
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
File: yRauWpUgtfZ2fnnJFa-hv25JGJk.mft (raw, json)
Hash identifier: UYXI5zDS6duikQXs2yq0AHAk2wEDjnkQGP4eZfAYMfc=
Subject key identifier: 00:C6:6B:93:38:9B:9A:5A:69:81:99:93:81:77:E5:BC:84:97:6C:8B
Authority key identifier: C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99
Certificate issuer: /CN=A9188CC3/serialNumber=C916AE5A9520B5F6767E79C915AFA1BF6E491899
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
Manifest number: E0
Signing time: Wed 25 Mar 2026 05:47:19 +0000
Manifest this update: Wed 25 Mar 2026 05:47:19 +0000
Manifest next update: Wed 01 Apr 2026 05:47:19 +0000
Files and hashes: 1: yRauWpUgtfZ2fnnJFa-hv25JGJk.crl (hash: osNe8eDS5Zxy/nGlyLkxD59UNWtxko7feo/U0UjKlDY=)
2: DAB3F33EDE0B11EF8FDDD043C4F9AE02.roa (hash: eQbhMcfVCqnnMEQW3y+AX59pcmxXQSecxBfWvb0xxOs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.crl
rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:47:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188CC3, serialNumber=C916AE5A9520B5F6767E79C915AFA1BF6E491899
Validity
Not Before: Mar 25 05:47:19 2026 GMT
Not After : Apr 1 05:47:19 2026 GMT
Subject: CN=69c376e7-6891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:55:b2:f5:17:70:c2:22:1e:37:26:6f:98:46:
e6:4a:ed:a0:bf:de:c8:3b:be:7d:2a:98:8e:88:35:
4f:7f:d7:56:9a:75:9c:13:66:3d:d3:f3:96:76:c8:
45:a5:f2:8e:4a:16:75:f6:32:44:a3:b9:c4:73:61:
41:ca:24:cf:d7:2c:05:26:88:ae:67:6e:ac:7c:0d:
f6:39:23:16:66:ea:81:29:57:e9:f5:79:38:7b:e8:
45:70:8a:9c:92:91:f9:b4:9d:99:60:ff:69:89:fe:
63:38:00:2e:93:5d:51:ec:b7:c3:dd:2f:0c:99:f5:
34:f9:0a:2d:b7:12:26:19:60:c4:d8:08:3d:c6:b8:
2d:0d:18:0a:52:2a:7d:3c:82:dc:7f:c1:a3:99:91:
93:02:15:db:b4:ba:45:1c:a9:06:4c:74:0a:1e:2a:
e0:7e:5f:a8:d1:9f:e6:b8:72:ad:49:65:87:21:f2:
bc:e8:86:e6:25:cd:63:1d:bd:35:f1:87:8c:1e:2b:
f8:ec:a7:6b:fb:96:59:1a:39:ac:44:b6:45:98:8f:
8c:2f:d5:39:38:63:d4:b3:85:6e:d1:84:2a:14:b0:
fb:16:56:16:51:94:a8:32:32:ff:42:cf:ad:e0:c1:
3e:c9:08:d0:26:48:26:05:57:ae:16:42:d4:c9:8b:
1d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C6:6B:93:38:9B:9A:5A:69:81:99:93:81:77:E5:BC:84:97:6C:8B
X509v3 Authority Key Identifier:
keyid:C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:58:41:36:1f:ea:cf:90:56:c1:a7:af:c7:32:5e:4c:a9:dc:
91:34:b3:56:6b:04:98:dc:ba:b3:36:4c:30:70:7f:d3:a1:77:
b6:cc:66:b9:3f:2b:0d:16:2c:a2:49:c3:1a:93:58:e4:61:13:
31:3e:9a:73:8b:51:20:35:6b:23:23:58:c6:86:91:dd:bf:18:
de:5b:a1:39:01:a8:93:c5:34:94:81:d2:35:e6:f8:9f:e5:65:
45:aa:66:0c:ee:68:b7:e3:35:36:3b:b2:d1:80:b9:b8:6f:12:
ab:b5:99:2e:c5:30:a4:9f:a7:0f:a3:f1:15:d3:90:31:49:ab:
8b:c5:30:5a:6d:2d:03:fd:36:8a:e3:f8:85:61:96:5c:5c:c0:
7c:03:5c:b6:80:5f:6a:94:b8:f9:98:0d:53:df:bb:e3:c4:73:
96:8d:e2:7f:53:8f:fa:d4:41:7a:fb:c2:1f:5a:75:87:17:c1:
36:31:55:d2:dc:6d:37:4b:a7:e3:ef:6d:16:da:8b:84:56:4c:
0b:5b:d7:2d:b5:f9:31:0c:ed:9b:8b:30:d6:f1:d5:d6:e8:f6:
8e:92:67:cd:14:ea:47:d1:e3:c6:db:cf:35:18:13:79:80:3b:
bb:e6:28:9d:ec:c4:2f:43:f1:96:e1:61:2a:e3:e2:b1:0f:6d:
d6:eb:88:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:20:35 2026 by rpki-client