
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
File: ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft (raw, json)
Hash identifier: pPfPhk9xS9qSYbWDxRbT3T+YJRwQ5lJgBm5sPt5TLvY=
Subject key identifier: 0B:FC:FD:B3:F1:07:C5:F0:4B:B9:2E:F4:5D:5B:17:DA:D6:3B:42:86
Authority key identifier: CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8
Certificate issuer: /CN=A9113683/serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8
Certificate serial: 09AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
Manifest number: 0959
Signing time: Tue 24 Mar 2026 19:55:26 +0000
Manifest this update: Tue 24 Mar 2026 19:55:26 +0000
Manifest next update: Tue 31 Mar 2026 19:55:26 +0000
Files and hashes: 1: ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl (hash: ecdpI/utLj+ZALVESIh19qZgOrvemMODsQS8mgGl+os=)
2: A778E94E598911EBA7B14777C4F9AE02.roa (hash: TWcEfNRXvc9I/L+mLfjLnYDQudnu3jM+HVnenyiGba0=)
3: E43CFABEB67611ECACB17C42C4F9AE02.roa (hash: GY2iYwCadMOkOEp6Q9YOpHd/TRcwHxTKhnqA+yyLNAU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl
rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2474 (0x9aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113683, serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8
Validity
Not Before: Mar 24 19:55:26 2026 GMT
Not After : Mar 31 19:55:26 2026 GMT
Subject: CN=69c2ec2e-e8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:1d:00:98:99:f4:c4:d8:93:e9:3d:85:12:
85:b1:e3:f6:fa:9e:86:4d:b5:fd:00:37:08:bb:0e:
d2:98:21:0e:f8:c7:28:f5:9c:23:04:02:98:6a:2d:
39:25:ab:1d:e3:5e:a0:53:22:c8:35:65:01:7c:60:
32:ec:57:ff:e3:00:0b:ca:f1:ba:68:b3:90:d8:70:
34:fd:00:3a:2e:ff:6d:d3:4a:26:59:9a:69:39:d4:
23:8f:35:18:13:70:6d:68:9c:1f:03:40:cc:93:78:
ca:fc:9f:51:43:b9:b5:a9:ff:91:43:67:fc:b3:68:
96:0c:f7:8d:95:fe:90:35:71:24:1e:31:47:c9:29:
94:45:34:0c:9e:7a:78:10:99:7d:d2:3d:2a:78:0f:
fc:2e:f1:87:91:3a:9c:3f:27:0b:c5:2b:17:85:f4:
a5:9c:94:31:3d:ad:d2:71:0c:96:29:2e:25:a9:95:
cc:51:0e:fc:60:b8:69:57:7f:ba:01:63:5c:6b:df:
43:b3:1a:b7:6d:54:be:17:b7:9e:ec:24:37:5c:bc:
55:cf:19:73:94:12:1a:08:44:7f:52:cc:17:df:57:
61:79:2b:d7:6c:ca:69:75:e5:30:c3:69:15:e7:4d:
3b:18:2e:64:40:68:98:23:f0:72:ce:56:57:b1:16:
79:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FC:FD:B3:F1:07:C5:F0:4B:B9:2E:F4:5D:5B:17:DA:D6:3B:42:86
X509v3 Authority Key Identifier:
keyid:CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:42:f5:cf:eb:e7:a7:ca:6c:0e:6b:a8:b8:5e:5a:dd:f0:f0:
f3:f6:ad:6a:3b:c4:06:46:4e:6e:06:c6:b8:62:07:0f:02:7a:
87:f9:f9:2d:11:25:fb:87:77:88:c1:a1:10:7b:66:31:82:b6:
d1:82:40:ae:bd:ed:0e:64:66:c8:bc:28:b5:2f:e6:ec:7a:a7:
a5:f6:65:fd:14:03:43:a7:88:2d:ad:6c:b5:ad:4c:66:57:53:
5f:b5:5d:e8:db:91:f1:e0:18:48:0a:f9:1b:05:d4:08:a7:7b:
08:50:6c:f5:aa:11:59:b4:d1:93:cf:8a:f3:69:51:bb:63:a2:
56:a0:54:ca:83:1b:0d:13:14:e0:ea:6e:73:98:ab:26:5a:49:
1a:68:ed:07:dc:5c:89:f1:fb:aa:58:df:8a:03:ed:fc:cd:57:
2e:5c:4e:ff:34:f4:20:d7:17:5f:02:7c:29:f6:62:a5:23:67:
ad:0c:61:4a:54:5a:07:a4:0c:ca:cd:43:86:c6:bb:ae:08:08:
0b:41:ad:53:0d:03:2d:84:c7:43:73:d8:ea:7d:7d:ae:7e:51:
00:9d:08:3d:07:32:8d:d8:4d:ec:05:fe:e0:69:10:1c:c9:04:
c0:e8:8b:3b:4d:7e:6b:42:27:55:3a:63:99:0d:88:d4:c4:ea:
f5:d3:cc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:44:40 2026 by rpki-client