
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
File: yyk1oUeLT4tEYxANsulbBlRAZ3M.mft (raw, json)
Hash identifier: DKDXwUK6h7vgVtKGeu873l7+xWFEny9dLSUoJQvlWTo=
Subject key identifier: C6:75:FD:62:5F:8A:3D:8F:2C:58:69:CA:A6:B0:7C:08:C0:FB:53:86
Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
Certificate issuer: /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
Certificate serial: 016B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
Manifest number: 015A
Signing time: Wed 25 Mar 2026 04:17:33 +0000
Manifest this update: Wed 25 Mar 2026 04:17:33 +0000
Manifest next update: Wed 01 Apr 2026 04:17:33 +0000
Files and hashes: 1: yyk1oUeLT4tEYxANsulbBlRAZ3M.crl (hash: 1CdZvH6niR/1zPw7TSCyDr/pKJuPtBTxRkm6IOOKcAs=)
2: D14D6710936711EFB8A6457CC4F9AE02.roa (hash: sO0aVU0cFwGpTz0cQ9IUqdHUM9QV4sMVuL+bslRBxPA=)
3: 0A7FC90CEED311F096B1F0A4736F56BC.roa (hash: 7+vMXmZRIYIKIxBz5RQMdseZAdAsObbhTp7dlt06B0M=)
4: 76601C1C23E611EF92A9097CC4F9AE02.roa (hash: JflVdPBidB0mm33Bgl8MOrVtKlhbLqttKFMf8YGitR8=)
5: 75E10ADA23E611EF92A9097CC4F9AE02.roa (hash: 6ECFRbdi/OwcVFk5I96YrsKDQE1WQn7CfR1VvBkvdok=)
6: 680D797023E611EF8165F17BC4F9AE02.roa (hash: aW25kEfOm3Y6z0dJwR8QkAiS+sy9HyUcqVGhB3onEl8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl
rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 363 (0x16b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156F14, serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
Validity
Not Before: Mar 25 04:17:33 2026 GMT
Not After : Apr 1 04:17:33 2026 GMT
Subject: CN=69c361dd-e0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4d:c2:61:f1:98:f8:80:1f:d5:1b:e3:0d:cd:
4b:72:6c:cd:b8:c9:85:45:7b:93:69:77:d0:af:b1:
18:1b:cc:e5:6f:7e:c5:30:4d:08:09:de:f1:9e:f4:
b8:ce:e8:fe:92:cd:ed:ec:e6:8a:ed:88:c5:ee:cd:
17:3f:12:ed:fb:03:6f:c2:93:07:96:ac:85:91:35:
38:38:0d:40:e2:1a:43:0e:d7:f7:81:8c:18:e1:b5:
f8:65:c9:51:b5:b2:4d:dd:15:61:14:d1:5b:cf:fe:
52:a4:b2:17:cd:c5:5c:23:58:1d:d3:16:80:b8:14:
05:a6:e4:7c:b5:94:c0:9c:bf:60:10:29:85:4d:07:
63:9a:fe:6a:f1:d9:7d:86:2a:2d:09:6e:b1:c1:81:
d9:25:39:2d:7d:19:d3:cf:9b:7a:75:d3:55:98:f5:
04:e1:f2:c0:1a:df:4e:e2:57:e6:8f:2e:96:b6:c7:
87:50:be:8a:bf:06:0e:e4:55:cc:f1:56:36:1c:9c:
eb:71:f8:98:c6:a1:59:5d:15:cb:a1:bf:db:c2:16:
38:c3:2d:6d:e3:44:13:42:d5:b9:ee:69:23:53:1c:
8a:12:39:52:54:08:7f:52:92:b6:5d:29:db:7b:58:
98:14:59:3a:c4:e5:64:80:66:6e:23:30:b3:31:36:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:75:FD:62:5F:8A:3D:8F:2C:58:69:CA:A6:B0:7C:08:C0:FB:53:86
X509v3 Authority Key Identifier:
keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:10:cb:47:8a:a5:3d:af:56:21:ae:82:b7:86:49:96:fb:99:
5d:a0:6e:04:e8:ba:f4:5d:e8:15:6c:4f:48:35:03:ac:86:11:
86:c6:90:80:6a:98:69:62:f7:61:fd:7b:78:fa:31:be:1a:fd:
31:9a:31:bc:7b:51:c1:eb:9a:2c:10:05:1e:7d:3f:09:28:91:
67:0e:3c:5a:a1:1d:5e:c2:6b:f4:97:8b:b4:08:00:57:90:fe:
45:59:e6:29:d7:21:95:7c:3c:5c:90:f6:b8:2a:31:32:6f:71:
49:b6:72:ca:1d:2b:c5:f8:84:1e:a5:98:61:93:e3:5b:1e:a0:
1d:a2:e6:8f:91:09:ef:6f:40:e2:cd:45:5d:06:1c:f2:38:83:
c9:ad:0a:b5:e9:00:e0:fc:34:d9:3f:4e:dc:6f:c6:f8:a9:ac:
d0:7c:f1:a8:0a:35:c0:60:6e:5a:a3:20:56:9e:ce:29:0c:1a:
d8:90:da:c8:ec:3f:53:37:e0:61:03:f9:44:8e:38:f7:44:7c:
0a:e5:d1:59:28:74:05:ca:84:7d:ba:0f:f0:de:6e:14:8d:84:
a9:a9:10:e9:63:db:ad:04:13:3a:4c:eb:9d:f5:9d:13:f1:6d:
af:17:7d:43:d6:4e:31:d9:ee:ba:29:2a:55:9e:6d:71:0c:70:
bd:ce:e1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:18 2026 by rpki-client