
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
File: ycx5T_y0zfLZ373rdjgJuH0tj1c.mft (raw, json)
Hash identifier: hgNmIAaxwsxOl/Ah5+oHnWp9YyQ8CyklI93DffYnRZI=
Subject key identifier: C9:02:15:59:F8:13:AF:83:E5:72:B3:9D:08:BE:6F:7B:98:E9:F3:DA
Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57
Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
Certificate serial: 259F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
Manifest number: 257E
Signing time: Sat 04 Apr 2026 15:41:05 +0000
Manifest this update: Sat 04 Apr 2026 15:41:04 +0000
Manifest next update: Sat 11 Apr 2026 15:41:04 +0000
Files and hashes: 1: ycx5T_y0zfLZ373rdjgJuH0tj1c.crl (hash: FUAc8SVzy+TzTViGrncB8jGGP1apI83ib5y+9MGtpNw=)
2: 297BC4140D4611E794585E2FC4F9AE02.roa (hash: /APSJPO1WwUNbNz10EJn94BnFWAnDuB94L0jk/7YJvM=)
3: 04CC562A444E11E88204061CC4F9AE02.roa (hash: UvaAhwggzxiP5BreIlqS+S/h5B1PMRbtiBEtDey1XLE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl
rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9631 (0x259f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
Validity
Not Before: Apr 4 15:41:04 2026 GMT
Not After : Apr 11 15:41:04 2026 GMT
Subject: CN=69d13111-9e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3f:54:8e:ab:46:0f:ab:1c:85:bd:4a:f6:29:
2e:6e:2e:64:d9:46:77:e6:86:14:c0:44:32:d7:90:
99:48:87:a3:51:bc:41:42:43:7e:9b:6b:a6:4d:c7:
58:85:47:8a:f1:5f:f7:97:95:d8:97:e2:a4:18:8c:
a9:10:80:6c:92:4b:4a:97:3a:82:6a:86:42:29:28:
90:68:48:fa:b8:d7:12:1d:2a:3d:1f:54:9a:45:ec:
07:77:be:92:56:51:09:23:f9:f4:37:8c:50:56:1b:
2e:71:e0:4d:b7:01:80:8d:1a:72:6c:90:ff:36:28:
1a:87:07:ca:fb:3a:70:2a:68:12:eb:1c:bf:5f:6f:
23:0e:8c:b0:5a:51:79:4e:be:41:a2:b5:e9:42:28:
d7:9e:4c:86:49:48:28:ba:03:a6:68:67:da:8d:4b:
ce:a2:50:3e:d4:c9:9e:c0:53:6b:b8:be:ac:a7:f8:
94:51:6a:e1:65:fc:cb:92:6a:91:a8:b8:3d:23:ff:
e6:be:88:47:f5:a0:a3:a4:92:a0:f3:a1:6b:9d:f1:
00:9a:43:2d:28:2a:a1:f8:1a:b6:e2:c4:aa:20:92:
e8:d1:17:89:99:e7:af:f0:ae:e7:8e:37:43:c9:4c:
fb:ac:1e:bc:34:eb:f7:e8:17:87:29:ee:8d:59:d3:
25:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:02:15:59:F8:13:AF:83:E5:72:B3:9D:08:BE:6F:7B:98:E9:F3:DA
X509v3 Authority Key Identifier:
keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:49:40:fa:b0:bf:3c:4b:de:f3:66:d7:5e:f8:7d:ea:b3:56:
c2:7c:e1:67:89:ec:a3:a8:5b:db:03:f9:0d:9a:0b:69:9e:08:
e4:09:db:a1:2f:83:35:cc:2c:31:4e:07:35:d7:74:ec:08:a9:
11:a9:b3:cc:a4:3c:60:24:b7:63:74:57:76:8b:f7:1e:ce:7b:
52:77:8d:51:81:2d:f1:ef:7f:8b:6f:ec:22:22:a9:2c:c0:73:
ac:0a:1c:84:a0:60:59:03:b7:50:71:30:96:80:c5:27:9c:9a:
8e:b8:79:b2:a9:05:52:8e:19:e9:b1:ac:9a:ae:68:b8:9d:03:
e5:de:b2:8f:66:1b:dd:71:41:66:d9:e8:ee:3f:30:b4:ae:cd:
88:4f:ab:81:58:d6:69:8f:16:e6:7f:22:ec:8d:c0:b4:81:27:
51:27:77:ba:af:28:d9:fb:99:36:54:83:17:da:17:b4:5d:2d:
7c:5a:9f:23:48:f3:98:74:4b:96:76:0f:93:8a:55:8b:ea:b2:
6c:b6:72:2f:49:ad:ed:3f:5f:94:aa:34:da:52:40:a3:db:37:
4a:97:d8:9e:d5:d2:7f:c2:8e:2c:ef:20:f0:47:e7:7d:d4:93:
d1:ae:1f:b6:82:4e:ab:c7:97:2b:24:7f:bf:15:d2:58:a7:78:
2c:86:fe:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:24:14 2026 by rpki-client