
$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft
File: yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft (raw, json)
Hash identifier: 6sxHxqqbdNTDTGL5mcY2x5hlIp4l2tbzfaPfG9cFc5M=
Subject key identifier: E5:94:3B:80:04:0C:34:3B:2B:44:E4:2B:30:A7:24:F2:73:08:8D:FB
Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47
Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
Certificate serial: 0812
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft
Manifest number: 07FC
Signing time: Tue 24 Mar 2026 20:59:17 +0000
Manifest this update: Tue 24 Mar 2026 20:59:16 +0000
Manifest next update: Tue 31 Mar 2026 20:59:16 +0000
Files and hashes: 1: yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl (hash: T+4KmAQHbEcXvFxw2pFOXTf9/kyDf4b7urePNbtDRCs=)
2: 5C95BDC0C12E11EEA47CBB59C4F9AE02.roa (hash: O0xpewKz8Q7J1ZZQXG0b/KCwkQGEq6Jb5YHKjy66mLk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl
rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:59:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2066 (0x812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912438F, serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
Validity
Not Before: Mar 24 20:59:16 2026 GMT
Not After : Mar 31 20:59:16 2026 GMT
Subject: CN=69c2fb25-b2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1c:91:68:45:49:b3:05:1a:35:c7:54:82:98:
80:db:9a:6c:ad:af:72:65:c2:ae:4f:41:7c:d0:6e:
c0:89:c7:7c:c2:ae:32:b3:94:0f:84:c5:76:07:dd:
02:1a:2d:0a:38:2d:ea:3e:72:1b:18:f2:b8:45:47:
95:af:43:89:33:71:77:c3:84:06:57:dc:e7:6d:4e:
30:30:ab:8a:a2:68:d1:56:eb:fc:33:7c:84:43:bd:
28:88:9e:65:30:d9:8c:1f:72:78:5f:d1:cd:ec:41:
f1:cc:da:d6:c6:6e:58:60:8d:61:2a:7a:d2:25:e0:
c5:d1:63:27:5c:dc:59:a6:16:5b:df:73:78:dc:f9:
d8:38:8e:77:43:a6:3a:34:54:9a:c6:5b:71:8b:d5:
df:f4:a9:92:fb:2a:47:6b:34:d2:81:3c:c5:91:d9:
b8:19:9e:fa:4a:a9:ec:18:cf:ea:2f:19:a3:8c:0c:
76:bb:04:ee:a8:a3:68:ff:2e:98:31:fe:bb:fd:5f:
f6:54:69:c5:f2:a3:07:d9:eb:f1:75:cc:cc:16:fa:
b6:fc:fa:10:52:87:ea:e8:18:c5:ba:41:38:c6:2b:
64:07:88:31:26:74:a0:1f:d1:1d:1d:a8:d7:a3:ed:
d8:2a:72:e5:00:0d:09:39:c7:b6:d3:63:ae:5b:4e:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:94:3B:80:04:0C:34:3B:2B:44:E4:2B:30:A7:24:F2:73:08:8D:FB
X509v3 Authority Key Identifier:
keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2c:a6:b5:44:c9:1e:79:3e:fd:c6:20:e5:84:75:a0:fa:74:
2a:bb:8c:ab:c4:cb:8e:54:14:18:f0:52:0d:96:de:97:4c:9c:
49:87:91:d2:94:84:65:74:d2:94:6f:c5:f8:2e:fa:16:4e:c2:
12:b3:ee:a1:0c:16:9e:7e:c1:78:b8:59:5d:e7:29:7e:42:5d:
a4:ca:9f:a4:f9:0a:cb:95:4c:f9:0c:15:ca:c4:4c:47:ec:cb:
6f:58:9a:35:d6:7b:87:13:c6:10:c9:4b:ea:41:1c:54:b3:31:
b3:41:8d:5c:ab:39:f2:e0:2a:7c:4b:82:62:43:a9:e8:1a:30:
96:cf:6b:39:b6:ad:00:bd:ca:6b:1b:3b:66:ad:ba:0b:24:c4:
d7:c5:7c:f1:24:c8:e1:ca:0e:1a:6b:cd:54:8d:b3:ea:d1:92:
6e:1f:9d:ad:06:6b:01:f8:3c:7c:54:f0:d1:86:38:57:f4:be:
a3:da:e1:43:24:6e:2c:13:b7:03:26:0c:09:b1:9f:27:f9:08:
df:0f:bb:dc:4e:12:40:f7:fd:e3:46:f1:3f:21:8c:7b:1e:95:
8d:51:2c:e5:37:a1:40:3f:f9:7a:76:39:02:a4:7c:75:67:89:
5a:81:32:63:c4:21:5e:c1:6a:20:0b:2d:0f:f8:0f:dd:09:31:
cc:95:b0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:09:30 2026 by rpki-client