
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft
File: yZ1gB81HfYmzWcM8k8qptbsQYBo.mft (raw, json)
Hash identifier: R9rXTRq2zV8PxkV5EWGSOnhmD0mKZakCBme35C3UPc8=
Subject key identifier: 66:DB:4D:C4:A5:6E:86:03:EF:31:89:7F:E1:38:4A:0C:A9:81:D6:20
Authority key identifier: C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A
Certificate issuer: /CN=A9173F03/serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A
Certificate serial: 0D1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft
Manifest number: 0D07
Signing time: Tue 18 Aug 2026 18:37:14 +0000
Manifest this update: Tue 18 Aug 2026 18:37:14 +0000
Manifest next update: Tue 25 Aug 2026 18:37:14 +0000
Files and hashes: 1: yZ1gB81HfYmzWcM8k8qptbsQYBo.crl (hash: ZlZ2KQNQDicJlx88T7ffPQS91TWTwIpZiujiw51JH8Q=)
2: 7D16D03C861A11EF99D32B66C4F9AE02.roa (hash: KI0wtfrpzzeldL0TKgebNaTut7M4MCF1WK3HZwTSHVM=)
3: 1F3C6E3C6E6811EF93F0A64EC4F9AE02.roa (hash: c63Et1Ir/YnB7K8uol85rXXmz9MoXTQl05iq46Egj80=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl
rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:37:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3355 (0xd1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173F03, serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A
Validity
Not Before: Aug 18 18:37:14 2026 GMT
Not After : Aug 25 18:37:14 2026 GMT
Subject: CN=6a84a65a-b2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:43:55:24:8f:39:a0:7c:bb:9f:ce:5a:94:
95:33:a9:5e:de:c2:86:44:60:74:08:ec:5f:62:b6:
d5:ef:08:d7:51:17:1d:a6:d7:1d:cd:30:a7:d4:e2:
ee:cb:19:17:25:f2:0f:af:22:aa:0b:7e:89:55:8d:
2b:43:aa:4b:fb:fb:71:89:eb:9a:75:7b:86:27:81:
94:20:ea:9a:34:19:07:1a:c8:e2:e2:ae:a1:92:96:
24:00:24:b5:a5:85:a9:0f:b7:7b:3a:95:d3:70:18:
9b:f0:39:c4:83:21:76:cd:4b:76:b4:52:d4:be:e1:
66:ac:ac:be:32:29:71:e7:a7:2a:34:17:af:c9:2d:
b8:e3:4e:e2:ae:80:ce:62:f2:e5:5f:82:4d:44:91:
9b:b4:70:50:38:d0:ed:de:ba:fa:1b:55:fa:27:07:
74:49:2d:ff:37:71:eb:2d:19:9d:8d:a8:7b:cd:ea:
49:71:5d:ed:c7:c1:af:77:fb:f8:2c:ff:da:38:74:
f2:2f:21:f9:9a:f9:6d:ca:2e:d6:3d:56:11:bc:69:
db:c8:5e:50:75:e5:af:29:a6:4e:a5:5c:91:27:66:
f7:f9:39:8e:aa:71:6c:b7:44:48:ef:41:f2:4c:64:
af:c1:09:04:a3:be:76:6b:89:99:2b:1d:6d:47:88:
3e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DB:4D:C4:A5:6E:86:03:EF:31:89:7F:E1:38:4A:0C:A9:81:D6:20
X509v3 Authority Key Identifier:
keyid:C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:df:f1:71:a8:74:a8:bd:91:7d:6e:9b:99:a5:e3:fb:28:22:
7c:c8:2e:42:b7:12:04:f7:7f:d2:37:d9:c9:9d:8c:e8:08:d1:
64:64:40:66:21:12:ba:24:6b:18:71:59:5e:f0:0a:0a:80:4f:
b9:db:3c:7f:f0:51:a1:65:a4:86:2f:4c:4f:c6:44:b4:85:11:
d5:d9:f7:1f:76:0b:79:4a:f5:97:42:10:48:13:30:17:60:75:
3a:0f:ba:f9:83:96:2a:39:fd:7d:57:1a:f2:42:d5:4c:a1:bd:
57:fa:2a:4a:bd:fd:e6:0f:13:65:19:11:65:79:1c:77:62:99:
3e:61:81:c0:03:ef:32:80:be:df:89:8e:4a:b2:ca:d6:fe:f6:
c9:85:3e:2d:51:01:14:d9:62:ed:c1:97:a0:ce:c8:d9:a8:52:
75:31:ba:c9:05:8b:15:a7:68:ac:84:cf:7a:96:7b:81:e5:10:
7a:cd:f3:b7:52:bd:06:7a:ee:ee:09:32:47:ff:b1:d1:e8:fa:
52:66:c2:75:39:b6:76:c1:0c:a8:b9:f0:a1:1a:47:a6:bd:aa:
0b:80:03:bb:91:ce:bc:08:8d:7a:34:e2:da:4d:4f:54:9c:c5:
b7:5b:4f:30:c0:df:85:4c:eb:2a:ef:a8:e0:ef:11:d3:ca:25:
14:1f:be:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:04:33 2026 by rpki-client