
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
File: yzDTXHDfyGaoN8rt_vzm_sv8W18.mft (raw, json)
Hash identifier: 6bKarWA0CKsm5SKHbKuyDVtbZhSQCm39q4bdpciP1h4=
Subject key identifier: CC:12:3C:2D:F8:64:CF:39:C6:93:D4:84:41:FC:84:17:87:2A:6F:1A
Authority key identifier: CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F
Certificate issuer: /CN=A915F2CF/serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
Certificate serial: 0857
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
Manifest number: 083F
Signing time: Tue 24 Mar 2026 20:39:27 +0000
Manifest this update: Tue 24 Mar 2026 20:39:27 +0000
Manifest next update: Tue 31 Mar 2026 20:39:27 +0000
Files and hashes: 1: yzDTXHDfyGaoN8rt_vzm_sv8W18.crl (hash: YfAz6S0Od8PUo+edIRYAwELv9ltQm6UOZCdBckKbFfw=)
2: B8BB04788D0E11EF9759C171C4F9AE02.roa (hash: QKLGspANWbxw8KYj33JMMJdYgC4PO2q64kvi/bPww0U=)
3: 7A5654CE358A11F0A6A3E84EC4F9AE02.roa (hash: VYWEaRIXiR8qMtQLt1vLH6vscj0LW+C9m3n4iYjk9EI=)
4: C6C096F68D0D11EFB98F225AC4F9AE02.roa (hash: IPMYkvrQfdZ2mzJDAfxRKRzbx0toH4tf3xv/XzDEnbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl
rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:39:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2135 (0x857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F2CF, serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
Validity
Not Before: Mar 24 20:39:27 2026 GMT
Not After : Mar 31 20:39:27 2026 GMT
Subject: CN=69c2f67f-ea3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:a6:13:c4:6c:6a:34:43:7d:55:55:ac:cb:
d6:e1:b7:ac:58:0a:d2:76:49:92:49:5e:ff:03:53:
33:b9:0f:13:dc:8e:16:3c:b3:67:9c:a1:a5:58:ae:
42:a2:09:49:1f:d3:99:88:29:66:14:85:5e:d9:72:
1d:05:fe:14:74:74:ab:8e:5b:28:ca:7c:50:c7:83:
92:1b:e5:3d:d6:69:97:32:3c:cc:73:12:e7:50:f8:
69:80:27:04:e6:96:14:ba:98:8b:18:90:f0:56:02:
82:b8:da:75:42:9f:36:48:4f:d9:58:45:c4:fb:31:
b3:09:bf:c8:4c:dd:72:e3:6e:5b:e5:5a:e0:54:c4:
82:c2:01:c6:ca:ad:a8:64:23:fe:54:45:48:0d:31:
c7:4d:c6:4a:c0:62:c2:9d:3f:86:8d:fa:c0:8e:0a:
68:28:64:7e:ca:f3:75:c2:6c:b7:36:f3:5c:c4:67:
f6:8a:96:87:b2:b7:c9:07:df:74:07:b8:cd:dd:25:
4d:4d:00:6a:ca:32:be:c0:bc:90:61:6e:fb:62:89:
e6:a0:33:13:87:32:02:51:8a:17:be:7b:2e:0b:b4:
d7:df:16:67:10:9d:95:53:b4:db:a0:96:46:12:e7:
4c:8a:9c:1b:68:17:86:f7:76:89:1a:b9:99:90:11:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:12:3C:2D:F8:64:CF:39:C6:93:D4:84:41:FC:84:17:87:2A:6F:1A
X509v3 Authority Key Identifier:
keyid:CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:83:b9:f8:e6:2d:19:03:36:e0:15:fe:48:cd:6b:f9:36:72:
10:59:e0:6c:86:81:bb:cb:c6:e8:fe:1d:57:48:57:f6:8c:8f:
a7:ab:95:ee:90:65:e2:59:b5:67:ee:3c:3b:64:31:25:7f:86:
d6:4f:d4:18:8c:25:73:68:38:cc:9e:71:64:5f:86:a7:2f:68:
40:fa:34:43:0a:67:ee:23:60:fe:a1:39:eb:34:28:f6:91:9e:
eb:0e:c6:8f:6f:6c:db:55:7a:37:54:0f:98:d6:1c:9b:51:56:
29:08:ec:36:27:ea:70:0b:8e:75:44:bc:a5:33:4a:d8:15:a6:
14:29:7b:9b:0e:fa:10:f0:8a:4a:7c:c4:3c:2d:cb:48:2f:06:
a5:c7:7a:49:86:75:a8:f7:e2:90:2d:cb:4c:b0:14:e3:1a:fb:
02:e2:d1:df:71:8a:3c:b7:82:2c:e4:0a:bd:8c:c1:94:2e:82:
d4:9c:0b:4e:2c:2a:98:48:a0:86:d3:f1:47:bc:0c:ac:24:0f:
26:1d:80:2f:44:79:b9:0f:cf:b5:80:6c:78:5b:87:86:db:86:
c9:b3:60:ec:a0:06:ef:c7:a8:88:f4:13:4a:dc:37:bc:82:4c:
72:a5:22:9a:38:0c:2d:0f:9f:24:7a:16:3e:23:ab:ca:4d:ab:
38:f2:df:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:33 2026 by rpki-client