
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
File: YiOr1va2e6_v4-c2Rv16ZuECFL4.mft (raw, json)
Hash identifier: u+qimdph1w5E+LCWwYLEv/cOwsDkKo+iY0kkj02xdi4=
Subject key identifier: 09:81:33:94:30:95:B7:87:AD:29:9F:B6:4A:02:0C:E7:A6:79:79:3D
Authority key identifier: 62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE
Certificate issuer: /CN=A9176FD9/serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
Certificate serial: 017F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
Manifest number: 0162
Signing time: Wed 25 Mar 2026 04:10:41 +0000
Manifest this update: Wed 25 Mar 2026 04:10:41 +0000
Manifest next update: Wed 01 Apr 2026 04:10:41 +0000
Files and hashes: 1: YiOr1va2e6_v4-c2Rv16ZuECFL4.crl (hash: AHIiJyLfzJ4Eumzco8S76cf0zznrWb5Ae3PoAPmRQs0=)
2: 884A59828D3211EF9E092384C4F9AE02.roa (hash: 6cl4hRPCA+MAEDHJqAR36U+3vHDUJ12lZhGnjQOUElU=)
3: 878615B88D3211EF9E092384C4F9AE02.roa (hash: +Oriw3lUJw94Q18jNkVCiDGs/4UmxApuASFaCH+rWfE=)
4: A937C2200FA511EFBDB06936C4F9AE02.roa (hash: g2XOcezvQ7KxIm645xlMyxErFktIXV60RTFqR5uY2Hw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl
rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383 (0x17f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176FD9, serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
Validity
Not Before: Mar 25 04:10:41 2026 GMT
Not After : Apr 1 04:10:41 2026 GMT
Subject: CN=69c36041-0aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:15:8e:49:a3:6a:ac:35:5e:70:0a:96:75:9e:
95:f4:6e:ff:e7:44:c0:14:82:82:60:56:a9:15:55:
0d:9d:e8:2e:6b:11:74:c7:b6:61:59:49:c9:6f:0e:
7c:76:63:2e:12:b6:6b:bd:ec:7d:59:9a:29:b0:1e:
96:58:6d:24:97:0d:9c:c3:a7:84:bd:15:2e:96:38:
c0:2b:a8:de:5b:b4:41:d0:b1:39:84:51:44:5d:e9:
42:bb:48:cc:a7:41:b8:01:d7:33:be:b5:0d:09:ec:
b0:c2:ff:f9:b4:39:af:cd:73:89:06:b3:b0:9b:f9:
e0:5a:43:ac:34:45:b6:23:fa:57:f2:b6:93:04:d3:
e4:21:ca:52:ee:b7:7f:6e:f4:dc:33:40:85:3e:c6:
9d:f4:b8:e5:05:3d:64:49:85:4c:21:e2:9e:eb:23:
6b:a8:b3:25:6b:d0:92:93:90:e4:83:ef:cb:17:c0:
b8:59:e0:8a:81:6f:99:43:ad:b4:00:d9:21:77:a9:
ce:75:20:38:b9:4a:4a:6e:c6:d5:9b:5d:f4:35:aa:
f6:f1:37:fe:5a:ac:49:35:ad:e2:b0:f0:7b:0b:b4:
3b:c9:32:98:ad:a8:69:f5:b1:f0:79:3e:ed:9c:fa:
3f:e5:62:9b:5d:0b:9f:bb:26:93:1c:a3:8b:07:bb:
59:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:81:33:94:30:95:B7:87:AD:29:9F:B6:4A:02:0C:E7:A6:79:79:3D
X509v3 Authority Key Identifier:
keyid:62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:be:ae:b1:e0:8f:4c:b2:98:a6:2e:26:13:b3:a2:ec:4f:32:
5c:de:da:a1:df:18:a6:48:7f:1d:37:eb:ff:7e:12:f9:7e:8c:
81:6c:e1:af:9f:45:40:bb:90:34:28:34:48:9c:89:d8:6e:f1:
e4:44:73:ea:4f:1f:c8:d4:9e:db:34:a9:4b:c7:64:3f:f0:38:
72:c4:00:0e:65:cb:6c:d8:97:eb:d4:c3:dd:65:04:e8:0f:f9:
95:0f:be:be:23:fc:09:e5:05:a1:8b:a8:54:5e:43:26:e5:f6:
df:67:b8:83:7c:85:8f:2f:34:49:a3:69:13:24:50:48:49:aa:
52:75:19:7e:81:82:31:e2:44:19:69:c4:23:11:0b:f1:27:34:
a9:97:f2:86:5b:a7:8e:3d:05:34:9b:77:46:4d:e9:0e:ef:65:
6b:4b:b4:04:dc:bc:48:7f:4b:f2:de:a4:97:ee:f3:f3:02:cc:
2c:f9:c5:03:90:9e:a8:73:7c:08:3e:18:fa:36:45:de:12:66:
62:3e:0a:61:b9:fd:03:a3:39:12:e6:37:29:b8:95:ea:8a:c0:
75:02:6d:71:3c:d8:4e:08:92:58:ba:43:99:f1:5c:00:16:2f:
57:71:b0:ea:30:0f:4d:4e:85:56:74:82:b8:6f:21:23:d7:1d:
3d:06:61:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:27:11 2026 by rpki-client