
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
File: SL_YCBmvF_vAh15iBvAoIqewTpg.mft (raw, json)
Hash identifier: o2g7F+G977mjmvqordYF3LaXitMuH5KqIukWzfKrvbI=
Subject key identifier: E7:9E:2E:E8:BE:9C:4D:EF:04:86:F7:0A:6A:EF:56:7A:9A:B8:90:BE
Authority key identifier: 48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98
Certificate issuer: /CN=A919EC2D/serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98
Certificate serial: 01CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
Manifest number: 0509
Signing time: Wed 25 Mar 2026 01:53:11 +0000
Manifest this update: Wed 25 Mar 2026 01:53:10 +0000
Manifest next update: Wed 01 Apr 2026 01:53:10 +0000
Files and hashes: 1: SL_YCBmvF_vAh15iBvAoIqewTpg.crl (hash: k79iou5LbYEzRYVkiLD0VZxSHMW9kCDDuUBtB/Waf4w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.crl
rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463 (0x1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EC2D, serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98
Validity
Not Before: Mar 25 01:53:10 2026 GMT
Not After : Apr 1 01:53:10 2026 GMT
Subject: CN=69c34007-87ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8c:89:d9:33:e2:81:28:27:a6:5a:4e:26:bb:
0b:d6:73:b0:b9:12:9b:9b:27:6a:aa:57:99:e5:e4:
c0:e1:0b:79:eb:0b:23:ad:08:e1:12:6d:65:5f:7d:
5d:f1:d9:6c:e2:93:7a:f9:64:2b:4a:0b:d9:3f:73:
41:3e:16:2a:cc:17:79:67:18:0d:c8:3c:83:b9:74:
85:dd:76:0e:d7:8e:79:81:ea:79:5d:c3:79:0c:93:
aa:2a:ab:9f:fe:c4:d2:27:bd:05:99:f6:15:30:96:
91:df:d3:61:76:f0:f7:0a:8c:e4:8d:89:cc:b2:89:
49:d6:f3:f3:87:99:9f:5f:4c:4d:1a:84:2b:73:f0:
b9:98:8a:94:7e:ce:a0:8f:14:85:1f:9c:6c:f6:1c:
9a:dd:81:b4:1c:ca:01:2c:50:fb:34:9f:5b:35:d8:
03:51:65:0c:2b:f8:7a:71:df:45:38:a1:ee:22:39:
93:dd:58:b8:21:15:32:e1:6a:b8:c3:53:f4:17:30:
9b:71:38:31:91:c0:6a:f4:54:e6:23:34:2f:92:6c:
fd:e2:71:32:c5:83:d9:da:c9:26:32:cb:98:98:85:
de:58:f6:ab:c9:87:1b:53:68:4a:a0:1f:f4:4e:13:
d3:56:ed:e7:bc:10:7f:bc:a7:95:7c:a5:f0:1c:d8:
68:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9E:2E:E8:BE:9C:4D:EF:04:86:F7:0A:6A:EF:56:7A:9A:B8:90:BE
X509v3 Authority Key Identifier:
keyid:48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:75:34:a8:7c:1d:fb:14:f6:a5:89:77:75:b4:ce:f0:d8:70:
b1:11:f6:ec:86:6b:5d:9e:a1:17:41:95:d8:8e:21:1a:33:cc:
64:9c:d6:64:fe:0f:82:18:47:a3:41:16:78:2a:97:0a:bb:a2:
e7:29:77:d4:b5:63:27:01:20:33:25:ea:50:27:7a:c1:36:2c:
af:58:8a:8a:7e:2c:c9:97:52:9b:84:d5:9c:b0:4e:3b:9c:d7:
79:47:7f:ba:9b:4b:52:b2:e8:e5:03:63:ff:08:b0:8b:e3:bb:
04:f4:c1:ac:c4:9e:63:b9:b9:2f:a8:5f:69:a9:4e:3d:de:2f:
69:e4:35:71:a3:f3:33:25:9b:7b:48:fd:fb:9b:93:9e:ae:70:
7b:ff:b7:c8:b4:f2:9e:f2:be:46:fa:d5:53:04:f7:1a:69:ef:
1a:b3:ad:ae:15:bf:cc:c1:0a:a6:e2:01:a8:43:04:2c:df:8d:
e8:f3:93:9b:3b:bd:b4:6d:8b:bb:b8:44:83:c9:d6:f1:83:3b:
89:31:2f:73:e1:ae:5e:98:7f:02:1b:36:d2:4b:a0:62:a5:d2:
2e:ff:f2:14:f6:cb:56:2c:05:2a:f8:85:13:fc:dc:bc:ff:6f:
ce:89:7a:14:e6:2b:a8:04:ea:15:43:ba:67:4d:29:fd:e4:12:
16:67:c9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:12:42 2026 by rpki-client