
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft
File: _Yje-aa92-pZOJ7cYXGq3KEGtQk.mft (raw, json)
Hash identifier: ySsmdJaLyA4lqh/Y5oGgNxLSs0K69OyfkwDGNOso6OU=
Subject key identifier: 6E:9F:BB:45:06:F9:E3:58:C0:36:16:33:E1:A5:01:20:27:64:5C:A3
Authority key identifier: FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09
Certificate issuer: /CN=A9172FC5/serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft
Manifest number: FC
Signing time: Fri 27 Mar 2026 05:44:25 +0000
Manifest this update: Fri 27 Mar 2026 05:44:25 +0000
Manifest next update: Fri 03 Apr 2026 05:44:25 +0000
Files and hashes: 1: _Yje-aa92-pZOJ7cYXGq3KEGtQk.crl (hash: t8IILkZvHe7SwCg9OIDePAuEgIWtpMvQXsjR3gOd650=)
2: 2D810A88AB4011EF849D9515C4F9AE02.roa (hash: ReDU3pM6puyTOqvPDYn/OPZQZEhbfRxZyleb6fyedWE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl
rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 05:44:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172FC5, serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509
Validity
Not Before: Mar 27 05:44:25 2026 GMT
Not After : Apr 3 05:44:25 2026 GMT
Subject: CN=69c61939-e984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:36:af:d3:20:2e:a6:47:07:dd:4c:43:f2:
b8:87:54:5e:70:db:ec:6b:4f:17:62:f8:1e:2e:c9:
4d:a3:63:ae:90:cf:ad:f1:00:ec:df:bc:0b:7e:86:
5c:16:91:38:f1:a8:48:3e:77:02:1d:81:3b:cf:18:
76:9b:92:b3:dd:24:6b:10:24:4d:32:f2:35:32:0c:
fb:b0:02:33:4f:8e:3a:c3:d5:9c:67:00:58:bc:ba:
8f:c5:59:8e:1f:7b:2e:b4:51:fa:29:42:e5:d7:13:
13:e0:0b:43:79:d2:bb:3f:80:4e:ac:4a:46:b7:3e:
6e:96:79:cf:8f:7e:8d:98:15:9c:48:ac:80:e4:4d:
08:1a:e3:72:83:83:80:e4:5d:9f:2b:48:bb:ba:7f:
51:fa:d8:04:e6:fd:4c:65:4a:4a:7e:69:7a:5a:b7:
a9:32:ab:a5:61:47:2e:b3:7a:62:7e:c4:29:78:66:
90:65:d4:ce:c2:85:6f:93:43:c7:b1:7a:00:ab:70:
19:7a:d2:21:cc:50:bf:41:f9:d3:1b:bd:47:95:e5:
1d:2e:48:96:5c:b2:95:1a:81:7d:0a:69:a7:ea:c1:
66:56:c6:c6:43:c6:b4:cf:2f:f5:03:23:b6:11:92:
14:da:1a:9c:88:5a:60:23:fa:40:54:c4:bb:4a:c0:
71:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9F:BB:45:06:F9:E3:58:C0:36:16:33:E1:A5:01:20:27:64:5C:A3
X509v3 Authority Key Identifier:
keyid:FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f7:ca:d6:dc:e7:e9:83:6f:4d:53:d9:36:e1:dd:66:49:62:
b6:a6:da:0e:06:f2:5f:75:01:f2:72:cb:0c:1b:8d:f0:35:ad:
11:00:a7:95:48:7a:ca:5e:b0:a7:1e:0a:85:ba:15:25:38:bf:
77:f1:2a:31:39:d8:a0:f7:6c:13:c2:04:74:db:e4:45:3e:eb:
e6:2b:11:94:61:b6:d0:08:eb:26:ac:5a:fd:e9:a6:5b:fd:40:
89:88:3b:7f:77:30:0b:28:33:ec:19:42:55:87:fa:91:75:e1:
f0:8b:54:5e:de:30:fe:c7:a8:63:a9:bc:18:5a:22:c0:88:7f:
f6:0e:c6:95:69:23:a4:3c:ee:92:d1:7c:65:61:9f:8a:3b:fd:
42:1d:c7:ab:55:c7:40:73:3e:fe:ae:f5:49:e5:3b:83:18:ee:
47:48:08:23:bd:83:1a:57:56:92:f6:21:b7:80:d0:96:a2:37:
4d:57:f5:23:1f:56:cd:e6:d3:be:47:d6:08:98:61:fe:a4:d2:
73:b1:ac:33:68:6c:f3:9c:13:af:0d:2b:21:12:9f:a9:16:fd:
62:16:38:f8:fc:56:f7:f8:c7:9c:11:f3:e1:dc:df:c3:41:4a:
86:3e:ee:0d:fe:18:db:6c:2e:02:74:41:02:72:23:c3:9e:b2:
6d:a1:9b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:44:14 2026 by rpki-client