
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft
File: Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft (raw, json)
Hash identifier: nIXxK34gp9ad5n+iej0w8eLI23m/oD+jsjJjafMpoPI=
Subject key identifier: FE:D0:68:59:22:C8:7E:41:85:C0:62:C4:31:3B:3C:BB:09:B6:22:ED
Authority key identifier: 62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04
Certificate issuer: /CN=A9190FEA/serialNumber=627FA9960EA283AA239213CACD37504D2460A104
Certificate serial: 0CE4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft
Manifest number: 0CD1
Signing time: Tue 24 Mar 2026 18:15:24 +0000
Manifest this update: Tue 24 Mar 2026 18:15:23 +0000
Manifest next update: Tue 31 Mar 2026 18:15:23 +0000
Files and hashes: 1: Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl (hash: A2WERT7YZ1UoycK1XHpB21ZuZ8Lu0aAYjft6q68/rBA=)
2: EC7403A0B20711EFAADEFA2CC4F9AE02.roa (hash: Azg5yZbf5Y5bjwiFAjkue69nJWXBVYpeDFXI1xdKjfg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl
rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3300 (0xce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190FEA, serialNumber=627FA9960EA283AA239213CACD37504D2460A104
Validity
Not Before: Mar 24 18:15:23 2026 GMT
Not After : Mar 31 18:15:23 2026 GMT
Subject: CN=69c2d4bc-770f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:d7:53:b0:04:ca:15:fa:64:5f:c0:e8:48:
25:2b:69:b3:31:4c:64:07:49:79:bb:7d:5d:5c:f9:
c2:1f:ae:44:73:a1:9f:e9:fa:db:a5:26:ef:b1:9e:
06:a3:a3:0a:46:7c:36:24:99:6f:d4:4e:0f:d5:aa:
0f:b1:0c:46:18:29:59:4c:d1:67:51:c3:e7:d6:de:
19:f5:6b:9d:65:ef:66:e4:42:d5:81:25:03:7a:42:
34:0a:c6:2f:17:79:26:54:e3:f5:9c:4f:20:04:3c:
fa:b0:46:dd:94:9c:0b:d0:53:47:48:57:7f:6f:e3:
5e:80:ba:c1:6b:0d:43:68:10:69:5c:8c:3c:66:d7:
9e:31:84:53:3d:d4:5f:28:28:f7:7c:f5:2c:61:f5:
96:95:4f:d1:44:12:01:94:db:92:10:df:8d:3f:6c:
b1:2a:82:f4:ad:06:e0:8d:c2:71:25:83:fd:ec:44:
d0:fb:76:32:7b:f8:7f:e6:32:94:83:df:fb:fa:68:
9b:81:32:ab:a2:07:e9:7b:07:a3:77:f0:e1:75:28:
a3:e9:a3:9b:4c:5f:58:46:21:a0:2b:a2:24:73:22:
a0:33:e5:79:27:ff:e8:43:e1:16:42:43:9b:29:cd:
3e:26:86:17:cf:13:34:08:5c:fa:b9:be:fa:09:54:
f5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D0:68:59:22:C8:7E:41:85:C0:62:C4:31:3B:3C:BB:09:B6:22:ED
X509v3 Authority Key Identifier:
keyid:62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:21:69:dd:fb:a8:9a:80:bc:56:4d:a8:1f:82:6a:0c:ea:dc:
70:8f:ac:2f:7b:1a:29:19:00:49:eb:82:0a:7c:05:82:a0:55:
d8:ff:8c:5f:7c:5e:c2:79:cd:01:94:de:83:84:4a:b9:f8:6d:
72:bd:dc:78:46:5b:a1:98:35:f2:cd:23:32:f7:d8:dd:f0:34:
8a:d7:27:04:ac:11:70:27:fe:21:db:b0:e9:1a:11:79:43:c6:
a9:a4:25:74:d8:d4:f8:51:86:27:de:97:54:07:e8:4d:31:c4:
21:f3:ac:c1:d8:22:49:4e:af:13:2b:3b:5f:1c:b5:c0:57:f3:
fb:5a:cd:9a:ad:d4:7f:b9:23:bc:cd:1c:ac:74:c2:c4:e7:6a:
cf:a5:ed:7e:1a:f7:56:e5:06:f3:43:94:3d:60:9f:e3:1a:67:
10:b7:5f:46:30:63:87:f6:f4:5c:01:42:4b:5e:e4:26:ff:fb:
04:40:0c:eb:80:53:45:03:ca:e8:98:4e:2d:1b:6b:40:8a:f4:
b3:66:fe:f6:e7:65:0c:c8:f7:f3:1b:4b:e4:b4:a8:4e:d8:56:
5f:94:37:73:f1:b3:c9:6f:03:91:35:6d:6d:a4:e7:99:01:4f:
47:ab:13:52:2d:16:c4:bf:0f:b8:d8:45:3f:cb:ef:a5:15:82:
a3:90:51:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTBGRUExMTAvBgNVBAUTKDYyN0ZBOTk2MEVBMjgzQUEyMzkyMTNDQUNEMzc1MDRE
MjQ2MEExMDQwHhcNMjYwMzI0MTgxNTIzWhcNMjYwMzMxMTgxNTIzWjAYMRYwFAYD
VQQDEw02OWMyZDRiYy03NzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApkrXU7AEyhX6ZF/A6EglK2mzMUxkB0l5u31dXPnCH65Ec6Gf6frbpSbvsZ4G
o6MKRnw2JJlv1E4P1aoPsQxGGClZTNFnUcPn1t4Z9WudZe9m5ELVgSUDekI0CsYv
F3kmVOP1nE8gBDz6sEbdlJwL0FNHSFd/b+NegLrBaw1DaBBpXIw8ZteeMYRTPdRf
KCj3fPUsYfWWlU/RRBIBlNuSEN+NP2yxKoL0rQbgjcJxJYP97ETQ+3Yye/h/5jKU
g9/7+mibgTKrogfpewejd/DhdSij6aObTF9YRiGgK6IkcyKgM+V5J//oQ+EWQkOb
Kc0+JoYXzxM0CFz6ub76CVT1VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP7QaFki
yH5BhcBixDE7PLsJtiLtMB8GA1UdIwQYMBaAFGJ/qZYOooOqI5ITys03UE0kYKEE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEZFQS8yNDBEQUNFQTBC
NzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2b2praFBLelRkUVRTUmdv
UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1luLXBsZzZpZzZvamtoUEt6VGRRVFNSZ29RUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MEZFQS8yNDBEQUNFQTBCNzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2
b2praFBLelRkUVRTUmdvUVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaiFp3fuomoC8Vk2oH4JqDOrccI+sL3saKRkASeuCCnwFgqBV2P+MX3xewnnN
AZTeg4RKufhtcr3ceEZboZg18s0jMvfY3fA0itcnBKwRcCf+Iduw6RoReUPGqaQl
dNjU+FGGJ96XVAfoTTHEIfOswdgiSU6vEys7Xxy1wFfz+1rNmq3Uf7kjvM0crHTC
xOdqz6Xtfhr3VuUG80OUPWCf4xpnELdfRjBjh/b0XAFCS17kJv/7BEAM64BTRQPK
6JhOLRtrQIr0s2b+9udlDMj38xtL5LSoTthWX5Q3c/GzyW8DkTVtbaTnmQFPR6sT
Ui0WxL8PuNhFP8vvpRWCo5BRTQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:54 2026 by rpki-client