
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
File: YHa9C6TbeXpypo_v-b-1WMRDmLI.mft (raw, json)
Hash identifier: nSZ8QHV8tbgqPyGKe3j3siZQqolc+q2I/sNqS64k1Ck=
Subject key identifier: CB:05:06:87:42:B8:CE:0D:51:DD:06:F2:82:C4:AC:C4:01:CD:18:66
Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
Certificate issuer: /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Certificate serial: 04C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
Manifest number: 0493
Signing time: Thu 26 Mar 2026 23:58:30 +0000
Manifest this update: Thu 26 Mar 2026 23:58:30 +0000
Manifest next update: Thu 02 Apr 2026 23:58:30 +0000
Files and hashes: 1: YHa9C6TbeXpypo_v-b-1WMRDmLI.crl (hash: 3Fbd5e07BrVhSQrAYQ2h9TvcNP3apbPDNF0vJDoonew=)
2: B283BDAACF7C11F084EB1044C4F9AE02.roa (hash: qM1jpngbGtLR2m4oUSpuCPTJ9nzvkY0kh4taVmX3HNk=)
3: 844EFBDA766C11EF8CE33A86C4F9AE02.roa (hash: rG8LFpWn8e5WNkUz41in8DUocZDaO5hxFfUN/rqb2XU=)
4: 260D3330758A11EFAE7A8A39C4F9AE02.roa (hash: 1u7MoOEqUAcZtaB8C3gY/ex2tSVz31yAb6iq9EUXHLo=)
5: ED1A0478799811EF8437F77EC4F9AE02.roa (hash: XqHC5rj+3s01yuYMUc/k58y/2zhhrKKsHAG9wb2CB0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 23:58:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1220 (0x4c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162EE1, serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Validity
Not Before: Mar 26 23:58:30 2026 GMT
Not After : Apr 2 23:58:30 2026 GMT
Subject: CN=69c5c826-6d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:ac:b0:7c:48:2e:0f:34:32:dc:85:8d:64:
c7:e1:3b:e6:b2:55:22:e8:d6:9f:d8:1d:65:9e:47:
b5:5b:c4:94:ad:b6:26:d9:da:53:a2:6a:11:c6:29:
45:f5:a3:17:b7:db:cc:11:4d:80:a5:cc:5f:a0:f9:
34:c3:35:e9:65:f6:72:7b:e9:ed:1c:3a:d5:0f:4b:
76:b7:1a:48:7d:c9:a7:0f:58:c2:80:14:07:84:5e:
ba:8b:f7:80:1b:aa:3c:ff:3d:07:06:a1:7b:71:a5:
0f:1d:bc:d2:50:43:b2:5b:34:9e:01:79:61:d8:86:
cd:ce:cf:1a:6f:94:0c:47:31:fa:43:66:63:bf:51:
41:c1:fb:4b:30:b1:f5:21:9f:4b:79:9b:04:bf:91:
22:4f:c7:1a:e2:67:8b:66:9a:ba:56:bc:dc:67:30:
4c:04:31:f0:dc:6e:69:89:e9:c9:60:5f:88:4b:1f:
f1:06:e5:e6:fe:8f:f8:6e:95:8c:a5:c9:0c:26:f8:
3f:77:22:bd:ae:8d:34:94:ac:2e:35:f0:d9:08:3c:
76:dc:55:83:1a:8f:65:d7:81:c7:cd:34:79:73:22:
ef:6c:d5:ad:52:0f:90:96:cc:db:55:7d:35:74:fc:
ca:9f:7b:f7:b7:d1:3f:f3:13:da:89:ad:dd:8f:a5:
7e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:05:06:87:42:B8:CE:0D:51:DD:06:F2:82:C4:AC:C4:01:CD:18:66
X509v3 Authority Key Identifier:
keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:b2:26:9a:65:14:8b:9a:24:72:10:cb:d1:ce:1a:aa:08:78:
ca:7e:f7:98:41:de:3d:2f:97:69:43:28:c8:32:29:15:74:ef:
2f:6d:0a:0b:bd:0d:e9:12:bd:e7:a4:1d:f9:7f:62:a9:d5:ad:
44:6d:71:21:d8:cd:f6:49:43:b9:c3:3b:ac:f3:bc:b1:03:27:
1f:d2:04:76:e1:a7:3f:94:a4:b4:c6:4f:94:eb:4b:f1:a0:09:
10:32:ae:df:23:61:56:aa:3d:e9:71:ce:90:43:5b:b4:36:9b:
f7:23:d0:83:10:0e:25:6d:1d:3d:1f:b1:f7:26:4c:b1:05:8e:
da:de:8b:1e:ee:5b:23:1c:d2:78:50:75:3a:65:38:06:40:1c:
ee:6f:f6:6b:75:86:93:7f:b2:70:39:f3:79:32:39:02:41:d8:
9c:b3:b3:3b:e5:38:df:f0:e5:53:5d:8c:a4:10:d1:99:16:db:
b1:94:5a:c6:b7:bf:8b:d8:74:a1:ea:b7:89:38:a1:15:69:b9:
06:34:eb:a9:e3:de:91:cf:82:c1:fe:4a:a7:0d:f7:67:de:e3:
26:de:e6:81:e5:0c:af:12:82:5f:2e:8c:88:c8:07:2d:96:83:
a0:80:81:d5:95:15:21:d6:4f:4f:0b:04:9a:e2:17:f1:bb:39:
2b:50:b5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:59 2026 by rpki-client