
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
File: y7RecR9QOMR1deb07gwOjFZ744g.mft (raw, json)
Hash identifier: PUXhhkHiXMdukbNlGzjsEKrfKw0XduuX/rbFTRWBA2E=
Subject key identifier: E8:66:15:27:E4:E1:D7:E4:4E:C7:A6:91:66:C2:DD:CF:7F:81:78:24
Authority key identifier: CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88
Certificate issuer: /CN=A9186CDF/serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388
Certificate serial: 081B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
Manifest number: 1041
Signing time: Tue 24 Mar 2026 20:46:40 +0000
Manifest this update: Tue 24 Mar 2026 20:46:40 +0000
Manifest next update: Tue 31 Mar 2026 20:46:40 +0000
Files and hashes: 1: y7RecR9QOMR1deb07gwOjFZ744g.crl (hash: l2o/K3SLQi4BI7OZvoL6vRqXuXjXqpoCl/ZwAtVfw24=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl
rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2075 (0x81b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186CDF, serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388
Validity
Not Before: Mar 24 20:46:40 2026 GMT
Not After : Mar 31 20:46:40 2026 GMT
Subject: CN=69c2f830-ef0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:5d:66:3b:b1:1b:e0:61:b9:b5:ca:1e:5b:
e5:91:d0:15:b9:1d:76:44:b3:5c:aa:00:db:43:85:
64:fa:1d:4b:7b:0a:0e:c7:7d:c5:e8:57:bf:35:a0:
0b:5e:3f:9f:6f:6e:b2:20:51:dc:b0:4d:31:73:95:
0a:e3:ab:3d:0f:b6:07:ac:c4:9b:d4:cf:18:6a:78:
75:e6:75:ae:3f:3d:1e:ad:13:1e:fb:f0:64:df:52:
97:bf:13:4f:f2:65:17:3e:4c:17:1a:ba:1e:7c:12:
85:a9:b1:62:3f:2d:f1:cf:70:e8:94:4b:fa:66:b3:
20:d8:fb:c9:63:38:a3:53:1a:0c:a5:08:51:9c:9e:
b5:77:41:95:b6:83:35:fd:7e:15:da:03:9d:7e:48:
b8:1e:be:d2:87:d2:da:82:ea:9e:66:f8:c9:e9:fb:
2c:30:e9:2b:a6:8a:01:0b:ed:68:71:98:28:0e:7e:
0d:30:b8:26:95:0b:a4:77:2a:e2:98:51:46:67:c3:
ff:77:02:cc:63:ea:28:5b:bd:98:8c:8b:38:c7:a8:
ed:48:b1:b3:e9:06:c6:31:47:e3:53:01:d2:58:20:
08:ef:cf:01:cb:6a:10:3c:fa:ff:86:36:d5:89:66:
86:17:bc:48:0e:89:e5:97:9d:d9:94:d8:7a:80:6c:
e9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:66:15:27:E4:E1:D7:E4:4E:C7:A6:91:66:C2:DD:CF:7F:81:78:24
X509v3 Authority Key Identifier:
keyid:CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:b1:7f:1e:01:72:3e:1d:03:a4:af:2f:29:39:7a:38:a0:82:
85:2d:21:b7:49:f0:45:52:53:fe:b0:9e:d8:b4:48:fb:c5:8b:
e5:e9:d6:48:62:b9:d1:50:30:64:d5:ff:da:9d:cd:71:34:c7:
78:64:9e:33:d6:19:f9:38:fd:29:84:fd:18:ec:6e:c7:97:a7:
b6:e3:97:b3:c6:ae:87:82:b1:4c:4c:27:ef:d9:2f:5a:03:0d:
45:fc:0d:01:ac:d8:79:4b:91:4b:16:be:3c:cc:e6:b7:b6:87:
a3:00:08:aa:04:8b:ed:c9:ce:27:70:c5:a4:54:91:27:64:9d:
33:52:d3:11:f1:2c:0c:a1:36:73:f5:a8:48:5c:1b:89:84:47:
5a:03:48:d5:46:b1:f9:be:2c:39:ef:c4:b8:37:21:a3:10:94:
fe:11:4b:95:71:07:33:c4:d7:1c:68:68:a9:bb:2e:71:19:09:
13:95:79:7d:e0:d3:dd:cf:0a:a7:96:47:d4:5f:80:bd:bc:29:
3a:7a:5b:4a:ef:c8:e9:51:58:99:a0:86:12:eb:58:67:10:98:
fa:db:d9:6e:6c:3b:7e:10:cf:1f:f8:db:09:1c:32:63:4c:c0:
51:06:7d:21:73:73:e4:cf:71:ce:d0:38:42:61:21:93:61:ac:
ca:fb:2a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:18 2026 by rpki-client