
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
File: Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft (raw, json)
Hash identifier: rFUpzXn9rNjq4JRw7CuNE0gmkCFB+XL9m+RfcVSiPZo=
Subject key identifier: BE:BE:D6:D8:09:C5:07:09:3E:62:BE:52:62:5A:2F:B4:4C:17:63:7A
Authority key identifier: 63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00
Certificate issuer: /CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00
Certificate serial: 030C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
Manifest number: 0304
Signing time: Wed 25 Mar 2026 00:52:25 +0000
Manifest this update: Wed 25 Mar 2026 00:52:25 +0000
Manifest next update: Wed 01 Apr 2026 00:52:25 +0000
Files and hashes: 1: Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl (hash: 7/RtfVL1HA3ki5yhmQ7bYsZbNsj7cg0xdCzNo/LdOY8=)
2: 9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa (hash: 36bHjTlr+0HE0f10oYmhOfC+GpQPqJLk/D3JPOs1dH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl
rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:52:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 780 (0x30c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EE46, serialNumber=63515B364113848FA554D2842F5841877CF6AF00
Validity
Not Before: Mar 25 00:52:25 2026 GMT
Not After : Apr 1 00:52:25 2026 GMT
Subject: CN=69c331c9-105f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d6:06:07:77:cc:c0:6e:e0:3a:27:7b:a7:e0:
1a:bf:f3:db:95:db:52:92:e4:fe:cb:40:d4:b7:b8:
62:f3:e8:a0:61:87:3b:51:d5:95:1c:eb:da:88:06:
30:68:6d:ee:8d:e8:8b:9f:7d:77:11:82:a1:5c:bc:
0e:9b:5d:92:ef:ae:cf:ab:c9:e8:d1:56:4b:7b:0c:
9f:c4:3b:35:b9:c4:9e:e7:29:79:e2:d6:c3:b8:15:
fd:c2:9b:8e:b2:61:99:3b:17:93:7b:d2:82:30:c0:
cc:40:9f:f0:ad:90:87:44:0b:c3:a0:99:c7:70:63:
38:e5:dc:64:02:52:16:3d:87:98:c8:2c:16:7e:29:
f9:72:89:ca:af:e2:ef:7a:82:2d:98:dc:00:b8:92:
20:c2:60:3f:7a:4e:1e:50:1f:da:1a:e8:fb:2c:ba:
8f:7f:f0:53:3e:97:a4:67:03:12:d6:8d:51:ae:e1:
38:a7:c2:14:3c:86:ba:33:87:e6:ef:6b:d0:da:13:
8b:8b:62:45:4a:8c:56:e5:84:0f:a0:bf:c1:4e:f8:
17:f7:45:69:5e:5d:fb:d5:09:7e:ed:f0:ce:1d:17:
fa:95:6e:96:0c:d1:7b:a1:56:a5:66:ed:ca:22:6e:
1c:d8:25:8d:c1:7b:e6:62:59:00:19:54:de:96:26:
0a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BE:D6:D8:09:C5:07:09:3E:62:BE:52:62:5A:2F:B4:4C:17:63:7A
X509v3 Authority Key Identifier:
keyid:63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:91:f2:19:8c:94:c4:a3:a6:53:ec:a5:16:be:e4:9b:ad:94:
fe:71:76:bf:7e:83:1a:a8:68:2c:00:d0:93:1a:b7:ea:53:0f:
d7:19:de:8a:e5:ed:86:0e:2f:74:d4:f6:a3:a2:ab:d0:5a:a2:
35:2c:ad:45:0f:8e:56:da:66:e0:a6:78:b2:10:a1:1a:48:85:
37:1d:2f:e7:0b:86:21:11:44:17:07:e0:5d:9e:d8:fc:51:d6:
c4:47:59:60:34:51:70:cd:bc:08:39:0b:7f:3a:72:92:e8:87:
91:81:4c:79:37:5b:98:46:b2:2d:f1:5f:20:c8:9d:bd:5a:8e:
04:49:7f:ff:1b:ca:56:0e:12:a3:77:7d:a6:f0:73:c6:c1:6a:
08:68:12:6d:d3:4e:ec:1d:0e:01:9b:b5:49:78:95:af:c2:8d:
a6:8c:55:54:2b:a1:4d:13:98:d6:b6:74:1f:ef:10:cb:8c:65:
ce:dc:a6:93:e1:95:ee:8c:a8:b5:8a:6e:c5:e5:49:71:36:bd:
11:9d:06:fe:3f:0b:78:23:4d:78:1c:02:e1:8a:ae:34:37:e4:
5b:7b:cf:77:67:61:db:2a:ac:b1:18:60:76:3a:3e:e5:92:cc:
9c:2b:d7:fa:5d:b3:e9:ba:ca:38:e4:d7:0f:90:d9:e1:57:46:
4e:2f:d6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:26:06 2026 by rpki-client