
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
File: yomQiVxPTQ5f49-BWICyA1kPsno.mft (raw, json)
Hash identifier: t6nloBv4H0R8xWcIpYX0LGdAbUqGFHY9qghQd9JMe8Y=
Subject key identifier: 65:3C:39:C6:50:84:BE:58:96:53:A5:37:D4:88:1F:77:6B:9F:18:92
Authority key identifier: CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A
Certificate issuer: /CN=A9194A8C/serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A
Certificate serial: 01F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
Manifest number: 0747
Signing time: Tue 24 Mar 2026 23:04:44 +0000
Manifest this update: Tue 24 Mar 2026 23:04:44 +0000
Manifest next update: Tue 31 Mar 2026 23:04:44 +0000
Files and hashes: 1: yomQiVxPTQ5f49-BWICyA1kPsno.crl (hash: JOkgD0Hu8vIWXFIiY97He1CC7tdqaWx2wPxaOkECoEs=)
2: C885D0C8374B11EEA2157233C4F9AE02.roa (hash: gEivaAocnPzbfGGrI76pBSo4q7wx40/Yh+2RzkOkzLo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl
rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:04:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501 (0x1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194A8C, serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A
Validity
Not Before: Mar 24 23:04:44 2026 GMT
Not After : Mar 31 23:04:44 2026 GMT
Subject: CN=69c3188c-e39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:b9:02:e4:cf:56:f8:5d:80:bf:4e:a8:f0:
d1:87:aa:27:3c:36:c5:eb:f3:ce:3a:5b:cf:61:ed:
69:9a:22:8e:01:c1:30:57:fc:67:65:60:6b:79:bc:
80:65:bf:a6:5e:32:3e:79:73:d7:36:7a:f0:8d:48:
c6:26:78:37:69:82:b8:74:7c:c7:73:e4:ae:af:20:
59:6c:e5:e4:d6:6d:f4:ea:bc:f6:19:e3:75:b4:be:
68:0e:9b:52:aa:9a:9a:6b:f7:61:1d:b5:c6:2e:2b:
8d:92:7b:2c:c2:4e:05:fe:33:a3:aa:8f:e5:1e:f7:
06:35:76:86:e3:ed:d8:e3:5d:6d:f1:26:39:88:ef:
48:62:15:ba:d0:d3:a0:c8:19:ad:c0:7b:52:ce:2e:
70:27:79:aa:42:02:77:49:74:10:8d:6e:07:9b:a2:
a1:53:45:3f:40:d7:5a:19:29:49:f3:17:80:1a:91:
20:02:c6:9b:b7:7f:23:e5:19:bf:27:aa:cb:0a:fa:
cb:15:e8:b0:d7:81:d1:0e:1a:dc:28:bd:ad:ff:4a:
32:31:10:14:48:0c:7a:c9:44:f3:47:5a:68:7a:f2:
36:5d:ea:91:06:8f:9a:86:e9:76:7f:20:f2:79:5d:
56:bc:af:6a:09:45:72:02:0c:15:dc:ce:aa:77:53:
42:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3C:39:C6:50:84:BE:58:96:53:A5:37:D4:88:1F:77:6B:9F:18:92
X509v3 Authority Key Identifier:
keyid:CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:45:24:84:83:89:a8:db:83:86:7e:b7:6a:dc:1f:37:6b:03:
cf:7c:98:98:1b:a0:57:17:20:55:5d:0d:55:15:e7:e9:ee:94:
bc:0d:a7:78:c3:2d:41:df:22:1c:f1:b1:32:4e:97:fa:18:4a:
24:b1:63:b7:dc:ea:15:d8:85:23:55:c5:9a:aa:be:46:c4:48:
00:27:27:7f:07:67:84:bc:ad:ef:a8:2a:bd:77:4b:71:f2:57:
8f:45:48:ee:fc:ab:37:d4:91:68:c5:bb:69:46:0d:9b:04:75:
9b:0d:4a:2a:82:21:e7:ed:35:12:94:85:83:a9:28:91:75:f8:
55:4a:33:ba:2f:3a:a9:11:16:dd:d1:90:cb:22:1c:1b:58:17:
8a:42:af:ea:2d:ff:c9:95:a2:80:7c:23:3d:52:0b:a2:3b:05:
17:84:6a:2d:79:c7:3e:2a:8e:a5:d3:79:17:b2:c5:ed:30:1b:
ab:dc:f4:bf:76:44:6e:e9:fa:88:65:14:be:bd:b1:d7:83:66:
8d:f1:b3:ca:2b:1c:23:a3:ad:31:8f:63:39:45:aa:7f:6a:19:
93:ae:f2:05:4e:bf:35:8a:6f:dc:a9:73:08:30:95:d7:65:13:
2a:d7:28:ea:e1:38:90:0b:b8:fa:16:1d:1e:24:fe:1e:1d:4c:
d5:2d:39:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:30 2026 by rpki-client