
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft
File: vY9TgeGI5FgPskcsJxoFQp4tXCI.mft (raw, json)
Hash identifier: oHsLrvT37SenVAvhcxzztkYTB34RrAHqzkfL7lQjqTM=
Subject key identifier: AD:3F:CC:A5:AB:8A:17:E7:CE:B5:6F:FA:11:FC:9D:94:08:56:DE:D9
Authority key identifier: BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22
Certificate issuer: /CN=A915D66D/serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22
Certificate serial: 1B9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft
Manifest number: 1B8F
Signing time: Tue 24 Mar 2026 16:10:30 +0000
Manifest this update: Tue 24 Mar 2026 16:10:29 +0000
Manifest next update: Tue 31 Mar 2026 16:10:29 +0000
Files and hashes: 1: vY9TgeGI5FgPskcsJxoFQp4tXCI.crl (hash: iXJ+KkqA8h27njV6k+g/hqaP7fPjr0qSqc0ENkRCYU0=)
2: 59029A32233A11E78D48837AC4F9AE02.roa (hash: WIpg/C0+mdeSedmqfZ06RVv1H9xr5zVXBw6+Fs0Ejjc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl
rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:10:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7069 (0x1b9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D66D, serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22
Validity
Not Before: Mar 24 16:10:29 2026 GMT
Not After : Mar 31 16:10:29 2026 GMT
Subject: CN=69c2b776-44a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d4:40:fe:64:2f:44:57:2a:10:1f:bc:5d:39:
05:47:b0:b8:a5:0c:8a:6c:c9:bd:b9:70:09:be:03:
97:3b:b4:6a:5e:8c:07:49:58:63:0f:28:c7:27:1a:
82:80:e3:1e:0b:0f:bf:bc:07:1a:44:41:6a:2c:43:
55:5b:f7:2b:c9:52:ef:96:f2:d4:a2:61:81:39:05:
33:40:6c:a7:f9:ac:63:37:44:a2:d4:f5:f3:3b:0e:
9a:20:07:01:60:7a:e9:b9:d4:2a:c2:d9:d1:f0:a7:
61:54:e8:a7:48:50:29:74:d3:2c:12:f0:79:59:96:
03:d2:04:97:06:26:37:5d:ca:aa:cf:79:d4:1c:ca:
b1:a3:13:44:33:65:fd:ea:1e:c8:e5:11:06:52:6e:
27:8a:5c:90:0b:7e:27:4a:3a:e8:c5:a3:21:cb:0e:
52:d8:a0:a7:06:92:8f:cd:22:18:e8:91:2d:0e:05:
8a:85:1a:d7:a7:a3:54:b9:5f:f4:5d:d6:e1:37:4d:
b5:76:92:35:73:0a:1b:da:6b:1f:9d:29:ac:ff:8a:
0f:b8:c7:64:59:47:72:c4:5e:1b:0f:08:7a:53:35:
60:9c:53:f0:e0:e0:77:84:0c:e8:c8:18:a4:c6:11:
dc:cb:07:e2:bb:87:6d:01:3e:50:f3:f7:6b:7c:fc:
2d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3F:CC:A5:AB:8A:17:E7:CE:B5:6F:FA:11:FC:9D:94:08:56:DE:D9
X509v3 Authority Key Identifier:
keyid:BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:d5:d2:0f:75:44:41:0e:4f:3f:79:9e:9c:58:6b:bb:98:dc:
44:bd:05:70:54:ca:f7:4e:f0:61:ae:3f:5e:4e:98:b8:c0:85:
fb:90:dd:16:b4:fa:ae:3c:84:6d:31:93:77:65:96:0f:75:b3:
b3:71:20:d2:ad:78:69:02:5a:68:53:b6:8f:33:e3:50:82:df:
e1:ae:55:86:04:b2:df:b2:48:2b:d5:d1:9c:9c:9f:29:b4:59:
e5:fd:0c:08:0c:71:a4:f4:0b:72:85:8b:d8:da:cf:b1:09:6f:
c3:f0:15:cc:2b:c3:fe:25:2a:5f:88:49:8f:b8:10:05:a7:b8:
b2:74:78:0e:fd:58:4d:79:66:01:08:c9:e5:39:0b:a9:ce:c5:
41:f1:5d:25:f6:e5:ba:f7:81:bd:ae:5a:eb:78:d4:12:ae:c1:
8a:9b:5b:4a:9e:07:78:bd:01:55:4d:24:f7:9a:89:ee:17:64:
82:a9:87:13:3e:e2:57:a2:66:23:8a:e3:f7:1b:35:81:1c:d7:
3f:77:e0:61:3c:d8:c9:f9:bd:00:7e:b0:ed:8e:01:ff:6c:5b:
2b:c3:d8:bd:98:03:c7:e6:2a:b0:fa:54:a1:8c:02:d3:cd:d7:
b6:80:ff:0e:a4:b1:cd:ba:07:df:0a:66:f7:94:1b:46:7e:5a:
a0:9d:84:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:19 2026 by rpki-client