
$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
File: YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft (raw, json)
Hash identifier: E/U2cbjT4j7lKyXx8FPa+RSu6vmQdpVswkvD6twsYx8=
Subject key identifier: 6C:5A:FA:03:21:5C:EA:42:6F:1E:18:A1:3D:EA:40:A8:F8:B6:08:4D
Authority key identifier: 60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5
Certificate issuer: /CN=A917799C/serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5
Certificate serial: 96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
Manifest number: 91
Signing time: Wed 25 Mar 2026 06:45:20 +0000
Manifest this update: Wed 25 Mar 2026 06:45:19 +0000
Manifest next update: Wed 01 Apr 2026 06:45:19 +0000
Files and hashes: 1: YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl (hash: xAGUkMuFaxd38RuXMfbPv1RGvbYItoczYhNg+c70bW4=)
2: 05939A1C554611F09F737331C4F9AE02.roa (hash: gUXNFVaxSQufYdqyGN4kaVGgCYgVtungC4DrMnEIpG0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl
rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917799C, serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5
Validity
Not Before: Mar 25 06:45:19 2026 GMT
Not After : Apr 1 06:45:19 2026 GMT
Subject: CN=69c3847f-51e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:45:94:4b:10:8d:96:6f:0b:88:0e:f0:59:18:
44:ac:5b:6f:e7:30:5d:6f:98:f3:28:cb:86:3e:05:
1a:9c:df:f1:25:9f:9e:54:87:0f:2a:5f:c3:12:44:
0b:fa:fd:c4:c7:08:51:bd:7b:db:ce:62:c9:6e:82:
88:59:0a:94:55:fa:7b:ec:1f:46:6b:b6:b4:71:7a:
de:e8:f6:b3:2f:47:43:34:a1:59:d7:9e:96:74:03:
e3:c4:ed:92:7b:48:88:32:58:9f:31:26:c8:5f:c7:
5f:92:a7:93:06:01:cd:d7:9d:29:42:69:8c:ca:1b:
b9:b5:ec:f7:64:e0:3b:16:fe:3e:5b:d4:e8:83:a9:
26:40:ee:6c:b0:e2:c9:d9:ba:7d:6c:86:3e:e7:0b:
a3:69:de:78:2c:1d:a6:17:d3:bf:d2:b2:0d:54:1d:
14:54:c0:33:04:71:7d:06:7c:f5:a2:76:d2:14:f5:
91:eb:38:54:55:a6:95:37:3b:95:c9:09:d5:08:89:
0e:f5:7b:9e:f0:5d:be:bc:da:f2:20:c9:4d:43:7d:
a5:d8:7a:4d:aa:51:50:9e:47:d3:26:16:29:51:6e:
3f:97:95:a0:fc:7f:25:bd:49:a4:00:fe:b8:4c:0f:
5f:ec:c8:d5:46:d4:24:16:7f:00:21:15:11:59:ba:
d2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5A:FA:03:21:5C:EA:42:6F:1E:18:A1:3D:EA:40:A8:F8:B6:08:4D
X509v3 Authority Key Identifier:
keyid:60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:26:18:d3:85:df:90:3d:63:5c:a7:d1:6a:d0:bb:34:9a:cc:
d1:ef:e8:73:a1:80:41:5e:1c:68:99:e5:74:cc:1f:f4:3c:fc:
5a:95:57:7f:e9:8d:92:ab:6f:e7:b9:29:75:67:be:e8:fc:c5:
b3:85:06:59:ea:e1:3c:9c:c8:9e:39:c3:61:dd:4a:c9:bc:65:
81:b6:2c:aa:92:67:56:78:9a:f9:35:1e:45:db:a7:e2:20:d7:
0f:55:38:af:46:41:d0:51:ad:e2:74:2f:68:da:25:e7:0e:ef:
14:d5:cd:83:00:6e:db:37:97:db:68:05:b4:bd:f1:0b:29:d6:
32:78:68:8d:2e:b3:3a:3d:db:11:a3:13:1d:0f:e5:55:af:c1:
e4:e7:2d:a0:9f:d0:4d:0f:96:0b:36:61:3a:ad:7c:75:a8:9d:
0d:56:ee:63:87:ba:de:19:5a:1f:f8:2b:24:a1:63:d2:86:e3:
30:52:15:c9:ce:49:73:94:12:3f:cb:a6:fd:13:ba:53:bb:89:
de:02:43:e5:c0:de:8e:01:1d:90:32:b1:c6:5c:59:18:75:32:
4e:90:34:51:ef:4d:20:73:ae:d8:45:67:af:97:2c:08:48:8a:
8e:6d:d8:65:66:67:f4:ee:b5:93:e6:05:d9:95:7e:64:a4:3f:
60:7d:9f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:03:37 2026 by rpki-client