
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
File: YBi5hcOZywcxwWNM_ktHkS8q9dE.mft (raw, json)
Hash identifier: 8id/d3eFgqAYnm3Ev7VPCIQHepabPrJ9cnAV/78jjqQ=
Subject key identifier: A4:77:D6:FD:B1:62:DB:A2:E6:84:A9:48:93:11:16:B0:FB:4B:D4:5C
Authority key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
Certificate issuer: /CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Certificate serial: 0276
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
Manifest number: 026F
Signing time: Wed 25 Mar 2026 01:26:56 +0000
Manifest this update: Wed 25 Mar 2026 01:26:55 +0000
Manifest next update: Wed 01 Apr 2026 01:26:55 +0000
Files and hashes: 1: YBi5hcOZywcxwWNM_ktHkS8q9dE.crl (hash: b6GnZm7mgR2wklUWxngoF7DbWkSvhzl8TIvH3FgaH7o=)
2: C386C06A706211EDA9CCDB76C4F9AE02.roa (hash: /uGLQIrlBTxMwkdtG3jyxMXG6mL7PGCkVKPH/j33iG8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 630 (0x276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183BA5, serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Validity
Not Before: Mar 25 01:26:55 2026 GMT
Not After : Apr 1 01:26:55 2026 GMT
Subject: CN=69c339df-3c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:ed:57:50:a0:77:de:b5:79:c0:f2:0f:92:
96:38:29:20:30:9c:9c:8e:21:28:6a:3f:dc:16:08:
88:9b:41:81:a8:38:64:cb:e9:30:02:e8:80:a5:8f:
22:70:b0:9f:5c:90:79:69:ff:69:e3:b7:d6:5a:4d:
6e:ee:25:ac:8f:41:d2:48:91:10:86:ff:d4:1f:45:
88:44:91:21:74:48:de:db:ff:51:9a:c1:85:3d:ac:
29:b6:5f:3a:30:ea:3e:18:96:ba:ea:3f:ca:57:5e:
48:30:72:a1:95:5f:43:8d:bd:65:69:b2:c6:1b:73:
55:1b:97:13:e3:75:ed:9b:eb:8e:6a:dc:e8:cc:e5:
ce:c0:2c:37:fc:c9:b2:4f:15:a9:d5:f0:c9:72:f5:
20:49:b2:d7:1b:05:e7:c8:0d:15:70:9b:4d:16:07:
27:e6:92:59:75:5f:d2:1f:fc:c3:e7:e2:d6:ec:34:
97:cf:06:25:28:f0:ba:1c:a0:d3:22:48:b4:19:98:
66:6b:4d:ce:24:34:fa:a9:df:c3:1f:c5:34:44:ce:
6b:7e:0b:c2:03:62:5c:01:72:d0:15:af:e2:58:66:
ea:d5:2e:a5:50:58:d7:b2:ea:49:61:cd:6c:44:db:
54:43:f3:45:f5:1c:40:1e:8a:31:61:c2:4e:08:a8:
4c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:77:D6:FD:B1:62:DB:A2:E6:84:A9:48:93:11:16:B0:FB:4B:D4:5C
X509v3 Authority Key Identifier:
keyid:60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:69:46:df:52:e9:9e:59:04:33:21:59:9a:5d:c7:14:c2:e7:
04:7b:86:ef:2a:f8:0e:3d:3e:6d:0f:e8:b8:f4:02:2f:07:68:
4f:16:b9:06:98:3f:ef:b9:84:95:48:1f:78:a6:67:74:61:4e:
5d:b1:3a:6c:4c:6d:4e:44:69:f0:a4:f5:a0:f5:67:37:4c:65:
e5:0e:72:bd:7e:d2:db:be:c1:a7:2f:dd:9f:20:54:75:b8:0a:
f7:51:9b:84:09:7c:08:19:dd:14:d3:77:56:0a:f6:c7:90:1e:
33:4f:2c:34:cf:c4:1f:6c:84:ae:70:3e:b3:ba:d8:e2:e9:7b:
00:eb:4c:49:ff:f6:d7:d3:53:ea:74:1e:5b:4c:7f:29:3d:c6:
60:71:68:2c:30:e5:7f:69:fd:42:67:36:55:a9:97:cb:3d:da:
ad:77:26:5f:a9:4d:ba:33:0c:65:b4:fc:c0:a7:a9:11:d1:48:
b6:06:f9:d3:91:79:5f:18:bf:34:72:74:4d:19:ce:2d:09:2c:
1d:ea:ce:49:9a:0b:0e:59:30:5e:05:e3:0d:3a:2b:f0:51:a0:
14:80:26:5f:7d:65:31:af:f1:6b:60:55:67:62:d5:1f:b4:90:
0e:1a:f7:d7:6c:40:76:51:77:cb:22:45:9a:d7:30:e9:a7:e1:
b8:b9:5d:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNCQTUxMTAvBgNVBAUTKDYwMThCOTg1QzM5OUNCMDczMUMxNjM0Q0ZFNEI0Nzkx
MkYyQUY1RDEwHhcNMjYwMzI1MDEyNjU1WhcNMjYwNDAxMDEyNjU1WjAYMRYwFAYD
VQQDEw02OWMzMzlkZi0zYzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyXftV1Cgd961ecDyD5KWOCkgMJycjiEoaj/cFgiIm0GBqDhky+kwAuiApY8i
cLCfXJB5af9p47fWWk1u7iWsj0HSSJEQhv/UH0WIRJEhdEje2/9RmsGFPawptl86
MOo+GJa66j/KV15IMHKhlV9Djb1labLGG3NVG5cT43Xtm+uOatzozOXOwCw3/Mmy
TxWp1fDJcvUgSbLXGwXnyA0VcJtNFgcn5pJZdV/SH/zD5+LW7DSXzwYlKPC6HKDT
Iki0GZhma03OJDT6qd/DH8U0RM5rfgvCA2JcAXLQFa/iWGbq1S6lUFjXsupJYc1s
RNtUQ/NF9RxAHooxYcJOCKhMJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKR31v2x
Ytui5oSpSJMRFrD7S9RcMB8GA1UdIwQYMBaAFGAYuYXDmcsHMcFjTP5LR5EvKvXR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0JBNS8yODYyMENDNDcw
NUUxMUVEQkMwN0YxNThDNEY5QUUwMi9ZQmk1aGNPWnl3Y3h3V05NX2t0SGtTOHE5
ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lCaTVoY09aeXdjeHdXTk1fa3RIa1M4cTlkRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
M0JBNS8yODYyMENDNDcwNUUxMUVEQkMwN0YxNThDNEY5QUUwMi9ZQmk1aGNPWnl3
Y3h3V05NX2t0SGtTOHE5ZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACWlG31LpnlkEMyFZml3HFMLnBHuG7yr4Dj0+bQ/ouPQCLwdoTxa5Bpg/77mE
lUgfeKZndGFOXbE6bExtTkRp8KT1oPVnN0xl5Q5yvX7S277Bpy/dnyBUdbgK91Gb
hAl8CBndFNN3Vgr2x5AeM08sNM/EH2yErnA+s7rY4ul7AOtMSf/219NT6nQeW0x/
KT3GYHFoLDDlf2n9Qmc2VamXyz3arXcmX6lNujMMZbT8wKepEdFItgb505F5Xxi/
NHJ0TRnOLQksHerOSZoLDlkwXgXjDTor8FGgFIAmX31lMa/xa2BVZ2LVH7SQDhr3
12xAdlF3yyJFmtcw6afhuLldzw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:04:15 2026 by rpki-client