
$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
File: yil3R0MKG-s0C8o51iIv0mQZt9s.mft (raw, json)
Hash identifier: rOWWkzhKzCbHwduudfG+OGY+FTEJFn4rvHy0Ae6gJPM=
Subject key identifier: D0:94:18:8F:3B:49:E7:F9:4C:DB:F9:DA:27:35:BE:D3:14:70:8B:53
Authority key identifier: CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB
Certificate issuer: /CN=A91417B0/serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB
Certificate serial: E1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
Manifest number: DE
Signing time: Wed 25 Mar 2026 05:48:18 +0000
Manifest this update: Wed 25 Mar 2026 05:48:17 +0000
Manifest next update: Wed 01 Apr 2026 05:48:17 +0000
Files and hashes: 1: yil3R0MKG-s0C8o51iIv0mQZt9s.crl (hash: B3+OwPpREEo56OaRtA+m2FVP4afEmpSr3PT4o/qLHSA=)
2: 5909D86203DB11F0B7D5DD29C4F9AE02.roa (hash: XcWLcqq81azP3U6TBivGOyYKJ0IUJVaAPBiEqjAnhx8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl
rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91417B0, serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB
Validity
Not Before: Mar 25 05:48:17 2026 GMT
Not After : Apr 1 05:48:17 2026 GMT
Subject: CN=69c37722-36e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:37:0e:fb:dd:b7:ae:7f:a0:e5:11:c2:de:43:
55:99:c7:94:19:91:d7:d5:c6:33:58:39:2f:20:35:
19:ec:00:b6:74:e1:34:f1:00:12:ac:de:61:18:6c:
18:3f:a9:01:e6:c2:40:93:33:60:b7:5f:6a:1f:f0:
4e:7a:5c:07:69:02:77:02:22:41:6e:63:e1:84:7d:
10:25:83:62:2f:3d:4a:5a:30:d7:c4:bd:c7:07:c9:
52:ee:c1:4a:27:61:ea:7c:25:9d:72:57:99:45:d3:
40:f9:f2:c4:2c:63:31:13:91:d0:30:66:5f:09:9a:
00:2e:9c:12:26:38:fe:a1:c4:ad:c5:5a:3b:6c:9f:
65:26:cb:3a:66:6c:4e:55:d5:49:68:5d:89:ee:76:
22:99:9f:e7:35:32:17:00:cb:bd:69:17:87:a5:23:
c8:72:6e:43:7e:f9:8b:9f:3c:e6:80:79:71:9a:ae:
ad:57:0a:5a:9a:f8:4e:06:3c:d7:b7:8a:2f:fa:4c:
47:5d:4a:73:2d:29:ce:6f:79:73:b9:4a:08:89:83:
35:8e:40:59:4c:af:79:e3:15:ae:5c:da:67:62:44:
d7:1c:03:53:32:ff:5b:0a:a7:47:2d:e0:42:06:67:
7f:f8:a7:1b:08:8f:32:77:65:f5:24:a0:4e:54:b1:
56:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:94:18:8F:3B:49:E7:F9:4C:DB:F9:DA:27:35:BE:D3:14:70:8B:53
X509v3 Authority Key Identifier:
keyid:CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:92:3b:70:91:c9:a8:ce:28:84:d2:2d:ec:a8:d0:f5:76:9b:
69:80:7f:21:1e:84:c4:5e:14:be:87:bc:4b:ec:86:28:05:15:
46:fb:a8:24:41:f1:b6:72:81:6b:36:d9:76:68:f0:93:40:98:
ef:23:05:00:49:64:c9:e4:72:c2:92:23:36:02:d0:18:7d:86:
11:c0:75:36:9f:de:bc:c8:ce:de:44:ad:73:bb:59:4d:91:7c:
da:6d:72:0f:6e:31:16:04:71:26:d1:2a:0e:f0:25:52:53:d2:
f7:ce:9f:7e:ae:29:e1:54:cb:48:a5:ba:7a:5e:2d:74:22:ec:
b4:8d:7d:b4:a0:ff:af:e3:61:1b:f1:be:c2:d0:8e:d3:cf:67:
19:7c:7f:be:7d:ea:ec:21:57:7a:c5:fa:88:ac:0b:0e:6b:58:
14:22:3e:fc:ec:4a:28:ec:04:45:a6:44:84:22:8d:e6:df:64:
38:d5:58:3e:9c:32:e4:31:60:38:a5:0c:99:11:64:78:90:e7:
ef:ac:dc:81:f4:ff:93:0b:28:7a:02:91:14:97:11:72:ef:46:
8d:cd:de:5d:06:4a:76:1b:82:b1:be:e9:8c:39:3a:90:c0:1a:
37:5e:79:27:ea:17:b5:61:96:42:1b:26:d5:29:54:df:6a:c1:
c9:c7:cb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:59:29 2026 by rpki-client