
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
File: YQPK5q-yXkC6nl2kxULP4JtndCo.mft (raw, json)
Hash identifier: suejRtLLpeQVr7KlxAttZTAmjO0tfKC6Yh3Gv8DF0ek=
Subject key identifier: 87:13:88:7F:05:56:2C:F3:38:A1:47:A2:61:77:AC:CF:7B:36:D6:DF
Authority key identifier: 61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A
Certificate issuer: /CN=A9186193/serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A
Certificate serial: 0A25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
Manifest number: 0A1A
Signing time: Tue 24 Mar 2026 19:35:09 +0000
Manifest this update: Tue 24 Mar 2026 19:35:08 +0000
Manifest next update: Tue 31 Mar 2026 19:35:08 +0000
Files and hashes: 1: YQPK5q-yXkC6nl2kxULP4JtndCo.crl (hash: zWi+kzsva+xnQLMtOqY5TvJ0O1EFR/upn74JC+SVtnA=)
2: B781FD5C8FB411EAA396FB5CC4F9AE02.roa (hash: h1FScDmATHfunMcIYToAdhRcFfBgHG5Y3p1Jl4Wlwi0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl
rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:35:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2597 (0xa25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186193, serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A
Validity
Not Before: Mar 24 19:35:08 2026 GMT
Not After : Mar 31 19:35:08 2026 GMT
Subject: CN=69c2e76d-e8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f1:2a:41:bb:bc:62:96:3a:61:2b:bc:8d:e4:
f8:ab:96:46:4d:15:20:a8:35:4c:0d:e7:e9:df:c8:
68:6b:04:7e:dd:a5:7e:29:7c:2a:8d:42:0a:fa:19:
33:d3:0f:83:8e:d3:70:6b:39:15:24:5d:7d:43:a4:
bc:64:16:5e:d0:d0:60:81:83:14:61:cd:f1:7f:07:
75:75:22:05:5f:ed:6b:cc:05:46:31:e4:45:4c:43:
55:f2:2e:a0:e7:73:e4:df:ee:a4:0f:83:67:34:ef:
54:8f:61:42:54:49:3c:4b:67:6d:e3:f4:b5:e3:57:
a8:fa:d7:e9:33:fe:6f:d7:e0:32:c8:57:61:10:2d:
66:c8:f2:9d:12:da:bd:4b:5c:68:d6:70:69:11:f6:
f5:21:57:a2:d6:f3:d4:39:39:2c:df:5f:fc:61:e6:
51:d1:15:77:48:4e:32:a6:a2:a1:0f:36:2f:8d:77:
86:a4:97:5a:7d:ba:22:03:bb:3d:d2:4e:f6:20:9b:
9e:10:ac:12:a2:9d:1d:fe:fe:77:59:cf:b4:df:1c:
d6:b9:ad:77:b3:00:e4:4c:14:8a:04:d2:ae:1e:98:
9e:83:d2:73:d4:93:60:4b:5c:f7:2e:e3:1b:d5:7b:
62:0e:48:b3:09:65:d8:42:85:29:7d:c4:16:25:aa:
19:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:13:88:7F:05:56:2C:F3:38:A1:47:A2:61:77:AC:CF:7B:36:D6:DF
X509v3 Authority Key Identifier:
keyid:61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:be:45:c9:80:4e:22:96:8a:59:fa:16:2d:58:13:de:91:59:
f9:3b:b6:26:b9:4c:3b:7e:94:d7:b6:0e:a1:78:16:5b:f4:d8:
99:ec:56:2c:c9:e8:44:4e:a4:20:90:de:fc:f0:93:8a:5f:17:
e1:47:30:9c:6e:cd:15:9f:42:a4:57:37:96:56:cb:d0:0f:d3:
d1:ec:e5:f6:aa:70:c3:bb:5d:3c:7c:e7:eb:ce:12:4d:5f:ae:
e1:52:f3:45:c7:2b:f1:cb:fb:f5:06:26:90:8a:75:ac:2c:b0:
3b:0c:06:2d:96:ad:02:6f:f4:c4:b1:fe:01:de:f7:17:8f:cd:
f1:4e:2f:6e:62:3a:c0:99:fb:03:56:d7:45:9c:81:68:41:c0:
de:bf:f7:05:0c:e3:b0:fc:59:27:f6:c7:6b:bf:37:ab:7f:ed:
00:61:71:45:5f:a9:3d:67:5e:aa:5d:cf:ae:cd:e8:13:16:e7:
d4:9b:1d:db:84:b8:42:61:e2:cb:90:50:e9:03:ae:5a:c8:fc:
e2:fd:c7:9f:af:35:d7:17:1c:40:cb:a4:ee:de:b4:70:f7:46:
a0:61:30:9d:b3:3c:c7:c1:f1:cd:27:b3:14:ee:34:eb:e9:66:
2c:8f:c0:bf:8b:07:7f:07:6e:e5:5d:06:77:c4:5a:8e:bb:77:
20:62:1e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:45:56 2026 by rpki-client