
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
File: y2bgNeLweFj09ztHjc2FpjakJQo.mft (raw, json)
Hash identifier: MCL2UMsPF0OHO9Gn5j77WySd8za7dDZnD2ESZjlof80=
Subject key identifier: 3A:AB:E9:B6:65:E3:81:82:86:B0:A5:2B:57:87:CA:73:7D:4D:22:0E
Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
Certificate issuer: /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Certificate serial: 0196
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
Manifest number: 017A
Signing time: Wed 29 Apr 2026 05:41:53 +0000
Manifest this update: Wed 29 Apr 2026 05:41:52 +0000
Manifest next update: Wed 06 May 2026 05:41:52 +0000
Files and hashes: 1: y2bgNeLweFj09ztHjc2FpjakJQo.crl (hash: lviRjsJALUfxZOXt4zJ41kReFfBVT8isN1MzvAJlkpg=)
2: AF27640226FA11F0B0383240C4F9AE02.roa (hash: 4LD8HC62z2DhT4Dg2lOYzbuBHzfVnUe3OyB/4hGuDkM=)
3: 82D8082A292611EF875A5C36C4F9AE02.roa (hash: SyXuffXDHXPbASG7Y+LG0Brt2u6hsVNRNcrnMwVVAGw=)
4: 24D519F226FA11F0B737393FC4F9AE02.roa (hash: x10D9pADYHToKbPS6t/synxTqCGYuiAeyckivfclbFs=)
5: 851515FC1C8711EF964ED80AC4F9AE02.roa (hash: MAtmMwfjtzQ9R8LyZXq78h+1kb3Yy15h8cOKjzlP4LM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 05:41:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169C00, serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Validity
Not Before: Apr 29 05:41:52 2026 GMT
Not After : May 6 05:41:52 2026 GMT
Subject: CN=69f19a21-6d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d4:e9:72:d1:03:75:38:f7:a9:28:50:7f:9d:
81:e4:ad:3a:36:c1:ae:50:71:de:ee:0a:cb:e0:93:
9b:05:90:9d:35:6f:d4:d7:3e:b4:b7:57:16:ea:5c:
65:f8:01:6d:a8:fe:3c:f7:72:bc:c8:d8:f5:05:11:
7f:0a:12:e5:3e:7d:2f:2a:b7:1d:e8:ff:cf:dd:13:
c3:1a:1a:cd:b6:b5:e4:06:6f:82:2c:08:d0:b2:2e:
c5:92:26:38:1a:32:a2:fe:ac:e1:5c:fa:3c:e7:28:
c2:3a:ea:72:33:86:2a:db:15:3b:29:da:99:ea:31:
b6:ec:e3:6f:83:3c:7f:68:e5:88:34:9d:84:c1:ad:
3e:e5:c3:8d:80:68:8c:c9:71:ac:e9:02:fe:c7:8a:
f8:da:b8:0f:15:47:ad:8d:ed:89:06:b7:76:24:70:
b0:dd:48:e9:fa:e2:10:49:e0:c9:e0:fc:74:93:b1:
55:c8:df:d8:01:4f:00:42:ea:74:bd:29:98:38:f9:
10:3c:2d:dd:de:4f:2c:60:0b:93:e2:46:00:61:8a:
f6:6c:91:2d:56:fc:7a:0a:2b:d4:36:62:db:35:26:
89:a7:a9:da:7f:f3:b2:20:5b:7c:aa:6c:05:a3:e2:
66:5b:7c:8c:9d:26:16:9b:de:bf:87:e1:e8:28:8c:
0f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AB:E9:B6:65:E3:81:82:86:B0:A5:2B:57:87:CA:73:7D:4D:22:0E
X509v3 Authority Key Identifier:
keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:3f:a7:2d:3a:28:f0:01:fd:44:21:82:b0:f5:da:35:a6:ab:
e3:67:d4:82:6f:21:d4:94:b8:4a:9e:db:34:ee:c5:32:68:48:
aa:5b:70:ba:8c:f3:cb:2a:84:b5:88:1b:8d:4f:97:18:5b:3d:
39:90:95:e2:8d:53:79:f5:51:c0:53:71:cf:b4:22:58:c7:c1:
46:fe:32:4b:9c:60:ee:3b:2f:f3:26:01:49:24:28:1f:00:cf:
b7:34:5d:48:6a:ac:85:e0:0b:1f:7b:f6:a4:5c:c0:58:d6:c7:
e6:6f:0b:f0:e0:fe:d1:9d:09:16:d6:7c:81:3e:29:e6:5d:48:
54:21:28:f6:93:bf:16:65:83:d9:4f:ed:4a:94:70:58:60:93:
3f:32:b1:f1:35:42:8c:82:53:ff:6e:ff:f9:79:48:8e:bf:42:
e4:83:54:e8:d3:83:a7:76:17:c7:b3:f9:bc:fd:eb:2c:b9:c7:
1a:a3:f6:9e:b7:81:ef:19:e7:92:0d:24:b5:72:99:53:99:29:
d1:ce:95:ba:0c:62:26:57:8c:b3:d8:82:fd:cf:c3:b8:e9:94:
a8:20:5c:3c:de:c5:1d:5b:5d:c4:0b:bc:87:51:85:ca:69:7b:
f1:87:64:b1:09:15:2d:c0:8b:22:f3:70:e9:da:9b:81:44:05:
92:b3:61:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 13:47:34 2026 by rpki-client