4:a5:33:4e:6f:c8:08:0b:ea:
91:fd:48:0e:5a:66:a0:70:3b:d1:4c:a1:7f:68:8f:71:05:15:
b0:b1:b8:0e:03:95:7a:b6:33:75:7b:53:7e:97:e1:69:38:75:
bd:62:f6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:41:25 2026 by rpki-client