
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
File: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft (raw, json)
Hash identifier: Gleou6f+4tKoZt7L3bB4d1zTOpSJm6BxPbk+PshJ21A=
Subject key identifier: 89:F6:2D:E7:43:13:7B:CD:5A:BC:33:4D:3B:EE:D0:89:F6:49:D1:E8
Authority key identifier: C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82
Certificate issuer: /CN=A912B2EE/serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82
Certificate serial: 1015
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
Manifest number: 0FFF
Signing time: Tue 24 Mar 2026 17:21:03 +0000
Manifest this update: Tue 24 Mar 2026 17:21:03 +0000
Manifest next update: Tue 31 Mar 2026 17:21:03 +0000
Files and hashes: 1: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl (hash: BrGfce96wSoECUqzN4koA494Wsp6mVGhUnksYv83xFI=)
2: 05449490E17B11EC93AB7473C4F9AE02.roa (hash: b4RHmMbFBRWJFcnsmHpleiRHLLRNwyJ8lJiARBOoS8k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl
rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4117 (0x1015)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B2EE, serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82
Validity
Not Before: Mar 24 17:21:03 2026 GMT
Not After : Mar 31 17:21:03 2026 GMT
Subject: CN=69c2c7ff-75d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:04:15:75:9f:5b:40:7d:dd:e9:91:9c:06:
7d:d6:01:61:60:2d:1c:93:10:1f:4a:e5:87:ab:56:
7a:4b:08:7a:b0:9b:6c:4f:10:a6:bd:d7:20:fd:57:
6c:e0:1c:27:71:94:ae:e4:9a:9b:99:48:90:04:93:
bb:44:07:30:6e:a1:fe:21:2c:ec:43:5d:ad:df:5f:
e0:39:86:eb:18:43:95:2a:49:cb:17:b3:81:64:e5:
ca:67:44:01:93:84:0f:10:15:6e:f2:87:76:0b:7d:
cc:8c:34:6d:62:2a:8a:22:16:33:5c:ba:ac:fe:13:
47:94:f9:20:73:82:d0:08:a6:2a:3f:29:1b:73:ee:
59:bb:db:ff:2a:3b:da:e2:4e:39:8a:d4:cb:fd:04:
eb:85:88:d7:1e:20:98:69:d3:d6:f1:3d:20:1b:39:
0c:27:4f:cd:d0:00:f8:b6:b5:73:7f:bd:08:36:a9:
f0:89:eb:ac:16:88:5d:74:db:ec:5e:e0:b6:f0:4d:
ba:69:12:04:7b:5c:07:47:0e:dd:6e:e6:61:0c:b1:
d4:3e:c6:35:79:4a:95:9f:a9:bb:e2:f9:6e:10:0d:
48:26:b8:0b:b4:a4:86:f3:61:a3:0e:36:65:9d:e8:
19:e1:c6:82:75:9d:35:a6:34:44:a3:a6:34:4d:44:
86:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F6:2D:E7:43:13:7B:CD:5A:BC:33:4D:3B:EE:D0:89:F6:49:D1:E8
X509v3 Authority Key Identifier:
keyid:C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:f1:98:a9:16:da:ce:d0:7b:24:81:58:6c:74:b7:52:2b:b7:
09:c9:d5:83:bc:12:04:6e:7c:d9:3e:e7:40:eb:bc:6b:38:2d:
85:14:aa:80:ab:bc:f3:c0:d3:c1:45:90:ce:9d:62:42:e7:09:
de:1b:23:83:fc:43:bc:06:fb:53:8b:54:86:e0:5c:b2:74:2e:
16:c3:c0:e9:50:21:53:d8:85:0a:ce:91:93:32:da:47:8f:a1:
b7:ae:80:c6:7c:a2:29:f5:99:84:fa:de:83:1d:32:8c:83:96:
d4:2b:43:f5:87:3c:8c:5a:34:eb:85:55:ba:4d:f6:87:00:2c:
05:ef:2f:e2:95:29:25:93:36:c5:15:d0:e8:43:ae:9c:3b:c5:
04:d0:4d:5b:72:5d:74:2e:95:85:0f:5c:04:8e:d8:16:01:f8:
e0:47:fd:f6:b8:49:6e:9b:50:c7:8a:be:7f:e7:f6:72:4c:63:
5a:8f:28:b6:42:18:47:e3:eb:9f:8d:fc:07:bf:0a:07:bf:d0:
f8:de:c0:89:87:ee:a3:57:01:51:38:ce:62:33:39:fb:b3:25:
f1:98:fa:95:6b:06:a3:be:6b:b9:1e:f4:27:13:ee:20:bc:e2:
ab:23:2c:bc:3c:0d:7e:c0:34:fc:f7:ee:54:d9:85:6a:5b:cf:
b8:5f:97:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:26 2026 by rpki-client