
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
File: yLK8O4qx665KdD-Q2Mih39HUzhc.mft (raw, json)
Hash identifier: vEsaaSvVwtfaMhM+PLWRBrAnm59+XSkZSQFwfTIYAog=
Subject key identifier: A6:15:56:53:11:2E:E2:4A:F1:77:CC:B9:A2:C7:A3:DF:FB:E4:D4:D5
Authority key identifier: C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17
Certificate issuer: /CN=A9113493/serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17
Certificate serial: C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
Manifest number: B0
Signing time: Wed 25 Mar 2026 06:22:22 +0000
Manifest this update: Wed 25 Mar 2026 06:22:22 +0000
Manifest next update: Wed 01 Apr 2026 06:22:22 +0000
Files and hashes: 1: yLK8O4qx665KdD-Q2Mih39HUzhc.crl (hash: 68dcTC2X6p551G/0rQzla2Pxmpe+m+ifsPVoCivjoVg=)
2: 758E8E941EFA11F0A6533A31C4F9AE02.roa (hash: 3KZYWiJqZH8n9U/9eCnSUD7SavXQ/Ekzxh7yjVvlx04=)
3: 8C19B3A21EFD11F0B822DF56C4F9AE02.roa (hash: TSbzXgPkumBg0cDwPI2XndJNJ0jn2eg2lDv16RkcG74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl
rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:22:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113493, serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17
Validity
Not Before: Mar 25 06:22:22 2026 GMT
Not After : Apr 1 06:22:22 2026 GMT
Subject: CN=69c37f1e-d14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:00:6e:f6:06:d2:b5:e8:72:14:41:bd:59:bf:
bd:7c:42:94:9b:a2:e3:a0:fa:46:d4:5a:6c:95:b5:
86:d5:68:a6:85:8e:40:1a:22:9c:4b:11:b1:b1:a8:
ac:4b:e1:5f:85:09:28:26:5d:74:7c:bc:ba:d9:2a:
f2:58:e0:d9:bf:66:68:62:ee:85:cb:dc:3f:1f:ad:
77:ee:6e:c3:bd:e9:9c:f5:a1:9a:a1:6e:7f:27:43:
32:05:f8:df:e2:af:87:ba:4a:9c:3a:95:eb:ca:3a:
0c:7d:07:ec:18:ab:41:71:bc:ea:86:71:8e:b0:71:
46:8f:50:5e:05:33:79:1a:d6:47:44:1d:1b:9e:df:
3b:e8:16:6f:26:34:7e:a2:6c:4e:04:e0:3a:05:c4:
67:c0:bd:b1:62:d9:77:48:24:ce:04:f1:0f:ec:b7:
6b:64:7e:36:47:e9:c3:32:56:7f:26:61:17:38:5a:
31:2f:bd:d4:7c:2d:5f:ee:df:e0:4f:77:91:f6:84:
88:cb:22:2a:3a:c9:e5:a6:46:2b:4e:bb:03:e2:8d:
fa:c7:79:1e:ed:6f:8d:fc:8e:cc:ca:f3:a1:fe:84:
8f:97:83:1f:3f:4c:57:1e:6f:bb:55:5f:76:9f:20:
78:b5:28:63:fc:a6:81:1d:42:6f:d7:79:3d:aa:df:
9b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:15:56:53:11:2E:E2:4A:F1:77:CC:B9:A2:C7:A3:DF:FB:E4:D4:D5
X509v3 Authority Key Identifier:
keyid:C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:77:fa:60:a0:62:b4:0f:be:b4:20:e4:87:04:25:e6:e7:e6:
64:d8:e3:63:92:60:cd:30:4f:d5:60:76:72:35:24:75:46:1b:
5b:3f:d8:66:1b:68:e4:c9:0f:63:b5:e4:ae:f3:1a:17:c4:5d:
4b:bb:94:55:cc:c9:5f:c0:40:49:5a:42:36:18:9f:ee:b6:c4:
aa:2d:47:b0:26:7b:b6:2c:05:24:47:b5:64:78:c8:7c:a8:95:
2f:ad:61:43:da:89:c3:fe:1a:91:9b:72:6d:37:24:ce:6d:f8:
3a:1f:b8:f7:20:ea:d0:12:90:3f:a4:a2:16:71:b2:eb:3b:24:
e3:69:3a:16:56:cc:f7:d4:a2:ca:f7:7d:50:96:34:eb:03:c2:
bd:52:d7:40:4b:98:22:64:cd:f5:e0:fc:98:2d:fd:36:a0:da:
35:b9:97:a8:b5:8e:df:ab:71:b5:9a:2f:b7:75:be:0a:69:d8:
e3:fb:15:a0:ea:db:14:1b:95:b7:6f:de:89:14:fe:73:a6:0c:
2e:f0:a3:ce:97:fb:69:91:0c:2c:2e:73:29:02:2f:68:30:35:
2f:5d:2c:3d:e7:77:85:a8:7e:aa:e2:dc:b9:5c:85:18:10:13:
90:fa:de:d2:97:ab:c0:f4:da:e5:05:54:92:1e:ac:2b:a0:60:
da:b8:2a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:11 2026 by rpki-client