
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
File: yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft (raw, json)
Hash identifier: dsJXsmPyXG+1FxGCvzndcAyjaRWExqx+LxSanv3go44=
Subject key identifier: 6F:51:8C:24:C7:F0:15:2A:7E:A8:5A:2D:9E:51:27:A0:9F:53:7C:1C
Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86
Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986
Certificate serial: 0EDE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
Manifest number: 20B8
Signing time: Tue 24 Mar 2026 17:02:24 +0000
Manifest this update: Tue 24 Mar 2026 17:02:24 +0000
Manifest next update: Tue 31 Mar 2026 17:02:24 +0000
Files and hashes: 1: yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl (hash: OkbU4FwxLysF6dW0I/P8BFSeJoUV/dRrupGktsPcxR8=)
2: 70F15C5CC5CA11EEA9DD0141C4F9AE02.roa (hash: FStnmuvAhEZrbfpobk2t5cZMbtbEpQcJCfPnl30kvn4=)
3: BFD96CC4C5CA11EEBFA07341C4F9AE02.roa (hash: vwjjv+5sqcKmdcJ+2TblUGDFKJ/vFoOagGQtoy9fEng=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl
rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3806 (0xede)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B06C, serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986
Validity
Not Before: Mar 24 17:02:24 2026 GMT
Not After : Mar 31 17:02:24 2026 GMT
Subject: CN=69c2c3a0-fcb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:02:ee:07:cf:62:58:1a:08:94:c9:5b:ba:a2:
a5:90:e7:48:f7:dd:22:d5:99:34:6e:d3:a8:f4:6f:
60:a7:da:f1:b6:2b:96:1c:a0:75:07:fc:09:51:f2:
81:5d:67:44:f0:de:b2:88:40:8c:85:d0:6a:46:77:
37:ac:a1:74:58:e7:06:87:ff:b2:99:a9:71:8a:8c:
01:29:e8:68:3d:ba:be:00:b9:84:00:d8:f2:18:30:
68:d0:74:61:a1:e2:5e:2d:c2:3a:27:17:0d:60:44:
38:d4:51:9d:21:36:7d:3a:bf:02:f0:fc:e2:da:f0:
bc:5c:80:1a:ea:e6:6e:03:d6:d3:5e:7c:c0:97:e7:
8e:1a:0f:61:51:7b:66:18:86:2e:e6:ac:5c:0e:ca:
92:2f:89:e7:0a:fd:59:b0:2d:02:d0:43:42:1f:e2:
2f:78:98:46:51:66:89:58:03:ae:52:f3:82:43:57:
3b:c2:7e:3a:39:c6:44:08:1f:ae:1c:a1:79:49:aa:
bb:e8:cc:4e:34:65:b5:53:8f:0c:ec:03:d3:e4:10:
80:36:a6:93:61:cd:aa:12:89:b6:7e:62:6f:b6:6a:
f2:46:9c:c0:82:3f:23:90:94:ce:fa:9f:3b:cc:0e:
c8:17:45:7b:7f:bc:7c:6a:3a:11:2e:4e:65:9f:27:
2c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:51:8C:24:C7:F0:15:2A:7E:A8:5A:2D:9E:51:27:A0:9F:53:7C:1C
X509v3 Authority Key Identifier:
keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:e6:36:ad:f9:85:66:40:ad:6d:69:19:a4:e8:7a:71:9c:8c:
94:68:af:36:6a:75:1e:dd:3d:e0:55:33:01:9f:bb:12:42:a9:
31:fc:14:61:a6:5f:9c:a6:e7:bd:75:af:5c:52:63:a1:50:1c:
90:f3:f0:d4:6e:85:43:3e:77:ac:74:9a:b5:fa:d1:57:a9:43:
15:53:3e:7b:48:6a:ca:95:14:d6:b1:ef:ce:ea:f0:35:95:58:
74:3e:aa:9f:83:04:f0:f2:ef:c8:36:92:88:91:c1:af:82:36:
4c:d9:46:8b:5f:0f:e2:8d:5f:fd:6a:85:3d:53:5a:11:e0:0e:
5d:73:a3:d9:d5:17:2c:00:ac:5d:5e:9d:d4:a9:51:f2:c0:7e:
f0:7a:43:ac:e7:07:6c:a6:b6:33:8a:d0:08:26:03:10:2b:b7:
5e:f4:b6:b9:d3:0f:eb:08:5b:88:65:54:a4:e5:dc:93:5a:f2:
89:cc:e7:c9:9e:c9:99:93:92:17:a0:1f:9c:cf:1b:36:39:5a:
5a:bc:ab:48:75:35:0c:6e:8f:67:f8:bc:3e:92:4c:ce:9f:dd:
76:fe:44:c5:c7:aa:5d:13:c3:e3:6a:08:2d:a9:a1:a5:5c:9d:
9a:c0:81:8d:4b:e6:52:48:a4:a1:92:ba:9b:98:38:5d:6e:de:
db:2a:a9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:41 2026 by rpki-client