
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft
File: YlWvHFTHD2B02LCsoatcuHg4dic.mft (raw, json)
Hash identifier: PwtyVdLpMpc4g0YFYBUwirI/jJaUFkUfcWstWYz1RAg=
Subject key identifier: CD:AE:3F:B8:34:E8:58:C2:73:5C:8A:B1:80:EB:8B:DE:6A:D9:6B:D9
Authority key identifier: 62:55:AF:1C:54:C7:0F:60:74:D8:B0:AC:A1:AB:5C:B8:78:38:76:27
Certificate issuer: /CN=A9148CCE/serialNumber=6255AF1C54C70F6074D8B0ACA1AB5CB878387627
Certificate serial: 8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft
Manifest number: 8F
Signing time: Wed 25 Mar 2026 06:43:16 +0000
Manifest this update: Wed 25 Mar 2026 06:43:16 +0000
Manifest next update: Wed 01 Apr 2026 06:43:16 +0000
Files and hashes: 1: YlWvHFTHD2B02LCsoatcuHg4dic.crl (hash: 5l/0WAA5H4wnXhKfd9Ax+zZIwWMdYa2Rf16S5vXHoFo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.crl
rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148CCE, serialNumber=6255AF1C54C70F6074D8B0ACA1AB5CB878387627
Validity
Not Before: Mar 25 06:43:16 2026 GMT
Not After : Apr 1 06:43:16 2026 GMT
Subject: CN=69c38404-44d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:21:8c:78:8a:43:6b:b6:96:3f:2a:47:31:9a:
f9:9c:c6:79:30:18:82:be:f2:24:ff:36:6b:d9:71:
ce:ed:ed:3c:dc:8e:c8:22:7d:2e:76:8d:d6:98:6a:
2f:a5:18:3f:22:22:75:eb:0e:35:05:ef:cb:f5:2a:
92:aa:1c:16:92:9b:3f:45:f3:73:e5:a4:67:08:99:
39:4d:d7:df:4a:64:44:23:54:f8:d3:c4:f4:a4:63:
88:b2:4f:89:1e:7b:8b:7c:f2:1c:cb:52:e2:22:43:
af:e4:11:42:bc:de:32:f3:e7:c4:58:0b:66:26:8f:
90:a1:be:71:d5:40:3d:92:37:4a:d7:c6:06:39:39:
e7:8e:45:fa:4e:0c:a9:0b:9a:3d:ea:dd:c3:da:06:
02:15:95:37:48:03:84:75:46:81:13:c4:a8:39:da:
ef:5d:be:7b:4b:d1:ba:0d:d0:ae:47:3e:8d:ad:f0:
2b:61:05:65:cc:fa:f1:7e:6c:c7:a5:1c:58:77:64:
da:c4:94:0c:56:e7:02:ca:97:e1:99:d4:77:70:cb:
ea:fe:e3:68:52:ee:45:93:d9:bf:3b:8f:88:69:55:
3f:85:1a:dd:f6:47:e2:4b:81:6a:88:c0:b9:bd:7c:
7f:28:84:9b:5b:ac:9d:a2:a3:72:ff:9d:db:9b:32:
aa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AE:3F:B8:34:E8:58:C2:73:5C:8A:B1:80:EB:8B:DE:6A:D9:6B:D9
X509v3 Authority Key Identifier:
keyid:62:55:AF:1C:54:C7:0F:60:74:D8:B0:AC:A1:AB:5C:B8:78:38:76:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a0:59:a8:4a:07:70:e4:d7:45:10:cb:7d:82:84:4c:4d:e8:
ef:d4:83:cc:17:7c:3d:15:1d:8c:fb:0d:a7:3d:3b:df:08:9b:
c0:e9:2b:3a:8b:b6:a9:2d:50:92:b6:48:bd:ab:8b:b9:81:55:
82:b4:86:2e:ed:8a:56:ab:59:71:6f:d2:78:91:2c:f2:a2:38:
47:9d:6f:b3:77:4d:c8:ff:f8:d1:0b:f9:11:9b:41:e5:c8:53:
4e:b2:59:56:c6:65:3b:c1:72:62:57:0c:5d:38:f5:b8:61:9f:
ae:97:a4:d9:07:58:7e:74:76:d4:78:23:97:9a:2d:b1:f9:7e:
45:bf:82:6d:db:8e:30:24:19:89:12:be:9a:92:4b:4c:27:f6:
6f:be:48:bd:62:e1:5d:c2:a1:66:a6:63:4f:b9:8c:e2:42:1c:
25:77:bf:a4:73:7a:ee:78:01:04:b8:ab:c3:0f:0d:01:54:e7:
61:b1:18:19:70:87:72:7d:2c:d6:9e:0e:28:99:07:03:8d:ff:
dc:2f:31:93:36:69:00:d6:5b:60:1b:b6:58:c4:4f:4d:ff:60:
87:58:da:86:d7:84:83:19:1d:cd:b7:56:0f:80:46:45:81:ca:
db:57:7e:c9:c4:d3:8a:a9:80:83:75:9e:fe:f5:f5:2d:b9:ec:
e7:85:20:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhDQ0UxMTAvBgNVBAUTKDYyNTVBRjFDNTRDNzBGNjA3NEQ4QjBBQ0ExQUI1Q0I4
NzgzODc2MjcwHhcNMjYwMzI1MDY0MzE2WhcNMjYwNDAxMDY0MzE2WjAYMRYwFAYD
VQQDEw02OWMzODQwNC00NGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiSGMeIpDa7aWPypHMZr5nMZ5MBiCvvIk/zZr2XHO7e083I7IIn0udo3WmGov
pRg/IiJ16w41Be/L9SqSqhwWkps/RfNz5aRnCJk5TdffSmREI1T408T0pGOIsk+J
HnuLfPIcy1LiIkOv5BFCvN4y8+fEWAtmJo+Qob5x1UA9kjdK18YGOTnnjkX6Tgyp
C5o96t3D2gYCFZU3SAOEdUaBE8SoOdrvXb57S9G6DdCuRz6NrfArYQVlzPrxfmzH
pRxYd2TaxJQMVucCypfhmdR3cMvq/uNoUu5Fk9m/O4+IaVU/hRrd9kfiS4FqiMC5
vXx/KISbW6ydoqNy/53bmzKqTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM2uP7g0
6FjCc1yKsYDri95q2WvZMB8GA1UdIwQYMBaAFGJVrxxUxw9gdNiwrKGrXLh4OHYn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OENDRS85M0VGRTJCNDRG
RUUxMUYwODAzNzk0ODJDNEY5QUUwMi9ZbFd2SEZUSEQyQjAyTENzb2F0Y3VIZzRk
aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lsV3ZIRlRIRDJCMDJMQ3NvYXRjdUhnNGRpYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OENDRS85M0VGRTJCNDRGRUUxMUYwODAzNzk0ODJDNEY5QUUwMi9ZbFd2SEZUSEQy
QjAyTENzb2F0Y3VIZzRkaWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAD6BZqEoHcOTXRRDLfYKETE3o79SDzBd8PRUdjPsNpz073wibwOkrOou2qS1Q
krZIvauLuYFVgrSGLu2KVqtZcW/SeJEs8qI4R51vs3dNyP/40Qv5EZtB5chTTrJZ
VsZlO8FyYlcMXTj1uGGfrpek2QdYfnR21Hgjl5otsfl+Rb+CbduOMCQZiRK+mpJL
TCf2b75IvWLhXcKhZqZjT7mM4kIcJXe/pHN67ngBBLirww8NAVTnYbEYGXCHcn0s
1p4OKJkHA43/3C8xkzZpANZbYBu2WMRPTf9gh1jahteEgxkdzbdWD4BGRYHK21d+
ycTTiqmAg3We/vX1Lbns54UgTg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:59 2026 by rpki-client