
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
File: YfRdxU9H4lL6xlUt27OWWFTGyAE.mft (raw, json)
Hash identifier: ZVXDpScdI8ZmqrB259EM0RYr1+ORjMDLZzi+IbDW1RQ=
Subject key identifier: 29:3B:8E:34:D8:AF:AB:84:9D:DD:E8:F5:99:13:F9:CA:6D:57:C1:91
Authority key identifier: 61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01
Certificate issuer: /CN=A9162CCE/serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801
Certificate serial: 068C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
Manifest number: 0680
Signing time: Tue 24 Mar 2026 22:15:19 +0000
Manifest this update: Tue 24 Mar 2026 22:15:18 +0000
Manifest next update: Tue 31 Mar 2026 22:15:18 +0000
Files and hashes: 1: YfRdxU9H4lL6xlUt27OWWFTGyAE.crl (hash: sQOrb8kxVEk/e51hoy41oUUn2UxEBpoiLBi1wG4HJNc=)
2: D47858660E3411F1BB26575989EE528E.roa (hash: bWG4L4zm+kd/J5fsUxpfwPdRmncGUB5tai55L7Yj/oA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl
rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:15:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1676 (0x68c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162CCE, serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801
Validity
Not Before: Mar 24 22:15:18 2026 GMT
Not After : Mar 31 22:15:18 2026 GMT
Subject: CN=69c30cf7-13dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:25:74:b1:e4:4d:9e:65:3d:bd:ca:98:3a:
9b:4b:70:3d:ce:9b:47:d9:32:fe:aa:16:52:74:4f:
d1:a4:dd:95:2a:0f:54:4a:4d:e2:d8:06:34:c3:87:
93:e4:5f:b8:63:04:05:45:c9:53:d5:7d:fc:e4:7c:
00:f3:13:79:ef:26:0b:c2:61:bd:9f:44:fb:27:4a:
55:62:e8:f0:e7:e9:55:7f:2d:52:36:b3:72:38:9b:
4e:65:5e:88:be:83:e1:b0:39:e1:b3:e2:76:2d:82:
d9:d9:f3:bc:40:d0:86:95:ca:80:da:0a:57:bd:1a:
4a:70:f4:be:c9:86:23:40:80:38:dd:cb:d9:6c:74:
e5:08:7b:9d:48:6d:f2:7a:69:18:f7:ec:87:07:2c:
0a:77:5d:90:44:4f:5d:bd:07:51:b8:22:be:95:f7:
da:35:27:e2:f8:42:fd:20:9c:46:31:3f:ad:8c:e9:
32:ca:a5:ab:67:6f:0d:6a:3c:7f:42:cb:ad:76:c1:
eb:dc:14:1f:70:7f:11:c0:d4:6e:4f:65:15:f6:44:
dc:c8:8b:d1:0a:3b:f5:5f:22:ec:a1:ce:4d:d5:2d:
17:35:34:88:9b:c4:59:fc:84:3e:7d:65:07:30:74:
5b:01:75:cd:af:4b:02:42:ed:98:a3:30:a7:df:f3:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3B:8E:34:D8:AF:AB:84:9D:DD:E8:F5:99:13:F9:CA:6D:57:C1:91
X509v3 Authority Key Identifier:
keyid:61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:53:33:0a:10:5b:55:74:29:6f:a8:7c:6d:7c:44:0c:db:70:
e0:2a:40:7f:0e:61:55:e1:a6:8b:93:1e:d0:f4:d7:50:c6:94:
26:88:f7:77:e7:ac:b8:db:ff:5f:d1:e7:a1:e0:02:4a:c6:32:
37:a6:58:9c:bd:33:17:8a:30:00:55:1c:12:81:4f:c7:34:9e:
81:64:9c:7d:19:0e:87:2e:ef:36:b2:64:7a:cb:ca:98:0f:45:
16:c4:b6:74:19:89:0f:4a:0e:36:3c:34:02:a8:c9:91:4b:73:
aa:ba:42:3d:c8:c2:78:18:e0:5b:a7:b4:07:10:a7:71:0b:4c:
07:14:da:ae:13:94:fd:76:aa:61:6b:7c:96:d1:95:f8:86:b4:
e0:7b:89:18:11:55:b2:5d:75:22:44:41:16:0d:4f:9e:2d:f4:
c0:54:38:cf:72:a9:17:76:d7:2e:65:9e:8a:f7:ea:e9:96:2b:
52:20:b3:cd:9f:09:4a:10:b2:41:be:31:7d:ea:70:36:71:72:
8d:64:1b:3d:94:41:ba:8d:60:b9:a8:66:c2:c7:50:ab:3d:32:
03:11:ad:2b:ed:2e:9f:45:40:e1:f1:7e:7f:43:71:f3:f0:9b:
f3:f8:5d:5e:4d:43:1f:be:94:63:39:b7:7a:be:43:c8:ed:3a:
f6:95:ab:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:28 2026 by rpki-client