
$ rpki-client -vvf rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
File: Yr76HCON-N6XLqX-GAl7ES7wR3s.mft (raw, json)
Hash identifier: NPReJeB6VtCKFoCeXojuw580O8oBD3Kvr3mbCvvegFM=
Subject key identifier: 02:AE:DD:62:8E:A1:4D:3C:5C:CD:9B:6D:69:3A:49:04:9D:AC:21:FE
Authority key identifier: 62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B
Certificate issuer: /CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
Certificate serial: 024A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
Manifest number: 0240
Signing time: Wed 25 Mar 2026 01:51:20 +0000
Manifest this update: Wed 25 Mar 2026 01:51:19 +0000
Manifest next update: Wed 01 Apr 2026 01:51:19 +0000
Files and hashes: 1: Yr76HCON-N6XLqX-GAl7ES7wR3s.crl (hash: EHRiv4BugnfRzHOXtgn4gMba4pNrRWAIwxHhEOG2gjs=)
2: E5817A58B8BE11ED83994B4AC4F9AE02.roa (hash: ZJ1JXD8OMZ1/bFwQ4CUwNfMJD2mA1nTwWCd7m4pPBcY=)
3: E4E7AE6EB8BE11ED83994B4AC4F9AE02.roa (hash: IQ7wQrkp6KFdnuD/CeQ1UB+HAtSyDPflLHSW+K88QUs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl
rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91307F0, serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
Validity
Not Before: Mar 25 01:51:19 2026 GMT
Not After : Apr 1 01:51:19 2026 GMT
Subject: CN=69c33f97-8e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ae:f1:1b:dc:66:98:a6:1a:81:c2:f0:c2:17:
67:0b:75:7e:17:29:5f:ee:22:62:3b:6a:44:6b:33:
72:df:75:57:e4:50:40:2e:32:95:fc:ef:54:c4:08:
74:01:3d:af:d2:c1:19:e8:a0:c1:27:1a:03:d4:c7:
ac:f3:9c:95:25:24:d8:25:77:c3:2e:cd:95:97:1f:
0a:66:4e:fd:44:5d:31:be:29:f5:88:f2:b8:43:67:
67:cf:7e:62:db:35:6a:6c:ed:d0:35:0a:f6:a9:6b:
59:7c:fc:ce:5b:e1:9a:b0:0f:ae:ce:c3:51:e6:78:
47:5a:28:e6:c9:65:e7:af:a9:e4:82:ad:d7:6c:28:
47:ab:6a:1a:2c:13:0e:1d:89:4f:6c:03:07:fd:61:
19:59:c6:bb:3f:e3:71:35:15:c2:6f:b1:23:da:7d:
cc:fe:8c:1a:a5:e6:52:f1:4e:88:8b:4c:cb:6b:8f:
75:5f:46:56:5d:6b:51:fe:21:01:41:52:31:84:b5:
dd:93:25:8d:dd:e6:ef:7c:12:36:dc:d4:da:41:ed:
ac:8a:78:f5:01:b0:36:1e:22:0c:b0:f3:7f:c5:14:
f9:c4:9a:fb:3a:88:84:c8:08:59:b5:60:62:8f:d9:
ef:55:ff:8a:7c:e5:73:b7:e5:4e:67:f1:82:fe:c8:
f8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AE:DD:62:8E:A1:4D:3C:5C:CD:9B:6D:69:3A:49:04:9D:AC:21:FE
X509v3 Authority Key Identifier:
keyid:62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:32:96:9f:5d:e9:2a:4b:0e:e4:95:44:70:11:4d:40:2e:d4:
ed:5b:eb:02:c7:9b:fe:af:3a:a4:f6:8b:62:45:57:e5:ba:01:
d9:16:32:ae:97:3c:95:85:53:69:7c:43:02:fa:dc:ae:c5:33:
ba:c2:7c:1d:c3:05:cf:c2:d4:4c:fd:9c:c1:3e:92:0c:1a:68:
70:cd:47:88:b4:08:d2:9d:20:63:16:e4:dc:41:18:3c:04:f3:
f7:16:e2:80:4c:9e:91:9d:be:e6:07:49:4b:57:6f:6f:bc:ff:
93:f9:9c:f7:f9:f3:84:00:6e:c9:b5:c3:22:c6:44:e1:c2:bb:
d5:3c:4a:c4:72:fa:f3:69:4b:6a:20:15:88:b0:f2:21:d8:f0:
08:51:7b:82:e4:78:a7:01:d1:73:0c:34:d6:da:62:43:22:8f:
f5:2e:cc:5d:6b:0d:13:8c:b8:87:ae:91:36:aa:a8:f6:79:b8:
b0:4b:e5:aa:8f:19:c0:47:4f:ce:98:ed:88:a0:8a:cb:1e:e8:
a2:aa:11:80:e7:64:19:0c:e4:b9:50:cd:d5:5b:35:eb:b3:68:
95:64:31:5a:72:d6:3d:f2:20:9a:8c:d7:86:9c:d9:b4:fe:61:
f4:e0:aa:35:30:ec:5d:a8:ab:36:1d:55:61:7b:dc:be:8a:7d:
11:6a:47:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:21 2026 by rpki-client