
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
File: yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft (raw, json)
Hash identifier: LQMV62ov/rcNpZaN4KbQ7o+NLimRAxOY1VOHhYthn1c=
Subject key identifier: E4:E6:3F:D4:A7:50:27:7C:BF:C2:B2:E1:D0:14:3C:51:4A:3F:6C:E7
Authority key identifier: C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A
Certificate issuer: /CN=A91B3558/serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A
Certificate serial: 1111
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
Manifest number: 10F9
Signing time: Thu 26 Mar 2026 17:14:44 +0000
Manifest this update: Thu 26 Mar 2026 17:14:44 +0000
Manifest next update: Thu 02 Apr 2026 17:14:44 +0000
Files and hashes: 1: yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl (hash: o/yaUEpU57gBJAhtIAlWycYFe2TSe1i8s+dodeV8NFA=)
2: 9305EF46716511EFAA44E47BC4F9AE02.roa (hash: 8JBwnhOY779AA3x2T0DvQ6HeyAwp0GHyzlG+8kDJam0=)
3: BAE1D7A8716711EFBF91272AC4F9AE02.roa (hash: SrXwDLxWzlD5Tzz3fVP3ku5wxDt5i+weeTQipTZ19xg=)
4: B9E0D3EA716711EFBF91272AC4F9AE02.roa (hash: GFfQB2074BBNk/2VX1/DPCUmtW00d52BCbE3F4d9xDo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl
rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4369 (0x1111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3558, serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A
Validity
Not Before: Mar 26 17:14:44 2026 GMT
Not After : Apr 2 17:14:44 2026 GMT
Subject: CN=69c56984-56a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:18:6f:b9:e9:03:18:27:5f:fc:6c:8c:8f:
60:c2:13:a2:de:2d:2b:11:45:78:3d:2e:85:71:16:
17:9e:b5:31:25:7c:aa:36:b6:87:f3:e0:e9:a2:82:
14:83:35:1d:17:ff:5c:d8:70:82:53:6e:c3:ae:29:
f5:08:73:22:c9:bd:45:95:4c:43:43:f6:a4:69:d8:
d6:ec:79:86:cb:87:85:75:2f:6b:05:bb:d7:40:46:
09:36:09:15:26:8f:60:b0:85:a8:be:b7:2d:12:f5:
83:d7:26:4c:fa:97:75:40:c3:e1:bb:89:1f:e5:65:
e0:25:4a:12:99:b3:c0:fd:ed:31:3b:5e:20:73:15:
ca:f2:1b:46:4b:84:89:89:10:a5:ca:b2:d6:9b:be:
18:33:e8:32:5c:f9:31:6c:9b:78:36:29:d8:71:b1:
48:75:cb:40:37:73:d3:32:49:c5:47:15:b6:f7:ee:
3a:1b:e8:fe:bd:39:77:e1:0d:dc:3b:54:05:eb:fa:
2f:fe:6f:b1:3a:29:a9:cd:79:60:d7:dd:f4:64:f8:
1d:94:17:ce:86:82:c8:3a:62:f6:e6:8c:7f:04:85:
80:c6:f5:f3:ff:6e:3b:8e:79:6a:0c:55:28:a7:dc:
fe:55:9a:82:8c:02:19:5d:dd:24:21:c1:7e:26:96:
fe:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E6:3F:D4:A7:50:27:7C:BF:C2:B2:E1:D0:14:3C:51:4A:3F:6C:E7
X509v3 Authority Key Identifier:
keyid:C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:87:2b:10:76:74:b7:80:af:db:b5:9c:77:39:1a:3a:07:67:
74:8f:7f:9c:69:59:04:5c:0a:ea:11:e1:0c:ed:32:7d:38:8d:
82:88:a1:8d:75:b8:40:d1:57:14:99:84:9c:2c:07:66:2e:61:
89:b4:b5:10:5c:52:5d:19:55:85:b0:ed:b3:e9:c7:0f:44:16:
8b:ec:6a:b1:ac:ff:cd:d4:52:04:4a:6c:6b:60:76:bf:6f:98:
ea:fb:9b:f5:9b:c1:50:43:f4:20:73:54:1a:a6:ed:6c:68:a9:
cd:05:ed:e1:c2:09:e0:ad:70:0b:4e:ca:e8:19:fe:91:81:43:
b8:6f:4e:f4:fa:7f:55:45:87:88:18:96:d0:24:c1:f0:20:92:
87:06:c3:87:c5:b5:ae:a9:15:31:dd:1e:ef:80:03:fe:9b:5a:
81:e4:2b:08:82:4e:f5:c4:53:4f:96:a3:aa:76:41:e2:31:92:
af:ab:fd:12:95:2c:4a:a4:00:09:61:ed:a9:c4:dd:79:1d:ef:
bf:cd:1c:2f:6c:c5:f3:d1:39:42:95:20:b6:75:01:dc:8b:2c:
00:68:a0:32:c6:4e:ab:12:0b:40:de:5d:af:db:08:e3:d9:d7:
9b:60:78:73:c9:9a:5a:45:7d:97:0b:2e:a1:4a:f8:7c:76:0f:
c4:42:5b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:03:26 2026 by rpki-client