
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
File: yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft (raw, json)
Hash identifier: hD7EvtJICG+/ompqAsz0brfHaJ/dx3lUBmcQ8F2/mtA=
Subject key identifier: E4:F5:18:E7:40:41:FA:DB:CD:FE:06:04:E6:B7:2F:B8:A0:E1:94:60
Authority key identifier: C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D
Certificate issuer: /CN=A91A2946/serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
Certificate serial: 45
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
Manifest number: 3D
Signing time: Wed 25 Mar 2026 07:47:51 +0000
Manifest this update: Wed 25 Mar 2026 07:47:51 +0000
Manifest next update: Wed 01 Apr 2026 07:47:51 +0000
Files and hashes: 1: yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl (hash: 4fx0Ud5j0HQ1QGOkdexVuSIyFW+fBqQEHtOSHKLlduk=)
2: 26CABD66DB4011F0B92C4C778FD3641D.roa (hash: 77vlGPsTBdhPDBopo52mzOrA60Cg+50amZ8+PMCNaP0=)
3: 32A734F4DB3411F095EFF1788DD3641D.roa (hash: ZJFUNJfKnHjBTAeh2a4+XncnrcDN+/EtwP1+QA3vw0E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl
rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:47:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2946, serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
Validity
Not Before: Mar 25 07:47:51 2026 GMT
Not After : Apr 1 07:47:51 2026 GMT
Subject: CN=69c39327-7b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:7b:f2:0c:b5:44:2e:0a:ce:ee:c4:2f:c8:43:
18:d7:3e:1b:1a:a0:ac:ac:f6:9c:00:2d:60:61:c4:
a3:6e:de:96:29:3c:e0:73:d2:6a:cc:e3:63:56:3d:
5b:a8:c1:d3:60:65:a3:af:6e:2f:e8:ec:b9:dd:8c:
9a:e9:e0:45:01:74:25:ab:c0:2e:08:bd:a0:de:cf:
14:57:fc:b9:f4:ec:d2:24:12:92:4d:f7:dc:c5:e1:
16:4a:3d:e5:e0:d5:e4:80:b5:f1:77:2c:d0:21:ae:
a7:e9:cb:3c:90:c9:e4:77:67:7c:df:0e:0f:21:8b:
a7:9e:c4:70:da:60:e3:3b:16:ba:53:27:b0:a5:a8:
3e:2f:94:3d:27:9c:ec:d1:fa:7d:43:ac:ba:77:8a:
7f:52:fc:2b:0e:18:8b:14:cb:20:b8:7a:99:62:aa:
6f:bf:0b:7e:b1:d2:0b:1e:b2:e9:05:d7:a1:f5:1a:
c9:df:74:c9:2c:e8:b0:ce:b0:fe:99:a3:ac:22:17:
b4:ec:97:b5:2f:03:7b:22:ca:0c:70:7f:c0:2c:a0:
3b:cc:e2:b8:09:ca:e8:c4:df:2f:7b:73:91:a0:61:
6a:28:ec:4d:90:ab:9a:5b:d5:50:95:8f:b9:2f:b2:
7d:12:70:98:a5:50:68:35:99:69:bd:57:9e:f8:24:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F5:18:E7:40:41:FA:DB:CD:FE:06:04:E6:B7:2F:B8:A0:E1:94:60
X509v3 Authority Key Identifier:
keyid:C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:27:5f:c9:6f:c8:2d:6b:41:53:2b:a9:ef:8b:5a:03:68:ff:
dd:49:78:80:79:61:7b:45:ff:06:17:1c:c9:57:ee:d4:b3:05:
70:c8:2a:2a:1e:c6:de:92:99:41:17:9a:fd:2a:dc:d7:5a:15:
e3:7c:30:06:44:74:c5:f1:b4:54:26:ab:ea:93:2d:e2:28:85:
33:6d:63:0b:e1:d7:58:50:59:04:41:c5:7e:99:ab:8a:72:bd:
59:a0:73:2f:13:9c:f2:3a:82:cd:59:9a:07:42:3b:e6:a9:75:
8f:89:cb:83:ca:0d:1b:b0:05:bd:29:f6:9b:8a:68:14:60:b7:
0e:8e:67:90:9b:d4:80:7d:4f:38:25:db:09:9d:db:60:57:0d:
ab:d8:5f:fd:03:7e:8c:31:7f:23:12:3b:ed:9e:33:9f:e5:39:
4f:23:b7:fa:aa:35:4a:66:63:5e:58:b4:95:e2:80:4f:1d:b4:
cd:c1:08:0d:21:72:dc:eb:ff:4c:0c:d7:b7:9b:d9:38:53:f8:
f6:09:06:fe:48:ce:1a:f2:e4:36:a7:55:cf:45:bb:3d:59:22:
e6:45:94:4f:52:24:4a:08:b6:10:38:34:26:ae:90:bf:66:60:
46:b4:30:39:a8:e6:c9:f7:7d:9e:12:a9:c5:9c:7e:6e:f6:4b:
92:f7:59:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:56:37 2026 by rpki-client