
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft
File: YbChG9lEvNqGW7mx-_fuBtVzvXE.mft (raw, json)
Hash identifier: ToGCV0Ryfe6pOr8+VyAgQ6dt4e2ytU189tqMnk+PC30=
Subject key identifier: 63:1F:6E:DC:E0:59:38:B4:33:03:BD:C6:2C:6E:75:EA:4B:57:14:E6
Authority key identifier: 61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71
Certificate issuer: /CN=A9127656/serialNumber=61B0A11BD944BCDA865BB9B1FBF7EE06D573BD71
Certificate serial: 0671
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft
Manifest number: 0669
Signing time: Tue 24 Mar 2026 22:18:27 +0000
Manifest this update: Tue 24 Mar 2026 22:18:27 +0000
Manifest next update: Tue 31 Mar 2026 22:18:27 +0000
Files and hashes: 1: YbChG9lEvNqGW7mx-_fuBtVzvXE.crl (hash: 2goF6VB7SHT9/XIMGrVQB1UryIAGGbep7FReT9e/koU=)
2: 6F706208BE0F11EB90239C1AC4F9AE02.roa (hash: nk4Y5wmFLH7mArB236nfG58Dfw5Yir1qR/RW1g0vCy8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.crl
rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1649 (0x671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127656, serialNumber=61B0A11BD944BCDA865BB9B1FBF7EE06D573BD71
Validity
Not Before: Mar 24 22:18:27 2026 GMT
Not After : Mar 31 22:18:27 2026 GMT
Subject: CN=69c30db3-2410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:d3:ed:74:88:20:cd:ef:29:a7:51:a2:f0:
05:53:a5:b2:23:50:57:da:74:c9:3d:97:95:b3:94:
9b:16:ed:61:66:8d:70:89:67:67:c3:64:77:ca:8e:
5b:be:6b:e1:0a:af:02:31:54:ea:4c:ba:c3:41:7a:
4b:fb:a2:b3:13:e4:fc:c9:0b:f1:d6:bc:58:19:7c:
dc:59:8a:70:46:f5:47:7d:a9:a9:ec:b5:eb:84:7c:
47:39:ce:75:ce:78:cc:ad:ae:f5:c0:9e:22:dd:28:
ed:9d:c8:d7:33:d7:76:c8:0e:d2:39:97:43:06:bd:
2a:eb:10:92:15:f7:8d:d3:1d:78:ec:63:3a:ca:f8:
95:73:9c:29:d8:16:dd:46:6b:29:cc:a0:1b:0a:3a:
34:d9:8e:a1:c8:ce:18:18:42:39:1f:51:72:9d:5b:
f1:6f:c6:37:c5:ff:5d:2c:ab:12:02:c4:52:f7:e0:
93:b4:51:24:b8:d3:07:03:37:19:84:94:da:19:b5:
ca:92:28:78:06:05:27:9f:1d:70:9e:5e:8d:f4:63:
ab:01:12:e6:4d:f5:96:30:89:cd:47:31:b9:b9:51:
ce:35:e3:0a:a6:a0:d0:e2:32:c5:8c:e1:a0:af:db:
93:39:97:2b:8b:da:ee:15:2a:3f:d3:b2:fd:3a:78:
98:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1F:6E:DC:E0:59:38:B4:33:03:BD:C6:2C:6E:75:EA:4B:57:14:E6
X509v3 Authority Key Identifier:
keyid:61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:48:61:cb:59:c3:ac:78:f3:9f:dc:18:87:87:ac:11:ed:ed:
12:c3:ce:31:c1:63:b7:d3:70:38:cf:cf:27:e8:46:e6:23:f6:
de:28:ff:e5:a7:a6:c1:26:a2:ac:14:d4:d4:3a:92:7f:5e:b0:
f1:08:78:51:ab:e8:9f:f7:9e:f7:47:3f:b6:10:b7:4a:68:85:
bc:e8:8b:d8:d6:81:e2:7e:06:24:3c:de:98:44:c1:0b:85:8b:
f7:90:a3:ee:7b:82:14:1f:01:1e:05:e4:24:62:bf:8e:13:5d:
01:54:f6:34:9e:a5:a7:e9:7a:ee:3b:c8:b8:0c:16:2e:ea:e3:
13:52:1b:d1:c5:b3:70:ac:5d:a0:2f:12:bd:b2:83:5c:6a:cb:
1e:ad:65:35:73:77:d7:30:ce:9d:a4:16:d0:fe:de:4b:a0:9c:
b3:40:78:3d:5d:ca:c9:88:8f:78:fe:1b:b1:33:fd:af:ef:ab:
ad:ef:a7:ff:b7:d1:de:78:cf:49:74:4c:58:01:de:b3:6f:3f:
3a:11:7d:ee:f2:7f:e2:95:a9:a8:7b:fa:3d:dc:31:dd:72:63:
4f:f7:ef:67:98:1f:96:31:13:a0:01:e4:a8:80:9a:7e:ab:ba:
3d:5a:9a:04:58:76:4b:f5:81:c8:1c:1e:fe:53:22:59:8c:fa:
0b:55:6c:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc2NTYxMTAvBgNVBAUTKDYxQjBBMTFCRDk0NEJDREE4NjVCQjlCMUZCRjdFRTA2
RDU3M0JENzEwHhcNMjYwMzI0MjIxODI3WhcNMjYwMzMxMjIxODI3WjAYMRYwFAYD
VQQDEw02OWMzMGRiMy0yNDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy/bT7XSIIM3vKadRovAFU6WyI1BX2nTJPZeVs5SbFu1hZo1wiWdnw2R3yo5b
vmvhCq8CMVTqTLrDQXpL+6KzE+T8yQvx1rxYGXzcWYpwRvVHfamp7LXrhHxHOc51
znjMra71wJ4i3SjtncjXM9d2yA7SOZdDBr0q6xCSFfeN0x147GM6yviVc5wp2Bbd
RmspzKAbCjo02Y6hyM4YGEI5H1FynVvxb8Y3xf9dLKsSAsRS9+CTtFEkuNMHAzcZ
hJTaGbXKkih4BgUnnx1wnl6N9GOrARLmTfWWMInNRzG5uVHONeMKpqDQ4jLFjOGg
r9uTOZcri9ruFSo/07L9OniY7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGMfbtzg
WTi0MwO9xixudepLVxTmMB8GA1UdIwQYMBaAFGGwoRvZRLzahlu5sfv37gbVc71x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY1Ni84OEU4RTQyRUJF
MEMxMUVCQTNCREFCMThDNEY5QUUwMi9ZYkNoRzlsRXZOcUdXN214LV9mdUJ0Vnp2
WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liQ2hHOWxFdk5xR1c3bXgtX2Z1QnRWenZYRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzY1Ni84OEU4RTQyRUJFMEMxMUVCQTNCREFCMThDNEY5QUUwMi9ZYkNoRzlsRXZO
cUdXN214LV9mdUJ0Vnp2WEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP0hhy1nDrHjzn9wYh4esEe3tEsPOMcFjt9NwOM/PJ+hG5iP23ij/5aemwSai
rBTU1DqSf16w8Qh4Uavon/ee90c/thC3SmiFvOiL2NaB4n4GJDzemETBC4WL95Cj
7nuCFB8BHgXkJGK/jhNdAVT2NJ6lp+l67jvIuAwWLurjE1Ib0cWzcKxdoC8SvbKD
XGrLHq1lNXN31zDOnaQW0P7eS6Ccs0B4PV3KyYiPeP4bsTP9r++rre+n/7fR3njP
SXRMWAHes28/OhF97vJ/4pWpqHv6Pdwx3XJjT/fvZ5gfljEToAHkqICafqu6PVqa
BFh2S/WByBwe/lMiWYz6C1Vs7w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:02:25 2026 by rpki-client