
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
File: yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft (raw, json)
Hash identifier: y90ZK+byYs1bpJ34Dpll6yZBIB/FCwy7FuYA7UsddYc=
Subject key identifier: F1:66:97:7E:9E:FE:3C:FE:B6:6A:1B:EE:3F:83:FE:3E:A7:8D:F1:1B
Authority key identifier: CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF
Certificate issuer: /CN=A9153675/serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF
Certificate serial: 0166
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
Manifest number: 0161
Signing time: Wed 25 Mar 2026 04:10:14 +0000
Manifest this update: Wed 25 Mar 2026 04:10:13 +0000
Manifest next update: Wed 01 Apr 2026 04:10:13 +0000
Files and hashes: 1: yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl (hash: Pd6FsGY0ufhtwnkJ4U9Wff5zoIxTOoi8Iy7u9QiqHa8=)
2: F8636CC60F9D11EFA1E14343C4F9AE02.roa (hash: X4Op/fuW4L375YAqKPF9gb1HDQe8/nejgu/NPMQbeNw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl
rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153675, serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF
Validity
Not Before: Mar 25 04:10:13 2026 GMT
Not After : Apr 1 04:10:13 2026 GMT
Subject: CN=69c36026-db14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:87:7b:5c:0d:d8:5c:22:81:be:ed:81:52:
82:25:40:93:14:21:82:71:0a:ef:9d:7f:58:6d:bb:
30:2f:45:e3:40:74:a8:f5:04:20:2f:81:b4:30:c8:
68:aa:78:d2:a1:bc:09:c5:be:01:29:85:4e:19:ff:
05:fb:1c:00:d9:bd:21:92:ef:d4:78:b3:c7:48:db:
48:b7:5f:db:a2:94:d1:08:34:a3:b2:37:c7:b8:4d:
41:2f:ab:b0:d5:71:03:1a:9e:bd:93:44:bd:7d:ac:
d7:4e:90:38:ba:a2:b4:1e:6b:de:0e:d7:37:73:76:
64:2e:8d:6c:6f:a9:c4:14:0b:4e:bf:75:b3:e7:89:
7f:6d:79:b5:5a:66:54:b2:0d:6c:16:52:ce:1b:7a:
4c:15:9a:db:a9:45:1d:5a:9d:a6:66:ab:9f:64:ee:
70:97:35:d0:62:8b:ce:46:2d:54:23:19:da:ca:13:
2f:32:8f:dc:aa:22:12:65:3c:7e:28:92:6b:8c:5d:
eb:09:7c:ff:93:9d:a4:21:fe:1a:ec:6c:58:d7:08:
83:de:34:c4:e5:2b:4e:8a:fc:98:69:c8:ca:a1:28:
96:74:05:8c:9b:1d:38:44:b4:d7:83:7b:86:0f:10:
fc:6b:e7:b7:38:6f:84:bf:75:62:ad:1b:c4:d0:2b:
74:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:66:97:7E:9E:FE:3C:FE:B6:6A:1B:EE:3F:83:FE:3E:A7:8D:F1:1B
X509v3 Authority Key Identifier:
keyid:CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:2b:01:2f:f9:74:b3:e8:77:c5:f7:29:36:4e:32:2f:30:a9:
84:3f:bc:a8:1b:75:61:5c:1d:db:64:93:46:59:60:f2:c8:39:
64:4b:f1:11:de:82:01:10:53:38:97:04:27:fe:e5:7e:7f:c2:
43:23:c2:59:0d:93:71:9a:42:d9:3b:c3:97:d8:6b:61:8a:39:
32:f9:ac:43:cf:b8:96:26:e1:b1:db:f2:cb:2d:9b:d1:90:11:
c7:d5:20:11:bb:1a:17:b5:56:ef:77:b4:b2:e8:1a:ee:96:b1:
c6:33:3e:b8:09:86:88:48:15:ff:09:7c:b4:e4:73:e0:32:ce:
9b:f2:24:94:1b:30:ea:5a:de:37:f9:5a:35:6a:3a:80:fc:93:
2a:c6:f7:ee:81:8d:79:7b:11:73:74:2d:f0:16:4c:a2:04:a4:
0b:b0:55:20:06:0f:0b:8f:8f:0e:1a:9b:1e:c1:76:d5:63:91:
22:d1:45:5f:9d:2e:9b:ba:ee:2c:b6:7c:c2:a2:89:59:5d:f7:
2f:b0:6c:56:ed:98:31:cc:b6:b5:31:2f:af:b3:6b:5a:4e:07:
eb:f4:82:7e:92:30:44:08:56:3b:72:e0:91:d0:a2:6a:d0:b2:
bb:48:e6:ea:81:30:db:93:6b:3f:a8:d3:0b:e7:c5:e8:77:1b:
63:9c:a8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:32 2026 by rpki-client