
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
File: Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json)
Hash identifier: eZUXfAayaaogogD0dgGm1p5Pm+xGkVKDtE2DRoxHiy8=
Subject key identifier: 68:FA:DF:60:84:D7:4F:BF:70:3C:6D:C8:93:80:FD:12:BE:79:27:B7
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial: 35D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
Manifest number: 3572
Signing time: Thu 26 Mar 2026 15:19:13 +0000
Manifest this update: Thu 26 Mar 2026 15:19:12 +0000
Manifest next update: Thu 02 Apr 2026 15:19:12 +0000
Files and hashes: 1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: eZovdSq5hmsyCfk9Cu/LpqZnK/29NTTIASav4ODY2uw=)
2: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: CujlrPZRzwdLdoypUA6XG0sSyWx22QqMi3Wunv/TANU=)
3: 7BAC7A5621D411F199DF6C46233D8C67.roa (hash: /mDg6LUZzeHlaNJOXKegHskznJoBNs4nZJuthgsnsWg=)
4: 0F3E8640D99D11F08333CF1766D3641D.roa (hash: qzuruNPj+CxqWUofv9I42+V40MXD4+oF0yeOUf6AX+Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13783 (0x35d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Validity
Not Before: Mar 26 15:19:12 2026 GMT
Not After : Apr 2 15:19:12 2026 GMT
Subject: CN=69c54e71-e180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:65:ad:1b:38:64:23:60:a2:cf:df:d6:39:2b:
32:58:58:c3:28:d2:38:10:37:42:00:d9:8e:b5:1a:
27:87:e6:31:63:99:c2:2b:a0:06:b4:8a:d5:a9:de:
52:63:f8:4d:1e:50:41:6f:b7:76:cc:67:cf:46:0d:
2b:d9:50:89:8c:6a:90:6c:74:01:54:da:d2:e7:6e:
3d:53:81:b6:eb:c4:e7:49:b2:1d:3d:83:f4:22:5e:
09:4f:76:5c:e0:7d:ad:c7:de:02:0c:a1:02:df:8a:
f9:6b:09:bf:37:ec:ca:80:f5:80:70:b6:00:12:ff:
94:86:1b:80:c2:59:03:36:6a:c1:66:d8:94:31:e7:
b1:9b:61:0c:65:84:dc:ae:6f:51:92:f9:fe:78:89:
67:ba:ec:9f:b8:79:02:c4:24:2f:7a:b6:2e:be:77:
85:db:9a:bb:01:73:fc:60:c6:59:48:49:9b:d0:02:
36:a4:44:b7:8c:c0:50:38:33:a8:d2:d5:99:d7:55:
b0:c5:72:f5:32:68:5c:a7:58:90:da:6b:38:9d:7f:
37:8d:ca:e6:89:c6:32:b4:a5:10:ed:54:90:ef:db:
5c:b7:7c:63:dc:72:d6:91:43:e3:86:d4:5b:bf:67:
9d:df:c6:3f:eb:5b:40:02:80:86:bc:88:46:c4:68:
4d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FA:DF:60:84:D7:4F:BF:70:3C:6D:C8:93:80:FD:12:BE:79:27:B7
X509v3 Authority Key Identifier:
keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ce:c4:07:3f:56:17:66:6d:f7:b3:cf:fb:5b:30:b8:19:27:
3a:5f:e7:32:05:5d:76:dd:13:e2:1f:29:78:fb:b4:d8:1e:be:
eb:f1:1e:7d:5b:4d:2d:21:c0:6d:83:42:e1:56:e3:8f:51:6f:
4b:40:ed:bc:48:6f:bd:66:8d:ac:78:da:11:b0:01:ef:c6:e2:
5a:d2:85:32:b5:3b:98:51:5a:54:36:74:94:39:90:9b:d8:0e:
7c:13:00:e9:2c:ea:99:3b:3d:a8:a9:71:62:e1:44:35:b0:54:
fb:1f:46:6e:1f:e4:e1:83:75:ef:9b:34:1d:f3:da:0b:0a:6d:
68:54:7c:2d:59:75:24:c0:79:5d:66:9b:a9:e3:16:2b:50:a4:
98:7b:6e:8b:e1:3d:e8:ea:0e:81:0b:57:4e:e5:f8:cd:80:d5:
69:40:fa:57:8b:e7:57:79:d1:89:c4:3c:16:81:f5:fd:7a:84:
cb:d3:dd:9c:bf:33:5a:28:87:53:35:4f:85:26:bd:84:53:6f:
8e:40:2c:e6:6f:38:4b:f8:55:c8:e1:4c:a7:dc:b5:6d:b8:f5:
54:60:5e:95:7c:14:8d:bd:dc:e0:48:91:f6:cf:90:58:5c:77:
7d:c3:19:37:38:3d:e5:ce:0b:2e:21:b2:02:70:01:1c:69:8c:
c9:1a:e5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:10:21 2026 by rpki-client