
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
File: yiPsANw26PNUZ_BZkXTqC-_bQfk.mft (raw, json)
Hash identifier: Uuizf7oBRXunCSNArpWkF4r06EsCq1q0blxsd9Tze5I=
Subject key identifier: BD:0F:24:78:D4:D2:54:D9:FA:DB:BE:1E:A7:85:9D:E9:74:9F:72:46
Authority key identifier: CA:23:EC:00:DC:36:E8:F3:54:67:F0:59:91:74:EA:0B:EF:DB:41:F9
Certificate issuer: /CN=A9142182/serialNumber=CA23EC00DC36E8F35467F0599174EA0BEFDB41F9
Certificate serial: 0924
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
Manifest number: 090D
Signing time: Tue 06 Oct 2026 20:24:03 +0000
Manifest this update: Tue 06 Oct 2026 20:24:02 +0000
Manifest next update: Tue 13 Oct 2026 20:24:02 +0000
Files and hashes: 1: yiPsANw26PNUZ_BZkXTqC-_bQfk.crl (hash: OQe+dhnGkCvUJCITm1YKgQNnW9XQz+WR7Tgdm21FW0k=)
2: 180F88DEDD1611EABA2F7C82C4F9AE02.roa (hash: XYkltAmY694oNWijiU8cOgiirwvyfbNApdlSNKuCCQk=)
3: 584ED0CCDD1A11EA96723D11C4F9AE02.roa (hash: waW29/s7V1I7/jULSHeHhly51YBYHrbD2pDNBeFhv3k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.crl
rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:24:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2340 (0x924)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142182, serialNumber=CA23EC00DC36E8F35467F0599174EA0BEFDB41F9
Validity
Not Before: Oct 6 20:24:02 2026 GMT
Not After : Oct 13 20:24:02 2026 GMT
Subject: CN=6ac558e3-6ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:39:f5:19:bd:51:d9:e4:62:37:ec:87:82:
3d:b6:72:db:1f:7b:c3:80:c6:4e:c6:c4:2e:b8:cd:
11:20:ba:b3:97:89:8a:5a:b0:ea:68:fb:51:1d:96:
df:34:04:64:54:b3:a1:b8:4b:e8:5b:81:4a:4e:e5:
78:80:b7:fa:b7:b1:8b:ae:37:ea:a0:c8:f7:3e:e1:
cb:03:cd:ee:e0:6e:0b:23:0a:98:02:22:97:3a:84:
d2:7e:a0:86:e8:7e:c2:fd:1c:dd:c8:c6:a6:93:a0:
4a:8d:5f:cf:c8:bd:89:5c:a5:62:33:75:47:f4:53:
78:8b:e7:ac:be:99:af:1b:84:be:90:6c:f7:86:21:
6d:75:5c:49:9c:b6:7a:be:e5:b7:da:10:43:f7:58:
66:6b:f5:45:ec:27:d2:4d:c1:d3:84:b6:db:5e:b6:
fb:e8:d7:c6:ff:f5:c0:4e:ad:4e:5b:91:6a:0d:f1:
0d:15:3b:58:c8:67:9e:82:3f:f9:33:1b:74:63:29:
96:9e:81:3f:c7:d4:7d:04:3e:0b:8f:f4:e7:e7:ac:
7e:98:a2:84:7a:bc:fc:64:36:68:8f:69:a4:2c:f5:
1a:2d:f3:27:bc:8f:fa:ab:c2:00:30:eb:44:7a:ab:
0a:a1:d2:2c:85:70:1e:2f:13:42:e1:5f:99:20:d9:
ab:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0F:24:78:D4:D2:54:D9:FA:DB:BE:1E:A7:85:9D:E9:74:9F:72:46
X509v3 Authority Key Identifier:
keyid:CA:23:EC:00:DC:36:E8:F3:54:67:F0:59:91:74:EA:0B:EF:DB:41:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:0f:fb:31:84:0e:36:58:44:9a:e1:98:0f:87:cd:10:11:14:
b8:02:bd:02:91:c1:20:89:6f:9d:b0:be:3a:ee:8f:01:ca:1e:
d4:66:4b:e4:de:20:a8:31:46:84:a0:91:d3:ff:d0:b1:a6:5b:
b4:c3:8c:22:85:60:ea:4e:9a:ad:eb:81:ff:84:db:82:c0:e1:
64:6e:f4:42:d3:3f:3a:0c:74:5d:c0:c1:db:5b:ee:b9:d4:5a:
2a:be:cb:77:0a:14:47:30:c4:49:fe:0c:30:f0:0e:7e:e9:3f:
01:cf:71:c9:b0:b1:6b:41:65:fe:8c:bb:de:a1:91:26:67:51:
89:56:9e:b1:29:1f:78:49:e8:cb:1e:17:7b:9d:d4:2b:46:86:
18:88:50:6d:ee:51:85:be:46:89:b4:b8:be:fa:47:69:11:3c:
83:09:38:49:b7:62:a2:29:e7:be:dc:63:f0:c3:cf:1a:3f:86:
17:90:81:a6:39:f6:f1:da:03:d3:a8:e0:2f:82:62:1b:b0:87:
ee:07:7b:02:e7:b3:d1:be:a9:fc:57:82:f4:40:9d:bf:6c:09:
c2:98:8d:54:ac:8d:d2:a1:ca:cc:56:e0:1e:8f:60:c7:62:9d:
63:9f:78:75:29:b3:59:1e:1c:aa:9a:04:2f:d6:bd:20:7e:7d:
30:2c:f3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:13:57 2026 by rpki-client