
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
File: YwXctV_RS1x6opSuN8cCdWkvQYA.mft (raw, json)
Hash identifier: JJ8iUJKS2HBjhZ7l1yOqz9oa1WdcnbOg61tng3uZkuI=
Subject key identifier: 4B:B7:78:E9:6D:30:45:92:74:62:C2:E8:1E:69:2C:C3:32:7C:57:FB
Authority key identifier: 63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80
Certificate issuer: /CN=A91A9CD5/serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180
Certificate serial: 0116
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
Manifest number: 0116
Signing time: Wed 25 Mar 2026 05:02:24 +0000
Manifest this update: Wed 25 Mar 2026 05:02:24 +0000
Manifest next update: Wed 01 Apr 2026 05:02:24 +0000
Files and hashes: 1: YwXctV_RS1x6opSuN8cCdWkvQYA.crl (hash: RL5d1OdBb+Bzuhl73Vt4Tmw+1HJlg5j5VImYLLPhAdM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl
rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9CD5, serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180
Validity
Not Before: Mar 25 05:02:24 2026 GMT
Not After : Apr 1 05:02:24 2026 GMT
Subject: CN=69c36c60-6a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c5:4d:27:01:45:b7:c7:b2:bd:85:56:33:12:
d4:03:11:6f:5d:5e:30:a9:09:42:a9:2f:09:86:47:
d4:24:0b:9b:b9:2f:08:31:56:f4:66:c9:4c:a6:c7:
4b:9e:9e:0f:79:ff:34:6f:8b:c5:04:c6:d4:40:c3:
7a:56:fa:ab:2f:cc:5b:0c:48:57:1a:27:03:66:3c:
f8:e9:12:50:42:bd:30:0a:db:eb:17:98:38:f0:11:
f1:ac:3c:9c:d2:4c:a8:28:40:57:a4:6f:48:dd:ec:
bf:29:a8:a7:dd:0c:67:49:b5:d5:5e:c3:59:a1:76:
8a:fe:07:4c:02:9a:f7:47:f7:dd:56:ca:81:2e:2c:
0d:75:e9:f9:ef:d5:58:18:ab:5a:02:d1:69:d2:9a:
60:b4:d8:d1:bd:ed:0e:b2:45:98:99:cb:1d:b8:cf:
3b:35:3f:4c:02:14:88:f4:0a:37:2b:54:ce:63:18:
27:b5:b1:fe:50:bf:78:86:15:af:a0:0f:6a:78:ff:
68:51:16:22:4f:5c:5a:a8:f6:8e:69:0d:14:2d:e2:
d8:1a:9e:99:fb:7b:ff:7c:35:c0:ea:87:dd:69:f8:
11:34:d6:5e:62:23:39:8d:d0:27:73:9f:50:a6:f5:
a9:30:13:66:24:d1:18:37:50:e2:75:26:73:ed:9a:
0e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B7:78:E9:6D:30:45:92:74:62:C2:E8:1E:69:2C:C3:32:7C:57:FB
X509v3 Authority Key Identifier:
keyid:63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:fc:3b:3b:90:96:7d:52:2d:59:3a:00:71:61:90:3f:d1:ff:
a4:76:cd:0d:22:41:f6:4b:07:48:be:f1:37:54:24:8f:9d:f1:
4c:7a:ae:60:97:5f:1f:31:ef:02:62:0a:d3:f2:7c:4a:9b:ce:
99:49:80:22:aa:0d:d5:fb:ce:1d:76:b3:5b:96:2c:98:41:50:
bb:d6:27:14:44:5f:d0:6e:33:91:a3:21:39:a6:ea:d2:d2:7f:
91:b0:e2:10:44:58:f0:4f:e9:76:7d:a4:7b:40:5e:56:5a:6b:
26:3a:aa:d2:da:5e:30:68:36:78:2c:3b:2e:97:ef:5e:51:b4:
a0:0e:39:92:6e:91:0f:7b:cf:e1:ad:db:0f:de:71:f4:52:fd:
51:ad:37:24:ac:39:80:2b:17:24:05:e9:52:f6:15:ec:43:64:
5a:fc:50:9b:be:4c:ce:95:68:41:88:1b:7e:9d:19:96:ce:54:
d8:84:5e:68:13:91:2d:b2:25:d4:cd:16:fc:55:8e:81:11:e4:
76:98:9a:24:52:97:03:2c:f7:e4:49:3a:26:b0:42:d2:51:e0:
06:bf:13:9b:a9:34:b5:c7:17:b1:c9:58:a2:74:78:73:a2:6e:
fa:18:cd:ab:66:e7:99:82:04:98:bf:15:69:8d:8d:00:8b:e3:
30:c8:89:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:43:56 2026 by rpki-client