
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
File: y539cqjfUOBlAEN4BraiAY7Mvf0.mft (raw, json)
Hash identifier: F+9NqrOoHKjhs37psBTP+Omoibr3/Ldd/HtH8T4BtRU=
Subject key identifier: 2F:75:09:9D:C7:D4:F1:34:36:4E:32:D8:2A:5D:83:D6:8B:2C:38:0F
Authority key identifier: CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD
Certificate issuer: /CN=A9150733/serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD
Certificate serial: 0BC5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
Manifest number: 0DBD
Signing time: Tue 24 Mar 2026 18:46:49 +0000
Manifest this update: Tue 24 Mar 2026 18:46:49 +0000
Manifest next update: Tue 31 Mar 2026 18:46:49 +0000
Files and hashes: 1: y539cqjfUOBlAEN4BraiAY7Mvf0.crl (hash: gTZlJD43adjNGMBZy9F8fklePREJU2XuKJUic/paqyc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl
rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3013 (0xbc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150733, serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD
Validity
Not Before: Mar 24 18:46:49 2026 GMT
Not After : Mar 31 18:46:49 2026 GMT
Subject: CN=69c2dc19-50a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5d:7b:6a:68:2c:2c:cb:76:27:a7:74:28:5c:
78:84:fc:f0:27:3d:c3:46:bb:b6:49:b5:12:3f:e7:
39:ba:3f:7e:3f:c4:d3:b4:49:39:03:98:8e:33:af:
a7:b2:1a:cd:ff:99:c5:19:2d:66:9e:a9:10:e8:0e:
98:bb:07:94:d8:1e:e1:4f:8d:f9:5e:79:1d:30:fc:
78:01:50:53:3b:be:fe:39:25:8d:81:9a:fa:b1:2c:
67:6c:ba:5c:e9:4c:47:61:13:72:46:97:5f:04:1c:
88:98:5d:d0:f7:e9:74:e2:ee:77:92:c7:e9:4d:b1:
95:dc:db:3b:6f:bb:dd:0e:41:f8:17:18:11:c5:88:
de:78:a6:38:20:cd:26:3a:c3:72:18:5a:9f:04:d2:
62:42:bb:55:b6:4b:37:7e:74:84:79:bf:92:5f:ba:
23:99:03:69:e9:cd:80:e6:68:26:67:fa:76:17:97:
26:9a:f2:74:b6:89:9c:59:24:94:59:38:d2:11:7c:
6e:75:6a:b7:59:cb:d1:2a:b4:cd:da:da:93:f5:d8:
ab:14:e2:45:b1:71:2e:aa:1f:d7:eb:97:a4:32:9c:
5f:97:96:4a:07:65:9c:1c:f3:f5:13:39:01:e8:69:
0e:d2:81:87:6e:ea:69:c5:e4:7c:25:55:48:a3:fb:
ba:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:75:09:9D:C7:D4:F1:34:36:4E:32:D8:2A:5D:83:D6:8B:2C:38:0F
X509v3 Authority Key Identifier:
keyid:CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ea:18:fb:48:b9:22:f6:d7:f6:b0:26:c4:02:05:d0:cb:7f:ae:
9a:66:e9:27:b3:42:c7:1f:0a:a4:d8:8e:7c:44:ce:ae:e2:02:
de:b2:31:db:9d:c6:d1:4d:90:bd:ab:d6:f4:72:53:62:0e:37:
ac:68:c2:17:bd:7e:f4:34:88:16:12:e4:3d:de:b3:0d:d5:a4:
da:aa:a9:72:21:c7:a4:b9:44:5a:7e:f9:5e:ec:f0:0f:81:2b:
4b:02:00:28:3b:0a:71:c7:cf:51:00:de:13:f9:30:d4:78:6b:
9f:0d:f1:b9:19:28:fd:cd:bd:c9:90:9a:37:36:12:03:94:c3:
4e:40:a9:ee:3d:38:01:ff:b9:9d:09:bd:dc:16:d8:87:67:8f:
fc:70:ba:9e:47:ee:4b:c6:97:5a:46:e8:27:f9:28:86:5b:e0:
8d:3e:ce:32:20:d1:c6:ed:a2:62:d7:86:cd:82:2f:bd:76:45:
06:14:f4:49:37:19:f3:91:9a:9c:93:a8:e8:1f:d4:eb:da:18:
23:25:44:93:30:96:4f:48:ac:ea:dc:a1:f9:33:4a:47:c9:97:
fc:63:ed:0d:76:b9:2a:93:85:01:5b:c1:f3:1b:a8:88:8e:75:
3c:0a:10:10:35:5a:c6:fb:10:45:93:e6:5e:bd:fb:ad:43:da:
b4:5d:cb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:59:54 2026 by rpki-client