
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
File: 03yc1lDAIKNQDtybQKVGqEw_Jgs.mft (raw, json)
Hash identifier: 2/isiV+2ZyYPwEhO0JK6sO/zIq4U016fU+CuWcYagzc=
Subject key identifier: 8C:CC:00:1D:56:36:A8:58:2B:70:3F:BC:19:3E:AA:49:94:2B:6A:2B
Authority key identifier: D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B
Certificate issuer: /CN=A9153C50/serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B
Certificate serial: 0563
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
Manifest number: 0558
Signing time: Tue 24 Mar 2026 23:06:21 +0000
Manifest this update: Tue 24 Mar 2026 23:06:20 +0000
Manifest next update: Tue 31 Mar 2026 23:06:20 +0000
Files and hashes: 1: 03yc1lDAIKNQDtybQKVGqEw_Jgs.crl (hash: mHGpuphQ/CHtBsnNlVdPKO8mW4iSty5zpfsBhtvNNqU=)
2: 8B97D7A22CD911ECA528B744C4F9AE02.roa (hash: ekGdq5XwvQSiFAECeI1yOoTTSMBYmajgvzc3Dt6ibs8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl
rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1379 (0x563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153C50, serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B
Validity
Not Before: Mar 24 23:06:20 2026 GMT
Not After : Mar 31 23:06:20 2026 GMT
Subject: CN=69c318ed-86e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:98:af:3f:7d:b8:8e:c2:81:7f:f0:56:3e:
15:a0:83:31:9d:f7:28:3a:26:3d:5c:b2:aa:e6:df:
a6:59:64:53:73:86:fd:b2:24:8a:02:5b:d8:b0:ef:
8c:1b:08:12:dc:34:7c:d4:63:63:24:79:55:75:dc:
95:c6:4c:8d:a0:ba:09:50:72:65:ef:da:24:fa:cf:
a3:5c:c7:7a:32:20:32:bd:13:b5:3e:bb:48:ad:da:
14:d0:b9:e4:b6:2f:4f:2a:78:02:f9:b5:ce:9c:08:
b0:9a:d8:c8:75:f5:09:16:d1:ec:6a:ac:12:c0:51:
48:01:7c:09:0c:d3:23:a4:e3:cf:26:f8:22:77:0a:
50:9c:da:a7:5e:40:7a:cb:29:bd:ad:60:0c:7c:85:
f0:0d:a4:3c:4a:25:d3:ce:75:8d:70:fa:75:57:2e:
d4:ca:16:93:33:7f:8f:30:94:15:6a:c6:8e:de:ff:
9b:1b:34:dc:0c:23:14:c6:5d:cb:f1:72:84:87:1f:
72:05:c2:d1:d1:1c:2d:8f:7f:de:3d:94:55:a8:00:
18:f7:20:33:4d:22:69:26:c5:76:cb:0a:aa:69:24:
9a:2a:ea:cd:67:24:5d:cf:41:4b:6b:b8:e1:7a:e4:
e4:3f:65:ab:cc:45:57:4e:b8:36:f0:42:5f:59:5e:
cc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CC:00:1D:56:36:A8:58:2B:70:3F:BC:19:3E:AA:49:94:2B:6A:2B
X509v3 Authority Key Identifier:
keyid:D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:cc:4a:06:bf:c1:09:fc:aa:29:d7:df:f4:6c:1b:7e:a6:c3:
05:c5:06:eb:01:6a:60:e5:78:2b:bf:2d:30:a3:85:62:e1:a2:
bb:ed:71:98:59:df:6c:3f:5b:61:16:8f:0a:fd:87:35:63:20:
5a:83:04:83:b5:51:f8:ba:8e:5d:7d:15:6d:92:88:16:08:ea:
ac:81:78:a8:52:4c:72:43:75:19:60:8a:13:c0:89:74:a4:4f:
9b:1d:b1:fe:0b:87:b9:41:55:c7:a2:a0:d7:df:00:47:1c:d2:
9e:f5:b0:7a:2b:95:a4:c0:51:fe:65:b0:98:8a:97:d0:21:b0:
54:dd:a6:61:1d:f7:6f:19:2f:0a:c2:8d:c3:2c:9d:50:1b:10:
2d:e6:af:6b:fa:b8:ff:ac:4e:a5:0c:a0:a5:c6:bc:59:1b:2a:
f4:5f:6b:6f:00:e1:83:ec:0a:be:c2:0b:bb:74:bc:c3:c1:e0:
0b:03:6e:ec:d0:58:e9:3e:74:f2:af:7b:d8:70:99:85:7b:13:
3f:c6:d7:c8:de:71:0f:76:00:46:2c:78:da:a1:c1:6d:d3:bc:
f7:c7:89:1e:78:63:a8:2b:3c:77:cc:ca:e8:20:6b:b3:5f:eb:
17:e4:6c:82:c7:f3:40:33:1a:bd:64:7d:83:07:cb:41:83:03:
8c:c0:a5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:30 2026 by rpki-client