
$ rpki-client -vvf rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft
File: YptQlj68agIuJ67LYTQg5A5020o.mft (raw, json)
Hash identifier: NGWIXL5KHRGm8pS/v7jJVUayIrklJ1TmAIzvpaGMTVA=
Subject key identifier: BD:01:75:66:02:03:F1:A4:3C:7F:B3:BC:B2:5D:11:57:30:45:56:41
Authority key identifier: 62:9B:50:96:3E:BC:6A:02:2E:27:AE:CB:61:34:20:E4:0E:74:DB:4A
Certificate issuer: /CN=A911392E/serialNumber=629B50963EBC6A022E27AECB613420E40E74DB4A
Certificate serial: 013E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft
Manifest number: 0138
Signing time: Wed 25 Mar 2026 04:39:13 +0000
Manifest this update: Wed 25 Mar 2026 04:39:13 +0000
Manifest next update: Wed 01 Apr 2026 04:39:13 +0000
Files and hashes: 1: YptQlj68agIuJ67LYTQg5A5020o.crl (hash: a591uv+aSNiN+UN16RYFQz9ki/O4xxim1vYFbmFSe2g=)
2: 8E9B074050E311EF8624AC36C4F9AE02.roa (hash: DNo6LAjYKJT9hMbFIUnOrjoJbdOcs5kpnOeIkHugpwQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.crl
rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:39:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318 (0x13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911392E, serialNumber=629B50963EBC6A022E27AECB613420E40E74DB4A
Validity
Not Before: Mar 25 04:39:13 2026 GMT
Not After : Apr 1 04:39:13 2026 GMT
Subject: CN=69c366f1-c717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:73:43:45:e9:ca:5f:ef:62:8f:e5:87:01:31:
28:7b:c6:7f:6e:af:7f:ed:ff:88:fe:30:87:37:3c:
68:94:4a:35:79:05:b6:26:bc:f3:af:58:dd:c7:b5:
18:b5:22:dd:f8:f8:d4:04:08:af:7e:c9:87:37:eb:
39:43:43:1d:ce:0b:1e:a7:4b:c3:97:24:91:1b:f5:
7d:99:2d:a8:07:74:9f:00:79:aa:4c:04:d3:e1:1a:
d7:6f:6b:df:e9:cd:e6:3c:0e:01:c8:46:79:a7:48:
64:a1:c4:e6:67:2b:22:eb:be:c6:f2:d5:df:6e:3d:
bb:de:97:73:da:db:68:db:51:40:4b:0e:62:af:60:
84:ea:b6:5e:94:0f:0b:c8:b3:59:b5:6d:32:d8:66:
d6:6b:6b:a1:73:32:f5:39:c9:d5:ba:7f:c8:98:4f:
bc:73:27:d5:c3:45:7d:99:b9:62:5f:eb:40:20:aa:
1a:22:ee:40:76:d9:53:04:0a:4e:d5:60:79:b4:77:
af:f3:27:4c:69:3f:a8:94:8b:ad:26:e1:4f:8a:e9:
b5:ca:24:66:59:fa:2d:4f:f3:ab:cc:6a:ad:0a:ba:
1b:c0:0c:fd:d3:3f:75:6e:9b:43:48:52:49:ec:a7:
3a:60:ec:53:2c:f1:16:ff:22:53:32:b7:2f:40:d4:
4c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:01:75:66:02:03:F1:A4:3C:7F:B3:BC:B2:5D:11:57:30:45:56:41
X509v3 Authority Key Identifier:
keyid:62:9B:50:96:3E:BC:6A:02:2E:27:AE:CB:61:34:20:E4:0E:74:DB:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b2:9c:f5:f4:e8:e1:b4:9f:cb:48:09:a9:a0:72:65:e3:c3:
4e:c3:bb:9e:64:02:0c:6c:ee:c7:e7:8b:c1:d0:d2:93:08:c0:
45:75:62:fd:07:b8:87:0d:b6:16:27:4c:8f:7b:cc:4d:ca:c1:
84:83:d4:f6:7e:55:fa:cd:69:1f:4b:05:7f:94:9a:c6:1e:7f:
96:48:57:01:6a:3b:53:19:50:1a:89:9f:1e:94:86:96:03:d1:
1e:92:b9:a1:9b:74:d7:9b:ec:5e:e0:5f:8f:24:9b:4d:0b:00:
2e:01:4f:51:fa:9a:19:a1:b0:bf:fb:81:b4:b3:fc:08:63:68:
fc:ed:54:9f:ba:71:b8:77:29:51:23:34:cf:90:dd:3a:52:aa:
92:02:7e:01:53:1f:f7:74:85:1b:c3:c5:4f:77:91:47:2f:68:
92:ab:21:f5:8d:22:07:68:be:6c:cb:73:64:32:71:b8:e6:e1:
d9:2d:a7:f5:a5:49:52:e1:bd:d3:0b:e5:ea:ef:c4:b5:00:e5:
d3:3c:99:bb:05:18:31:69:74:e0:39:63:12:43:21:75:b9:38:
d6:58:38:55:41:7a:74:f2:4d:c0:9a:b3:45:73:6b:78:e7:f2:
80:c9:89:67:62:e6:16:13:d9:f3:4d:e2:9f:92:30:d7:0c:5f:
ca:ce:05:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:54:18 2026 by rpki-client