
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
File: y539cqjfUOBlAEN4BraiAY7Mvf0.mft (raw, json)
Hash identifier: sdgTNHY60KT5s8qww8i8jVPN+nysKHglKo77jxBSzkg=
Subject key identifier: 08:64:B6:67:27:D5:0A:4D:67:A0:FA:5B:F8:BC:1D:54:A3:1E:32:96
Authority key identifier: CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD
Certificate issuer: /CN=A9150733/serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD
Certificate serial: 0BCB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
Manifest number: 0DC9
Signing time: Sat 04 Apr 2026 18:46:48 +0000
Manifest this update: Sat 04 Apr 2026 18:46:48 +0000
Manifest next update: Sat 11 Apr 2026 18:46:48 +0000
Files and hashes: 1: y539cqjfUOBlAEN4BraiAY7Mvf0.crl (hash: 3RdkMI9Xw/wfbeasez2e6gLz3MrzkRnIUdkW+L/iEwY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl
rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:46:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3019 (0xbcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150733, serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD
Validity
Not Before: Apr 4 18:46:48 2026 GMT
Not After : Apr 11 18:46:48 2026 GMT
Subject: CN=69d15c98-2f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c5:09:ba:30:0a:59:2a:42:b4:76:e9:c5:03:
9d:71:ec:2c:ec:8b:51:ad:31:a9:79:d5:8d:31:6e:
d3:b5:ec:07:75:26:f0:85:2d:31:2e:ed:32:1a:c0:
69:3a:0f:8e:6f:e4:9a:e3:37:b6:22:74:a1:42:4c:
5c:b3:05:6f:ca:9c:2b:80:1f:40:f7:c1:1c:54:c1:
4d:74:0d:47:0e:ba:7a:3e:39:68:f1:95:00:f4:86:
8e:7c:0c:f4:14:0a:66:9a:6f:d1:69:8f:72:0b:f1:
a2:e8:3f:14:5b:c6:04:c3:39:22:06:f8:b7:d8:5e:
b2:70:c4:55:7c:9f:f4:39:71:86:86:23:c9:f2:cd:
ce:f0:e7:01:e6:1a:30:67:29:52:b7:f5:4c:e9:b1:
68:ca:cf:4c:80:f0:8a:27:b1:c3:31:87:88:42:53:
5b:b7:f1:bb:8f:c0:84:33:8a:83:cc:f6:ea:54:ab:
88:bf:b9:11:92:2d:02:21:b2:2b:a6:6b:b0:2a:cd:
e9:f6:d1:f8:9f:21:2a:98:80:e1:67:b9:a4:16:f1:
23:71:4a:51:8e:02:48:de:57:56:f2:e9:e8:5e:b2:
57:86:f8:77:3b:cc:25:e3:7d:09:48:e7:25:53:46:
36:b9:1a:db:46:34:4d:02:6f:80:59:3c:2c:58:24:
56:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:64:B6:67:27:D5:0A:4D:67:A0:FA:5B:F8:BC:1D:54:A3:1E:32:96
X509v3 Authority Key Identifier:
keyid:CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ce:f5:40:3e:48:18:41:16:31:dc:5b:a8:ff:07:4f:36:ee:
5c:ad:f2:4d:32:69:ba:f3:d9:da:0b:bf:35:6f:3b:94:f0:fa:
3a:83:96:c0:79:9d:1a:a3:d0:b5:1c:b4:12:f6:0f:14:35:23:
c8:ee:b1:1f:ed:a5:08:d0:4b:77:c2:d4:4e:c6:6a:a8:f0:0d:
cf:49:a8:92:f2:c7:7a:7a:c8:1f:3a:7c:20:42:ef:7c:a8:cf:
94:8e:03:2b:cc:c5:98:4f:66:5a:74:a5:a0:b7:32:09:a5:99:
44:9b:27:c0:ac:da:fd:41:07:80:20:23:a8:ae:6b:8e:02:b9:
7e:26:60:b3:13:41:e6:94:bc:84:07:5b:98:d6:86:1c:a3:8f:
64:86:66:38:d3:da:98:73:a8:75:dd:11:cc:89:1d:aa:d0:bb:
4a:50:ad:0c:35:2f:a3:db:a0:e8:2c:41:e8:18:61:91:64:d2:
4e:eb:ad:ad:3f:7d:12:63:3d:a0:5b:18:40:8b:80:7d:19:eb:
6b:de:ea:14:69:75:ac:a3:10:35:dc:44:2e:52:f7:0e:48:bf:
76:b9:3c:8e:be:0b:04:e4:5e:24:46:95:93:c1:36:9d:d5:0c:
2f:c5:7e:c6:59:2e:52:dc:c5:fc:12:4b:4c:39:82:ab:e4:fa:
74:46:2a:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTA3MzMxMTAvBgNVBAUTKENCOURGRDcyQThERjUwRTA2NTAwNDM3ODA2QjZBMjAx
OEVDQ0JERkQwHhcNMjYwNDA0MTg0NjQ4WhcNMjYwNDExMTg0NjQ4WjAYMRYwFAYD
VQQDEw02OWQxNWM5OC0yZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw8UJujAKWSpCtHbpxQOdcews7ItRrTGpedWNMW7TtewHdSbwhS0xLu0yGsBp
Og+Ob+Sa4ze2InShQkxcswVvypwrgB9A98EcVMFNdA1HDrp6Pjlo8ZUA9IaOfAz0
FApmmm/RaY9yC/Gi6D8UW8YEwzkiBvi32F6ycMRVfJ/0OXGGhiPJ8s3O8OcB5how
ZylSt/VM6bFoys9MgPCKJ7HDMYeIQlNbt/G7j8CEM4qDzPbqVKuIv7kRki0CIbIr
pmuwKs3p9tH4nyEqmIDhZ7mkFvEjcUpRjgJI3ldW8unoXrJXhvh3O8wl430JSOcl
U0Y2uRrbRjRNAm+AWTwsWCRWjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAhktmcn
1QpNZ6D6W/i8HVSjHjKWMB8GA1UdIwQYMBaAFMud/XKo31DgZQBDeAa2ogGOzL39
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDczMy8yMTc4NjhDRTNE
QjUxMUVBQTY0OTEzMTJDNEY5QUUwMi95NTM5Y3FqZlVPQmxBRU40QnJhaUFZN012
ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3k1MzljcWpmVU9CbEFFTjRCcmFpQVk3TXZmMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDczMy8yMTc4NjhDRTNEQjUxMUVBQTY0OTEzMTJDNEY5QUUwMi95NTM5Y3FqZlVP
QmxBRU40QnJhaUFZN012ZjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfs71QD5IGEEWMdxbqP8HTzbuXK3yTTJpuvPZ2gu/NW87lPD6OoOWwHmdGqPQ
tRy0EvYPFDUjyO6xH+2lCNBLd8LUTsZqqPANz0mokvLHenrIHzp8IELvfKjPlI4D
K8zFmE9mWnSloLcyCaWZRJsnwKza/UEHgCAjqK5rjgK5fiZgsxNB5pS8hAdbmNaG
HKOPZIZmONPamHOodd0RzIkdqtC7SlCtDDUvo9ug6CxB6BhhkWTSTuutrT99EmM9
oFsYQIuAfRnra97qFGl1rKMQNdxELlL3Dki/drk8jr4LBOReJEaVk8E2ndUML8V+
xlkuUtzF/BJLTDmCq+T6dEYqiQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:38 2026 by rpki-client