
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
File: yuLPsaeXStawJFrjTksNztggmGc.mft (raw, json)
Hash identifier: 6vZs8nLSwEH0EDSr6bI4W/Fh3y4OdOJbV+n0bE1Y1is=
Subject key identifier: DF:0B:E2:97:AE:26:8F:BD:51:46:2A:C9:F7:03:B4:62:7C:E6:3A:3E
Authority key identifier: CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67
Certificate issuer: /CN=A9120968/serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867
Certificate serial: 3524
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
Manifest number: 3524
Signing time: Tue 24 Mar 2026 14:55:03 +0000
Manifest this update: Tue 24 Mar 2026 14:55:02 +0000
Manifest next update: Tue 31 Mar 2026 14:55:02 +0000
Files and hashes: 1: yuLPsaeXStawJFrjTksNztggmGc.crl (hash: rLtvkOQi1ZO1U+DHdOWYv4m0KhmIn5cTPtGj9o/tf/4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl
rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:55:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13604 (0x3524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120968, serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867
Validity
Not Before: Mar 24 14:55:02 2026 GMT
Not After : Mar 31 14:55:02 2026 GMT
Subject: CN=69c2a5c7-8b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:9d:d0:32:51:34:f4:b4:d8:d1:ec:b8:66:
98:0e:a4:5c:1b:4d:8d:57:35:ee:1b:f8:12:c5:01:
c3:85:bc:ac:4b:db:d5:7e:76:36:4c:1c:a4:c2:64:
ec:b8:84:55:fb:c6:da:28:50:54:35:ba:b1:87:65:
81:20:e1:b2:0f:a3:30:83:f9:37:4d:df:43:ae:f0:
a7:9c:71:d3:db:34:f6:03:dc:e6:8e:4f:12:04:eb:
0d:8e:09:53:eb:e5:2e:03:3e:c8:f1:67:5f:d6:a9:
94:58:95:79:23:29:0a:c7:c0:e3:66:1d:0a:d4:50:
e7:bf:29:e3:a6:26:37:68:6a:30:c7:a8:98:60:17:
8e:bc:10:b6:f9:6e:0c:ae:a3:ff:e1:cc:51:4f:90:
88:0a:b4:41:27:06:ca:6d:8e:72:9f:fd:ee:27:88:
23:2c:1a:5c:f6:ec:e0:e4:12:53:91:ce:5d:2f:92:
b7:e3:0d:74:94:b0:7c:05:2b:4a:e6:f2:9a:e7:b6:
77:3e:6b:bc:af:ed:85:a6:85:48:c2:42:0d:44:5a:
da:d9:6d:32:88:d1:cd:3c:66:e7:ba:c0:3c:aa:7d:
15:37:43:23:5f:7b:5b:c4:5e:4a:96:c2:91:06:56:
c4:3f:be:69:a5:50:5f:7e:fe:26:05:b3:36:6d:06:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0B:E2:97:AE:26:8F:BD:51:46:2A:C9:F7:03:B4:62:7C:E6:3A:3E
X509v3 Authority Key Identifier:
keyid:CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:b5:b5:91:0f:eb:cc:87:34:d1:05:1c:20:e8:03:37:74:b5:
9e:04:8e:23:94:92:68:db:4f:4b:6e:c9:ff:9e:2c:81:40:a3:
d8:08:03:15:8d:ad:44:0b:1f:e4:92:c1:bd:c4:a7:2c:88:68:
32:f8:d9:62:1a:86:24:7c:35:c5:66:4e:72:a9:85:13:6c:8a:
87:74:08:08:f9:e2:8b:40:32:56:32:5d:4a:90:9e:7a:27:29:
05:87:45:1e:91:3f:ab:2c:8d:4e:a6:3d:53:7b:15:7e:d5:03:
47:e9:f4:13:3d:36:80:09:14:9d:3f:15:70:1b:1f:a0:c1:4a:
80:cb:61:16:0c:0c:13:ec:a5:a6:1f:80:07:77:e8:74:07:7a:
6d:56:be:9c:42:59:18:07:7c:b8:3b:04:56:f5:a3:f2:4a:c1:
4e:89:22:2f:41:c4:a4:d6:d3:0f:e8:d7:8d:c3:db:92:54:77:
67:ee:a8:1b:dd:a4:bb:bd:d0:b3:11:4f:95:43:28:e3:8a:0d:
c0:08:26:11:64:0b:ff:0d:f7:3c:b4:ad:91:55:e4:c9:89:ee:
58:a6:55:8f:08:e9:29:56:68:fa:30:43:56:71:bc:a3:3a:c8:
40:66:6e:2b:40:74:49:12:c1:c9:4f:3e:92:b8:8d:c5:b4:5f:
f6:81:24:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:16 2026 by rpki-client