
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
File: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft (raw, json)
Hash identifier: u9P1MKC2Pu77ZixBXVpp8Jrbp+0TtsB9DcVyYoQ658A=
Subject key identifier: CB:34:69:A0:B0:5A:BC:00:50:BA:6E:69:5A:BC:89:A9:1F:04:11:42
Authority key identifier: 60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04
Certificate issuer: /CN=A91BBED0/serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204
Certificate serial: 01CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
Manifest number: 01C6
Signing time: Wed 25 Mar 2026 03:06:11 +0000
Manifest this update: Wed 25 Mar 2026 03:06:10 +0000
Manifest next update: Wed 01 Apr 2026 03:06:10 +0000
Files and hashes: 1: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl (hash: 6u7346nvN1uCxuGd9BrhF8lTo/5HLAPm6YXNPCWqcPE=)
2: 2BA240AC994111F096074C40C4F9AE02.roa (hash: BaVQtlGks/nXODj3nVj6X8TPxl0CNzfAzBCFqERU/qA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl
rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 461 (0x1cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBED0, serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204
Validity
Not Before: Mar 25 03:06:10 2026 GMT
Not After : Apr 1 03:06:10 2026 GMT
Subject: CN=69c35123-2a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:56:0f:d2:dc:13:ee:3d:88:35:5e:66:a2:
68:94:ec:a4:3d:ba:0a:da:d0:9e:3a:21:77:f4:cd:
65:d2:12:01:35:05:cb:4c:67:b2:46:64:e9:09:42:
61:f7:aa:02:70:b3:0d:8f:52:b3:fd:da:00:db:49:
37:ef:e2:95:2d:83:31:1e:a0:4d:98:a4:58:f6:19:
2a:b7:b3:e5:17:07:94:c0:fd:89:57:12:14:98:3c:
d3:cc:f7:bf:c2:c2:01:42:4b:b0:26:54:f2:fc:9e:
31:06:f4:f5:d1:0b:9f:63:32:85:4d:35:b8:16:a9:
64:da:b4:01:24:e5:5d:f5:5b:cd:d4:4d:88:44:24:
5c:96:b7:56:64:8d:25:b6:81:51:42:0c:d7:56:6e:
9f:ac:8e:4b:17:d0:01:2c:c6:3c:21:0c:ad:ba:c7:
83:30:d4:fe:dd:cd:63:00:19:6f:18:02:56:e3:3e:
7c:fb:56:d5:50:70:37:b2:ae:51:82:52:40:a5:9f:
06:71:f3:f2:85:a2:6f:de:2f:11:bb:ff:98:03:87:
5d:83:7b:78:2c:9b:13:54:84:16:37:c7:87:2b:88:
1a:d0:89:7a:44:c8:af:ab:df:24:72:ca:84:8c:81:
f3:ae:38:f7:86:05:14:41:d7:9b:81:76:5f:3b:cb:
1f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:34:69:A0:B0:5A:BC:00:50:BA:6E:69:5A:BC:89:A9:1F:04:11:42
X509v3 Authority Key Identifier:
keyid:60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:02:ca:36:5c:ba:97:ec:bd:e0:80:2b:a1:21:7b:a5:de:ea:
bc:df:1d:56:e5:cc:a7:e2:f1:c4:85:bb:ec:89:19:79:d1:52:
78:6f:d6:0b:39:b0:dd:35:49:f7:ae:ea:73:6e:a5:77:ed:23:
cd:4d:87:d0:b3:5c:90:4a:8e:c9:bb:17:0b:32:99:4f:7a:d5:
e9:e7:7e:bb:b6:cb:73:a2:7b:ac:cd:01:87:43:5d:ec:e8:de:
33:29:07:76:8d:df:5d:a5:2b:ed:39:92:23:6a:6f:48:b7:d8:
e3:97:a6:83:29:56:1d:55:c4:00:12:dc:b6:9f:e3:14:a5:22:
b2:6c:fe:9e:fe:97:d7:39:1b:98:1e:4d:6b:26:0d:d0:d3:87:
cb:50:64:97:91:6b:68:9e:73:01:1e:8e:5f:e7:8e:d5:c2:bf:
b4:9d:0b:6f:56:67:81:b4:27:c2:2e:08:90:db:22:5d:60:58:
66:8e:c2:a2:4e:a1:7f:ae:f0:64:ce:bd:44:c2:33:4b:58:c2:
a9:fa:4a:6a:70:cf:f1:2f:79:86:d3:fc:23:90:c6:22:05:b0:
87:d7:af:cb:71:b1:9e:74:63:6e:1c:86:8a:39:94:a9:91:51:
a1:c1:f1:f5:af:e8:d9:f3:2b:70:10:fa:e8:ce:a7:7a:bf:af:
55:19:e3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:29:48 2026 by rpki-client