
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft
File: y1LRcue7pSl4xAN0AnpNpseRZ9g.mft (raw, json)
Hash identifier: CI4w644YbxUMFEbHTi/7zjZ9Zeepbsb0OGTg/3mDbPo=
Subject key identifier: AF:F2:FF:AD:88:4E:4F:8F:F2:FA:0C:AF:F2:FF:1A:4A:8D:00:30:78
Authority key identifier: CB:52:D1:72:E7:BB:A5:29:78:C4:03:74:02:7A:4D:A6:C7:91:67:D8
Certificate issuer: /CN=A9199606/serialNumber=CB52D172E7BBA52978C40374027A4DA6C79167D8
Certificate serial: 75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1LRcue7pSl4xAN0AnpNpseRZ9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft
Manifest number: 75
Signing time: Wed 19 Aug 2026 08:30:44 +0000
Manifest this update: Wed 19 Aug 2026 08:30:43 +0000
Manifest next update: Wed 26 Aug 2026 08:30:43 +0000
Files and hashes: 1: y1LRcue7pSl4xAN0AnpNpseRZ9g.crl (hash: /2tOvIKVpKjXXvTbrH4UChIDWNhYTbOTlNrsVBaz4kc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.crl
rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1LRcue7pSl4xAN0AnpNpseRZ9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199606, serialNumber=CB52D172E7BBA52978C40374027A4DA6C79167D8
Validity
Not Before: Aug 19 08:30:43 2026 GMT
Not After : Aug 26 08:30:43 2026 GMT
Subject: CN=6a8569b4-68cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:d1:04:a6:a0:61:3c:cf:56:61:a3:84:c8:
91:78:5c:6d:70:ff:17:ce:10:a7:4c:1f:c6:c6:a0:
e4:6f:94:c9:e2:52:08:0a:5b:89:db:b5:84:18:7d:
96:34:98:c9:cf:a9:d5:c8:89:a4:84:6e:46:33:c3:
97:9f:f1:5b:b1:b5:bc:1e:c8:62:e7:1f:31:9d:91:
e4:5f:0f:8a:f3:09:01:9b:31:b5:fb:9e:3d:c1:95:
a9:33:62:dd:9c:e0:49:b2:da:5a:76:f5:97:29:36:
76:25:36:b6:bb:10:78:2c:51:ad:57:fc:ed:05:80:
e8:7d:0e:d7:2d:51:b1:04:83:34:85:6d:5e:9b:5c:
29:49:00:8d:79:5f:a7:82:bc:cd:d5:77:db:26:50:
f8:47:2a:6b:22:53:30:17:81:55:3d:00:d1:65:35:
75:6c:a4:a0:5f:e8:db:5d:79:21:07:38:e3:0b:b0:
49:bd:e0:bd:73:dc:71:63:a3:b0:4b:8a:a9:1a:8d:
15:ee:7a:46:ab:80:b7:76:1b:44:7a:09:1a:ab:cf:
22:dc:38:dc:c7:51:35:2e:27:b5:f0:67:7b:8d:70:
60:77:52:89:28:3d:e7:db:b5:16:f4:23:ba:3c:54:
5d:11:86:90:9e:d6:fc:44:b3:7a:9a:33:2e:0f:cc:
6f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F2:FF:AD:88:4E:4F:8F:F2:FA:0C:AF:F2:FF:1A:4A:8D:00:30:78
X509v3 Authority Key Identifier:
keyid:CB:52:D1:72:E7:BB:A5:29:78:C4:03:74:02:7A:4D:A6:C7:91:67:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1LRcue7pSl4xAN0AnpNpseRZ9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:cf:bd:cb:3c:d3:af:94:ee:50:90:46:4d:9f:47:de:da:ce:
ec:40:9f:fe:f1:b8:70:c2:c6:44:ad:ec:03:fc:55:6e:c5:c3:
9a:8f:8e:c9:b4:9c:37:bc:1f:8d:51:9b:0f:59:e7:9d:7e:67:
f3:2b:97:a4:ae:46:a0:a0:59:dd:f2:1a:00:8d:01:02:0d:d1:
ef:9b:f8:26:ad:7d:b5:0d:82:7b:49:62:46:5e:79:d5:91:e0:
a4:ce:0c:65:fb:bc:24:aa:c5:6d:9a:00:01:0a:47:6e:ac:2c:
98:7d:46:ce:2e:70:81:33:05:ba:84:43:f1:45:73:9b:23:70:
2b:29:1f:bb:e5:de:d1:8b:53:ab:56:51:1a:d2:38:99:2b:5f:
6d:33:ec:03:92:fc:f2:28:d3:b1:fb:6b:3f:86:07:8c:e9:b8:
aa:f2:b1:14:80:04:50:de:85:52:d7:2e:ab:d2:b9:e4:ba:6f:
95:ab:03:ab:7b:4a:d5:54:ce:4e:bb:02:db:2c:f1:1b:d2:64:
f0:2c:65:9e:99:2d:6b:75:1a:0f:5f:0f:f5:31:89:5f:59:db:
2b:e6:59:85:3e:a4:7d:46:93:18:ab:e8:87:4f:dc:52:da:20:
47:ad:64:88:c3:f2:1f:64:51:b8:36:d4:c1:29:73:31:1b:ad:
51:f4:a7:d6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
OTYwNjExMC8GA1UEBRMoQ0I1MkQxNzJFN0JCQTUyOTc4QzQwMzc0MDI3QTREQTZD
NzkxNjdEODAeFw0yNjA4MTkwODMwNDNaFw0yNjA4MjYwODMwNDNaMBgxFjAUBgNV
BAMTDTZhODU2OWI0LTY4Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCli9EEpqBhPM9WYaOEyJF4XG1w/xfOEKdMH8bGoORvlMniUggKW4nbtYQYfZY0
mMnPqdXIiaSEbkYzw5ef8VuxtbweyGLnHzGdkeRfD4rzCQGbMbX7nj3BlakzYt2c
4Emy2lp29ZcpNnYlNra7EHgsUa1X/O0FgOh9DtctUbEEgzSFbV6bXClJAI15X6eC
vM3Vd9smUPhHKmsiUzAXgVU9ANFlNXVspKBf6NtdeSEHOOMLsEm94L1z3HFjo7BL
iqkajRXuekargLd2G0R6CRqrzyLcONzHUTUuJ7XwZ3uNcGB3UokoPefbtRb0I7o8
VF0RhpCe1vxEs3qaMy4PzG95AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUr/L/rYhO
T4/y+gyv8v8aSo0AMHgwHwYDVR0jBBgwFoAUy1LRcue7pSl4xAN0AnpNpseRZ9gw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5NjA2LzAwMTdFRDk4RUJC
MTExRjA4OTIxNkU3QzYwNkY1NkJDL3kxTFJjdWU3cFNsNHhBTjBBbnBOcHNlUlo5
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveTFMUmN1ZTdwU2w0eEFOMEFucE5wc2VSWjlnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5
NjA2LzAwMTdFRDk4RUJCMTExRjA4OTIxNkU3QzYwNkY1NkJDL3kxTFJjdWU3cFNs
NHhBTjBBbnBOcHNlUlo5Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDPz73LPNOvlO5QkEZNn0fe2s7sQJ/+8bhwwsZErewD/FVuxcOaj47JtJw3vB+N
UZsPWeedfmfzK5ekrkagoFnd8hoAjQECDdHvm/gmrX21DYJ7SWJGXnnVkeCkzgxl
+7wkqsVtmgABCkdurCyYfUbOLnCBMwW6hEPxRXObI3ArKR+75d7Ri1OrVlEa0jiZ
K19tM+wDkvzyKNOx+2s/hgeM6biq8rEUgARQ3oVS1y6r0rnkum+VqwOre0rVVM5O
uwLbLPEb0mTwLGWemS1rdRoPXw/1MYlfWdsr5lmFPqR9RpMYq+iHT9xS2iBHrWSI
w/IfZFG4NtTBKXMxG61R9KfW
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:19 2026 by rpki-client