
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.mft
File: yoz-J9giejF1jevDyM-0mmi9nBY.mft (raw, json)
Hash identifier: XPsPGhUsJlxWObjFhE//+9NzpCK5/l86Ew1Ai8S0IYU=
Subject key identifier: 71:51:DC:13:C1:1A:FB:21:87:33:5E:49:BA:69:F2:C6:C9:B0:6E:3B
Authority key identifier: CA:8C:FE:27:D8:22:7A:31:75:8D:EB:C3:C8:CF:B4:9A:68:BD:9C:16
Certificate issuer: /CN=A9181C22/serialNumber=CA8CFE27D8227A31758DEBC3C8CFB49A68BD9C16
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoz-J9giejF1jevDyM-0mmi9nBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.mft
Manifest number: 2C
Signing time: Sat 03 Oct 2026 09:28:47 +0000
Manifest this update: Sat 03 Oct 2026 09:28:47 +0000
Manifest next update: Sat 10 Oct 2026 09:28:47 +0000
Files and hashes: 1: yoz-J9giejF1jevDyM-0mmi9nBY.crl (hash: S0apc4mNP3wr340FJsZQwCP8QByg7N/WOv648Z/iBFk=)
2: 790311F0862B11F19F545A5A85A30FBC.roa (hash: K758P2i0ED5BUiODFKBBk7m3g6wZiKJoenMN8VI5EMY=)
3: 79FCD514862B11F19F545A5A85A30FBC.roa (hash: 0lUhr9E0+OD/ipp8YwvzpZUPTlZiljm7z4wnu4JJie8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.crl
rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoz-J9giejF1jevDyM-0mmi9nBY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 09:28:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181C22, serialNumber=CA8CFE27D8227A31758DEBC3C8CFB49A68BD9C16
Validity
Not Before: Oct 3 09:28:47 2026 GMT
Not After : Oct 10 09:28:47 2026 GMT
Subject: CN=6ac0cacf-4c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:af:d3:99:a3:ba:04:4c:31:31:28:18:7e:de:
59:f4:5a:c3:09:d2:8e:cc:d1:be:7a:3b:20:89:7d:
28:f3:fa:d6:81:4a:20:77:bd:9d:af:38:57:ab:ce:
0d:7c:7f:f8:cd:15:e0:4a:f5:87:b3:12:1a:c6:02:
97:7b:62:4d:1f:00:0a:f5:e9:b9:f4:31:2e:2a:22:
2c:7e:c0:ac:93:17:57:31:f0:83:21:16:17:b2:0e:
1f:ca:92:36:7c:9d:62:37:ca:24:8c:47:91:9a:58:
f3:2b:ea:dd:03:5a:02:80:e0:fb:eb:bd:ce:aa:25:
05:b2:77:68:ad:2f:e4:cf:7b:34:7a:d8:c4:7f:26:
7c:e2:84:97:59:66:9a:47:ac:6e:bd:26:d7:1f:c8:
c9:8a:7e:3b:95:98:9e:f3:0d:85:87:eb:1b:14:cc:
79:5d:94:71:5e:b9:cb:18:85:94:d3:9c:92:81:b3:
31:25:9c:69:99:f7:53:dc:6e:d5:58:cf:ce:5d:9f:
3b:75:8c:4d:c1:76:4b:76:0e:08:5d:d0:fd:63:de:
5f:f8:ea:4f:54:95:bb:5b:79:36:9c:22:1f:d7:0e:
20:02:cc:40:d7:d4:0c:1b:2c:4d:0a:e1:53:1f:64:
53:f9:7f:5d:9f:aa:f6:29:38:e4:9e:0a:c6:a1:d7:
80:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:51:DC:13:C1:1A:FB:21:87:33:5E:49:BA:69:F2:C6:C9:B0:6E:3B
X509v3 Authority Key Identifier:
keyid:CA:8C:FE:27:D8:22:7A:31:75:8D:EB:C3:C8:CF:B4:9A:68:BD:9C:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoz-J9giejF1jevDyM-0mmi9nBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:20:fb:5c:64:d1:ad:a0:09:b3:ae:10:e3:c2:3b:34:fb:4a:
08:b3:06:b0:49:f1:0b:6e:75:cf:0b:5b:dd:a2:4c:56:5e:a2:
b2:ab:6b:c4:9e:1a:85:fa:e4:4f:fc:b1:10:7b:ce:0e:f5:29:
1f:87:a5:90:9b:21:c7:10:c3:07:6a:9b:7e:b5:fb:71:54:69:
29:53:04:4d:93:41:d1:63:7d:8c:49:9a:f3:60:04:47:c0:ec:
9f:20:72:9d:12:3d:4b:37:0e:dc:f5:0b:25:39:8e:2e:54:a5:
8f:5e:c1:21:ec:d5:c6:19:48:44:60:54:98:cd:25:50:24:0d:
81:c3:5a:1e:6b:80:22:26:1e:3f:42:da:65:a8:99:34:0b:9c:
07:39:e1:9c:66:19:c8:69:d4:8a:5a:71:69:91:f7:60:2c:3a:
3d:ab:1c:ea:a5:8e:85:e0:49:08:d4:37:fa:c4:3b:ba:2c:2c:
fd:7b:1f:c8:b4:a4:7e:01:67:77:36:45:b9:b4:2a:af:a3:00:
47:00:07:be:92:c1:db:1d:6b:50:27:7d:ea:57:46:1a:a5:45:
70:5e:c7:aa:52:22:08:5a:ee:8f:55:9c:70:42:c8:f2:85:14:
f8:ac:cd:ca:5d:31:14:b9:f5:c8:20:f9:2b:ff:ba:1a:e0:6e:
c8:3b:d9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:20:33 2026 by rpki-client