
$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft
File: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft (raw, json)
Hash identifier: w3ZURCdZDkpFc7xdrnW3MID7PXWVoKlyRWuOKGFG39o=
Subject key identifier: 3B:44:2A:A2:BF:A1:19:58:13:39:61:3C:55:AA:65:87:B4:B0:6A:41
Authority key identifier: B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94
Certificate issuer: /CN=A916988B/serialNumber=B58368616439C750D2C696643952ED4F15036594
Certificate serial: 06DC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft
Manifest number: 06DC
Signing time: Tue 24 Mar 2026 21:42:01 +0000
Manifest this update: Tue 24 Mar 2026 21:42:00 +0000
Manifest next update: Tue 31 Mar 2026 21:42:00 +0000
Files and hashes: 1: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl (hash: yrTffl2IYV6a6/szhF23EBnyR4mG1sKQV8YvDphM1iQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl
rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:41:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1756 (0x6dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916988B, serialNumber=B58368616439C750D2C696643952ED4F15036594
Validity
Not Before: Mar 24 21:42:00 2026 GMT
Not After : Mar 31 21:42:00 2026 GMT
Subject: CN=69c30528-2662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:77:76:42:0f:81:e6:01:01:24:d8:4b:8f:99:
d5:0a:91:95:6b:b2:ec:ea:96:7f:b6:7d:23:4c:30:
06:cc:03:b5:ca:df:37:0c:23:80:28:67:82:6f:4b:
86:04:d0:ae:a8:c8:12:f1:76:23:ac:40:87:a7:ca:
fd:32:85:61:cd:3d:ff:e9:d3:82:20:15:a1:1d:27:
80:cb:5d:12:d1:cc:26:45:13:ff:62:97:ad:f3:81:
6e:bc:3f:8b:eb:de:a0:a4:0c:3b:02:7c:a2:69:2a:
80:2d:c3:52:ce:5b:f1:be:6b:41:8c:09:4e:07:ef:
dc:4d:cb:58:00:55:25:f3:82:63:47:43:7c:ed:33:
fb:6e:76:19:6c:8e:9b:f2:c4:28:89:39:b7:d1:34:
e1:0f:db:68:7f:52:9b:db:86:27:24:03:10:a9:73:
e2:44:81:21:1b:e8:e6:1b:c0:48:8b:9a:bf:fb:6e:
c0:a8:3a:25:81:a6:86:7a:c0:01:03:26:4e:11:d4:
e3:d1:4a:36:70:dc:5a:1b:85:91:82:f2:e7:bd:05:
b8:40:03:06:08:d6:72:d5:0e:cb:f3:7e:95:e4:f9:
e0:d2:27:ba:7d:89:47:be:e7:fa:66:cf:f6:21:db:
c1:8b:e6:4f:29:cc:42:e7:cc:90:75:4a:28:e9:79:
75:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:44:2A:A2:BF:A1:19:58:13:39:61:3C:55:AA:65:87:B4:B0:6A:41
X509v3 Authority Key Identifier:
keyid:B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:ac:4b:b3:f9:11:1b:d4:f1:14:49:e9:7b:5b:96:76:c9:52:
b1:02:ce:db:be:44:a6:9c:b6:0d:ee:f9:dc:c1:c6:97:be:b4:
41:e8:de:f6:a5:6b:b2:7b:eb:36:be:88:0d:b4:8f:b6:d3:59:
9f:d8:29:41:6c:99:38:8a:48:b0:c8:9a:bd:1d:39:bf:50:cc:
56:8c:75:40:34:32:34:a4:97:31:cc:31:89:74:84:9b:c7:b5:
3b:98:43:6c:01:ee:d6:d5:88:73:6b:ef:33:e5:e3:84:50:a8:
fa:4b:36:f2:eb:b0:9c:98:6b:84:47:c3:bf:54:ec:f6:f2:5b:
a2:b2:fb:d3:ff:82:01:97:18:4d:83:97:12:55:a6:10:2a:9b:
36:fa:c5:79:13:44:d9:60:98:21:1b:5e:e5:43:e7:63:09:a4:
73:39:89:70:9c:0b:70:ea:44:e7:6f:0c:72:5a:43:31:0b:ae:
8f:02:1a:fd:43:d6:05:f8:d3:e4:df:dd:7b:45:07:2f:fe:5c:
ff:42:f8:d0:d7:e4:4c:ad:44:ac:77:1b:a2:bf:27:c8:de:f3:
e7:3e:e2:36:2b:53:18:47:bc:83:bc:f9:ea:80:60:d4:d4:57:
5e:c3:c7:e9:b2:d6:6e:74:ec:e5:ff:0e:9a:63:66:87:f7:6f:
61:b3:a9:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk4OEIxMTAvBgNVBAUTKEI1ODM2ODYxNjQzOUM3NTBEMkM2OTY2NDM5NTJFRDRG
MTUwMzY1OTQwHhcNMjYwMzI0MjE0MjAwWhcNMjYwMzMxMjE0MjAwWjAYMRYwFAYD
VQQDEw02OWMzMDUyOC0yNjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtnd2Qg+B5gEBJNhLj5nVCpGVa7Ls6pZ/tn0jTDAGzAO1yt83DCOAKGeCb0uG
BNCuqMgS8XYjrECHp8r9MoVhzT3/6dOCIBWhHSeAy10S0cwmRRP/Ypet84FuvD+L
696gpAw7AnyiaSqALcNSzlvxvmtBjAlOB+/cTctYAFUl84JjR0N87TP7bnYZbI6b
8sQoiTm30TThD9tof1Kb24YnJAMQqXPiRIEhG+jmG8BIi5q/+27AqDolgaaGesAB
AyZOEdTj0Uo2cNxaG4WRgvLnvQW4QAMGCNZy1Q7L836V5Png0ie6fYlHvuf6Zs/2
IdvBi+ZPKcxC58yQdUoo6Xl1xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDtEKqK/
oRlYEzlhPFWqZYe0sGpBMB8GA1UdIwQYMBaAFLWDaGFkOcdQ0saWZDlS7U8VA2WU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi80NjdFRTY5RThE
NkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgxRFN4cFprT1ZMdFR4VURa
WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3RZTm9ZV1E1eDFEU3hwWmtPVkx0VHhVRFpaUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OTg4Qi80NjdFRTY5RThENkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgx
RFN4cFprT1ZMdFR4VURaWlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzaxLs/kRG9TxFEnpe1uWdslSsQLO275Eppy2De753MHGl760Qeje9qVrsnvr
Nr6IDbSPttNZn9gpQWyZOIpIsMiavR05v1DMVox1QDQyNKSXMcwxiXSEm8e1O5hD
bAHu1tWIc2vvM+XjhFCo+ks28uuwnJhrhEfDv1Ts9vJborL70/+CAZcYTYOXElWm
ECqbNvrFeRNE2WCYIRte5UPnYwmkczmJcJwLcOpE528MclpDMQuujwIa/UPWBfjT
5N/de0UHL/5c/0L40NfkTK1ErHcbor8nyN7z5z7iNitTGEe8g7z56oBg1NRXXsPH
6bLWbnTs5f8OmmNmh/dvYbOpsw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:17:11 2026 by rpki-client