
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft
File: yW0SR_XLoniur1KTUbX4HKVxcKM.mft (raw, json)
Hash identifier: WtseosYSDUTqYYBBgTxmle3vUGnde2NQ6/dA1JZHcRg=
Subject key identifier: F9:42:4A:25:7C:BF:A0:3D:3A:A5:65:04:FE:E7:92:04:AC:C9:FA:A2
Authority key identifier: C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3
Certificate issuer: /CN=A9190E6C/serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3
Certificate serial: 0E52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft
Manifest number: 0E43
Signing time: Fri 02 Oct 2026 17:59:09 +0000
Manifest this update: Fri 02 Oct 2026 17:59:09 +0000
Manifest next update: Fri 09 Oct 2026 17:59:09 +0000
Files and hashes: 1: yW0SR_XLoniur1KTUbX4HKVxcKM.crl (hash: /I+sen5APrWq2KKQyRGNKOTLzeyH90tr2KsoHcv1F/4=)
2: 07C8CFD0E18F11EF82714B13C4F9AE02.roa (hash: Hz+NLkk81DlhQAOuS1uMRNHs8Ue2ka70A9UL7rm5PxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl
rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 17:59:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3666 (0xe52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190E6C, serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3
Validity
Not Before: Oct 2 17:59:09 2026 GMT
Not After : Oct 9 17:59:09 2026 GMT
Subject: CN=6abff0ed-fb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:5a:98:c5:7d:11:be:3e:02:7c:c1:eb:a8:
ac:84:90:bc:02:38:07:a5:de:31:4e:25:00:f8:71:
68:d5:3e:72:02:e8:9f:d7:c7:0d:3a:ee:a0:ee:e5:
12:31:ac:0d:57:a5:73:72:16:94:ea:52:b9:bc:2d:
46:3e:e1:06:71:f5:59:38:07:cf:ea:2f:60:21:75:
1a:0b:bb:55:75:a3:02:8e:2e:ae:46:b8:de:a9:c9:
16:f3:9a:30:7c:34:b2:45:6d:73:a6:90:ce:9f:8c:
7f:f5:e5:a5:a6:37:77:e5:93:cc:9d:4e:e9:08:b2:
a9:fe:38:3f:77:18:41:8f:d1:d1:ff:c6:da:a3:84:
2a:19:c8:f5:a9:30:77:e7:07:84:8d:25:a0:0a:88:
53:bd:65:6b:b8:28:76:a2:ce:1b:79:e9:05:0f:8a:
7d:74:f7:ab:59:2e:d4:8b:13:ef:a2:74:71:7f:10:
e2:11:39:c5:2c:df:9c:13:77:85:6f:9b:b8:38:3d:
0b:b3:6b:ce:b5:6c:9b:49:e5:72:64:69:bb:29:cb:
9c:c8:10:96:c7:28:d9:34:93:bd:d8:b7:51:68:52:
d0:a6:4f:06:e0:eb:bb:c7:ed:43:03:53:8c:32:92:
81:fe:5c:0b:0d:79:2f:f7:51:4f:fc:f9:53:17:f4:
09:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:42:4A:25:7C:BF:A0:3D:3A:A5:65:04:FE:E7:92:04:AC:C9:FA:A2
X509v3 Authority Key Identifier:
keyid:C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f6:19:93:f4:8b:dd:97:c6:5c:58:ef:74:3d:7d:0a:78:be:
1d:a6:fd:80:b1:7a:94:15:d7:81:3c:05:dd:a7:97:11:b5:f0:
63:5a:3c:20:4c:a1:c4:de:22:0e:cd:3c:a7:f7:2e:f5:6e:37:
84:31:73:40:68:16:aa:49:31:ec:70:50:38:d7:bb:96:f4:94:
d2:6a:c6:e2:d3:9d:d2:66:3b:49:37:8a:78:10:96:15:0a:ae:
22:5a:a0:aa:c0:0e:2f:16:ec:a5:4a:e7:f3:97:c3:a9:26:8a:
bb:d0:e7:06:70:01:3b:06:42:23:75:a2:3d:cb:b0:ad:7e:d9:
6a:3a:21:a5:b5:71:c4:9e:38:0f:3d:c2:ab:dc:38:12:af:40:
6f:f3:43:7e:58:00:f0:a3:f3:da:b1:6c:af:eb:40:e5:27:b0:
20:43:2c:ab:ef:5f:5f:f9:82:53:0f:f9:45:06:3e:d9:ca:e9:
4e:98:ff:12:e0:52:6d:51:ec:ab:70:94:10:38:f1:b5:70:f2:
66:7f:c4:d6:85:ff:6e:6a:23:6d:84:c9:1d:33:ca:ab:5c:10:
25:76:6f:31:64:6a:42:92:04:e6:1a:d2:3e:09:1b:62:d2:ee:
32:ef:50:61:84:6c:71:84:04:fa:16:49:52:18:18:48:77:01:
fc:8c:84:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:19:15 2026 by rpki-client