
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192BA7/5B1DA934A83111F181E817AC3511F970/Ym-MpKTsPLmY9uokqOVW-SChkEg.mft
File: Ym-MpKTsPLmY9uokqOVW-SChkEg.mft (raw, json)
Hash identifier: THgk12lzTEBYxbtNYAi28WFL5CmsuOIClmkFudy1QOE=
Subject key identifier: 0C:AB:1B:CC:E9:05:EE:63:85:B6:20:F7:B1:BB:CD:73:B1:A1:16:D4
Authority key identifier: 62:6F:8C:A4:A4:EC:3C:B9:98:F6:EA:24:A8:E5:56:F9:20:A1:90:48
Certificate issuer: /CN=A9192BA7/serialNumber=626F8CA4A4EC3CB998F6EA24A8E556F920A19048
Certificate serial: 15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym-MpKTsPLmY9uokqOVW-SChkEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192BA7/5B1DA934A83111F181E817AC3511F970/Ym-MpKTsPLmY9uokqOVW-SChkEg.mft
Manifest number: 13
Signing time: Sat 03 Oct 2026 09:51:18 +0000
Manifest this update: Sat 03 Oct 2026 09:51:18 +0000
Manifest next update: Sat 10 Oct 2026 09:51:18 +0000
Files and hashes: 1: Ym-MpKTsPLmY9uokqOVW-SChkEg.crl (hash: B69YgmG0qdPHA7Toht9LkMl2a5Jaqvtyra8uqtzFhMk=)
2: E550A654A87411F1A927229E4A11F970.roa (hash: oc/TKsyHzzWMYT3IVnUL38CFiVDo4LqwhQVtEiYOenw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192BA7/5B1DA934A83111F181E817AC3511F970/Ym-MpKTsPLmY9uokqOVW-SChkEg.crl
rsync://rpki.apnic.net/member_repository/A9192BA7/5B1DA934A83111F181E817AC3511F970/Ym-MpKTsPLmY9uokqOVW-SChkEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym-MpKTsPLmY9uokqOVW-SChkEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 09:51:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192BA7, serialNumber=626F8CA4A4EC3CB998F6EA24A8E556F920A19048
Validity
Not Before: Oct 3 09:51:18 2026 GMT
Not After : Oct 10 09:51:18 2026 GMT
Subject: CN=6ac0d016-c10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6a:8f:b2:ec:f6:d9:26:0a:0a:47:39:2c:1a:
20:c9:0d:d4:fe:01:02:5f:12:83:d7:bb:0f:f9:79:
c6:c0:a1:a3:17:90:3b:54:11:1f:c3:3b:78:be:17:
81:9d:f7:4c:1c:d2:7e:9e:cc:33:75:ad:4e:78:70:
81:68:79:82:62:5f:de:a7:ef:7d:3a:1a:3b:2e:f0:
4d:7e:45:f5:b1:1b:1a:ef:f1:9f:a7:cc:83:28:00:
f9:89:47:e9:d0:82:92:93:a8:76:e4:40:87:4b:cc:
9d:15:81:ee:d4:2c:ef:6a:8d:92:0f:85:2a:33:e3:
8d:e7:c6:e2:b0:a4:d7:8a:e1:25:c9:d3:5e:df:4a:
35:8e:2a:6c:22:53:f3:9c:f4:d6:b7:01:e9:c2:30:
a6:05:dc:57:a3:16:a9:11:d8:7d:09:76:8a:6c:14:
6d:4f:00:0e:23:f1:0b:ab:17:4a:bb:9e:ad:f5:3b:
dc:f6:c4:e9:fc:0e:a7:93:34:3d:c9:51:bb:79:8c:
c6:6d:8d:cb:7d:62:b9:41:c8:5b:9d:79:97:56:7c:
2d:0c:70:81:67:3c:bf:00:7b:d4:6f:44:47:5f:01:
0d:fd:98:c3:aa:9b:50:36:d1:77:79:4e:3f:c2:1d:
49:23:fa:a3:f7:fa:37:f8:25:c6:67:37:82:14:e0:
3c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AB:1B:CC:E9:05:EE:63:85:B6:20:F7:B1:BB:CD:73:B1:A1:16:D4
X509v3 Authority Key Identifier:
keyid:62:6F:8C:A4:A4:EC:3C:B9:98:F6:EA:24:A8:E5:56:F9:20:A1:90:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192BA7/5B1DA934A83111F181E817AC3511F970/Ym-MpKTsPLmY9uokqOVW-SChkEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym-MpKTsPLmY9uokqOVW-SChkEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192BA7/5B1DA934A83111F181E817AC3511F970/Ym-MpKTsPLmY9uokqOVW-SChkEg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9c:d1:9c:f2:25:dc:4c:7e:d5:bc:33:22:95:38:ed:7c:36:
3e:c3:c0:43:93:01:96:e5:12:97:8b:0f:b0:64:8e:95:ec:e0:
05:c1:9c:f1:7b:0f:56:64:42:9f:c2:ec:a9:4e:0f:29:9c:c9:
c7:04:d0:bb:42:3e:ab:6d:36:81:c0:38:07:78:0e:66:c3:c8:
55:cd:95:c1:dd:fc:ea:c7:49:f4:50:95:ef:fd:06:12:fa:89:
30:0d:3d:dd:a7:02:0d:5a:35:c6:75:2e:ba:ee:ee:3f:44:5b:
10:59:4c:59:d2:f9:5e:47:64:ca:6b:bf:34:51:87:e8:94:4b:
6e:e9:33:b2:45:c5:f4:a8:0a:83:a4:78:5e:a5:d0:d9:40:50:
aa:2e:8c:66:8c:87:d3:17:83:ea:87:9f:fb:b1:32:c9:13:c7:
b3:82:00:0d:df:68:5d:3c:ce:7f:6b:b4:1c:1a:aa:3c:6c:15:
bb:76:c3:82:f4:f9:87:32:c8:75:4e:c0:aa:08:b1:ec:25:f8:
82:34:1f:77:18:ca:62:eb:42:f0:42:13:c9:d7:8f:fb:bd:77:
b8:d3:96:12:e6:14:be:a5:2b:88:d1:56:e9:89:40:e9:73:b8:
42:a7:04:ed:1e:bb:dd:f7:2f:ff:e6:09:ac:42:3d:c0:22:ea:
40:8a:f7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:49:07 2026 by rpki-client