
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft
File: yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft (raw, json)
Hash identifier: Q1U/4vFm3jutR37Muz6/w9HEKZIEonKLEbF4RWIt70A=
Subject key identifier: 6F:79:5A:7F:4A:47:38:3B:E6:69:51:A8:64:C9:12:23:74:82:76:21
Authority key identifier: C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0
Certificate issuer: /CN=A917E1FA/serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0
Certificate serial: A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft
Manifest number: 9B
Signing time: Wed 25 Mar 2026 06:39:14 +0000
Manifest this update: Wed 25 Mar 2026 06:39:13 +0000
Manifest next update: Wed 01 Apr 2026 06:39:13 +0000
Files and hashes: 1: yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl (hash: jqJ8Dlf6igFkpvhyU7pLGYGsQAzJ39xXsLYDXBLkB9k=)
2: 7354ACC0472811F0ADE2D44BC4F9AE02.roa (hash: znoNuAslfVcaeYT9Qtb9J+D936zhsxuFnvCQ4z32+wE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl
rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:39:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FA, serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0
Validity
Not Before: Mar 25 06:39:13 2026 GMT
Not After : Apr 1 06:39:13 2026 GMT
Subject: CN=69c38312-650b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:45:e5:5b:8b:fa:81:7e:ac:6d:08:05:82:35:
49:a9:88:7c:25:e9:92:dc:6b:f5:80:bc:ce:10:6d:
52:fd:ad:53:dd:14:95:46:3b:28:89:a4:06:61:41:
48:7d:da:87:d3:1e:75:41:95:48:69:89:3a:b1:92:
d8:3b:da:15:f0:2b:b0:1d:ae:40:ad:56:3b:6b:83:
59:cc:a3:ce:9b:58:4e:d6:51:8d:1f:3c:80:74:f2:
25:68:13:6d:36:a1:8e:ad:30:ae:49:b8:0b:c1:d2:
0d:b7:ca:2e:bc:6a:32:13:32:24:80:43:0b:01:88:
b0:69:54:95:db:b0:ad:9b:4c:03:e2:4d:61:b1:e1:
7f:10:5f:bd:95:49:df:07:77:e1:94:9b:16:91:fb:
ec:6b:bc:8a:9c:5b:d5:1f:11:86:9a:06:8e:0b:c8:
4a:43:b7:55:d6:f5:79:cf:93:5c:02:c5:15:a4:fd:
94:66:0a:19:0e:7e:06:98:7d:ad:2e:3d:40:7e:0f:
52:5a:ab:2c:54:b4:7e:b5:71:b0:cb:50:fc:58:b1:
54:14:22:29:36:21:66:5f:e6:ae:a3:a4:25:ba:8c:
8d:0e:a9:d8:c7:11:eb:21:8f:72:bf:5d:41:c7:ae:
2c:e2:9b:fb:60:bf:87:7b:27:e4:1d:4c:ef:d9:0b:
39:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:79:5A:7F:4A:47:38:3B:E6:69:51:A8:64:C9:12:23:74:82:76:21
X509v3 Authority Key Identifier:
keyid:C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:ae:6d:d2:f7:c4:04:14:14:70:f7:c1:56:b0:b6:25:1b:cf:
40:20:c0:c1:f8:ac:49:57:7f:a0:30:0b:46:03:b4:a6:03:15:
9c:a1:89:f1:af:99:f7:47:d6:d5:c4:04:24:87:a1:fb:80:9d:
e1:1c:da:fb:74:8e:4f:ea:88:bd:a6:af:42:f2:6b:50:3e:81:
ec:9e:b3:b2:62:dd:54:d6:16:69:ae:6e:cf:3f:ca:7b:48:71:
03:51:3a:58:4a:27:05:82:d7:5e:3c:53:8f:d2:4c:6f:19:72:
e7:52:81:37:34:aa:c6:11:43:7e:a1:67:e0:9f:42:c9:f6:76:
73:26:85:e5:16:15:d8:ce:82:73:bc:e4:b4:16:21:65:06:9d:
b6:be:40:8b:74:2d:5e:71:04:7a:f9:a3:64:e4:3f:c7:b3:c4:
a7:f0:ed:5f:6b:fb:b0:80:a4:8e:93:90:35:75:49:fa:be:9c:
9b:fb:b4:1e:d9:e6:58:0d:79:5d:16:da:2d:aa:87:5e:1d:b0:
c0:4f:23:68:0f:3d:75:74:ff:cd:a6:9a:da:aa:ba:68:a8:16:
bd:fc:f3:82:66:6c:5a:92:17:34:40:34:48:de:51:d0:b9:60:
ab:1b:53:96:ba:b9:83:df:9a:68:28:22:b0:ca:42:ad:04:8c:
32:10:0d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:44 2026 by rpki-client