
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft
File: YCgZkDDJlCoUSqFr-zB450H27CM.mft (raw, json)
Hash identifier: pMmLEt/YiR1QZ5PfJ499KpBpSivGZ+GNvtSObE4jz9A=
Subject key identifier: 8D:95:F5:53:1C:6D:A8:AE:C2:F5:71:08:EF:DB:C2:01:04:D7:43:F7
Authority key identifier: 60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23
Certificate issuer: /CN=A9175D4F/serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23
Certificate serial: 0B0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft
Manifest number: 0AF6
Signing time: Fri 02 Oct 2026 19:36:27 +0000
Manifest this update: Fri 02 Oct 2026 19:36:26 +0000
Manifest next update: Fri 09 Oct 2026 19:36:26 +0000
Files and hashes: 1: YCgZkDDJlCoUSqFr-zB450H27CM.crl (hash: +xB8W2XMEN2xibYaQX90hxx+DMH+sS3yHMXfFK7zorA=)
2: 5D2B0616A9C011EABAAB4624C4F9AE02.roa (hash: ID5P6rejMOjyD1/9QNZxfu6Edv4l/BB2XuqFSG1EvOM=)
3: 5C1CF19EA9C011EABAAB4624C4F9AE02.roa (hash: N76m8mGbInfNEkPUCeKxXQd1avqi2DdrtdtXBvmx1bI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl
rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 19:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2826 (0xb0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175D4F, serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23
Validity
Not Before: Oct 2 19:36:26 2026 GMT
Not After : Oct 9 19:36:26 2026 GMT
Subject: CN=6ac007ba-bf28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:07:24:8b:01:a2:ed:99:a4:97:06:82:d9:
38:43:14:b3:4a:6d:ac:b3:bb:85:9b:65:d2:6e:9e:
cb:f7:a8:52:9b:0a:1d:99:6f:62:3f:bc:7a:96:f0:
a9:60:27:9b:c0:ce:4b:84:34:28:df:7a:32:cd:db:
35:27:5a:e6:44:26:57:6d:be:24:15:60:52:a7:2b:
69:14:6e:21:19:54:ba:40:6f:2b:16:42:3c:29:ac:
9b:9f:16:62:d3:99:3b:bd:23:d7:ca:4e:e7:2b:ca:
17:b9:0b:11:78:41:a3:1d:5a:41:c8:46:34:5c:39:
ed:03:0b:49:57:ba:32:b9:16:5f:c3:1d:2b:0f:62:
f9:4c:02:f6:0c:42:21:bd:a1:2b:47:dc:6c:4c:59:
34:b9:90:ba:63:67:3a:de:b6:3f:2f:cc:2c:a7:72:
d9:b0:53:41:74:54:62:93:c6:9f:e7:6a:a6:eb:c5:
5d:ee:ad:42:fa:53:fd:d9:4e:62:fc:83:53:9f:88:
50:c1:08:00:0f:dc:c8:e1:f8:99:12:81:6f:ec:a6:
d0:b2:fb:85:15:9d:1a:eb:ba:78:2e:08:39:3c:e1:
56:3d:51:d5:d3:1b:61:38:f0:2f:d5:37:f2:9d:f9:
33:1a:08:cc:ba:f9:28:6f:01:59:83:af:b8:73:8a:
68:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:95:F5:53:1C:6D:A8:AE:C2:F5:71:08:EF:DB:C2:01:04:D7:43:F7
X509v3 Authority Key Identifier:
keyid:60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:e4:d7:59:7a:d1:8d:b6:b0:49:a6:40:35:fb:2e:f3:17:ef:
9d:21:fb:47:96:76:d7:39:cb:d2:c0:22:ce:2b:02:aa:79:be:
73:22:00:86:da:28:2b:ec:05:1b:43:b3:0f:c7:2c:0b:ca:b3:
74:62:1a:92:b7:a0:0f:09:39:ea:71:69:80:22:85:a1:5e:07:
b8:f7:ba:54:29:e0:92:ea:f7:5b:e4:68:05:48:62:7e:2b:05:
91:48:e6:3f:b2:fa:98:78:36:91:67:e1:7f:0a:ee:5b:0d:8e:
d0:6a:ef:03:33:16:2c:d0:f7:c4:5b:6c:1a:a9:bb:d5:6d:7d:
d9:05:9e:fa:ee:ff:6d:a0:b4:eb:cd:e4:4e:f2:4c:1c:82:29:
cb:9e:a8:cf:8b:a0:6d:ff:8f:d5:71:10:60:85:91:8a:1f:e3:
5b:e6:66:28:10:2c:f3:a0:9d:2d:93:f5:45:f4:be:e3:72:c7:
cf:b8:57:2d:a1:34:1c:cb:95:c5:24:fc:f5:ed:41:8f:6e:22:
48:00:01:c1:91:73:e9:06:0a:cb:8f:33:c2:18:7a:9a:59:b6:
c9:db:3f:52:d1:1c:7e:5a:8c:86:b1:f4:01:2c:ab:ba:85:f6:
16:67:a6:58:a8:fb:7f:ac:3f:bd:61:0f:13:a7:cb:f2:e9:b4:
5a:b7:81:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:18:59 2026 by rpki-client